User Guide

Chapter 2 Creating and Deploying Configuration Profiles 43
Removing and Updating Configuration Profiles
Configuration profile updates aren’t pushed to users. Distribute the updated profiles to
your users for them to install. As long as the profile identifier matches, and if signed, it
has been signed by the same copy of iPhone Configuration Utility, the new profile
replaces the profile on the device.
Settings enforced by a configuration profile cannot be changed on the device.
To change a setting, you must install an updated profile. If the profile was signed, it
can be replaced only by a profile signed by the same copy of iPhone Configuration
Utility. The identifier in both profiles must match in order for the updated profile
to be recognized as a replacement. For more information about the identifier, see
“General Settings” on page 31.
Important: Removing a configuration profile removes policies and all of the Exchange
account’s data stored on the device, as well as VPN settings, certificates, and other
information, including mail messages, associated with the profile.
If the General Settings payload of the profile specifies that it cannot be removed by
the user, the Remove button won’t appear. If the settings allows removal using an
authorization password, the user will be asked to enter the password after tapping
Remove. For more information about profile security settings, see “General Settings” on
page 31.