User Guide

20 Chapter 1 Deploying iPhone and iPod touch
An easy way to distribute subscribed calendars to your users is to send the fully
qualified URL using SMS or email. When the user taps the link, iPhone offers to
subscribe to the specified calendar.
Enterprise Applications
If you’re planning to deploy enterprise iPhone and iPod touch applications, you install
the applications on your devices using iPhone Configuration Utility or iTunes. Once you
deploy an application to users’ devices, updating those applications will be easier if
each user has iTunes installed on their Mac or PC.
Online Certificate Status Protocol
When you provide digital certificates for iPhone, consider issuing them so they are
OCSP-enabled. This allows the device to ask your OCSP server if the certificate has been
revoked before using it.
Determining Device Passcode Policies
Once you decide which network services and data your users will access, you should
determine which device passcode policies you want to implement.
Requiring passcodes to be set on your devices is recommended for companies whose
networks, systems, or applications don’t require a password or an authentication token.
If you’re using certificate-based authentication for an 802.1X network or Cisco IPSec
VPN, or your enterprise application saves your login credentials, you should require
users to set a device passcode with a short timeout period so a lost or stolen device
cannot be used without knowing the device passcode.
Policies can be set on iPhone and iPod touch in one of two ways. If the device is
configured to access a Microsoft Exchange account, the Exchange ActiveSync policies
are wirelessly pushed to the device. This allows you to enforce and update the policies
without any action by the user. For information about EAS policies, see “Supported
Exchange ActiveSync Policies” on page 8.
If you don’t use Microsoft Exchange, you can set similar policies on your devices by
creating configuration profiles. If you want to change a policy, you must post or send
an updated profile to users or install the profile using iPhone Configuration Utility. For
information about the device passcode policies, see “Passcode Settings” on page 33.
If you use Microsoft Exchange, you can supplement your EAS policies by also using
configuration policies. This can provide access to policies that aren’t available in
Microsoft Exchange 2003, for example, or allow you to define policies that are
specifically for iPhone.