User Guide

Preface iPhone in the Enterprise 9
The Exchange policy to require device encryption (RequireDeviceEncryption) is
supported on iPhone 3GS, and on iPod touch (Fall 2009 models with 32 GB or more).
iPhone, iPhone 3G, and other iPod touch models do not support device encryption and
will not connect to an Exchange Server that requires it.
If you enable the policy “Require Both Numbers and Letters” on Exchange 2003, or the
policy “Require Alphanumeric Password” on Exchange 2007, the user must enter an
iPhone passcode that contains at least one complex character.
The value specified by the inactivity time policy (MaxInactivityTimeDeviceLock or
AEFrequencyValue) is used to set the maximum value that users can select in both
Settings > General > Auto-Lock and Settings > General > Passcode Lock > Require
Passcode.
Remote Wipe
You can remotely wipe the contents of an iPhone or iPod touch. Doing so removes all
data and configuration information from the device, then the device is securely erased
and restored to original, factory settings.
Important: On iPhone and iPhone 3G, wiping overwrites the data on the device and
can take approximately one hour for each 8 GB of device capacity. Connect the device
to a power supply before wiping. If the device turns off due to low power, the wiping
process resumes when the device is connected to power. On iPhone 3GS, wiping
removes the encryption key to the data (which is encrypted using 256-bit AES
encryption) and occurs instantaneously.
With Exchange Server 2007, you can initiate a remote wipe using the Exchange
Management Console, Outlook Web Access, or the Exchange ActiveSync Mobile
Administration Web Tool.
With Exchange Server 2003, you can initiate a remote wipe using the Exchange
ActiveSync Mobile Administration Web Tool.
Users can also wipe a device in their possession by choosing “Erase All Content and
Settings” from the Reset menu in General settings. Devices can also be configured to
automatically initiate a wipe after several failed passcode attempts.
If you recover a device that was wiped because it was be lost, use iTunes to restore it
using the device’s latest backup.
Microsoft Direct Push
The Exchange server delivers email, contacts, and calendar events to iPhone
automatically if a cellular or Wi-Fi data connection is available. iPod touch doesn’t have
a cellular connection, so it receives push notifications only when it’s active and
connected to a Wi-Fi network.