Enterprise Deployment Manual

20 Chapter 1 Deploying iPhone and iPod touch
Subscribed Calendars
If you want to publish read-only calendars of corporate events, such as holidays or
special event schedules, iPhone OS devices can subscribe to calendars and display the
information alongside Microsoft Exchange and CalDAV calendars. iPhone OS works
with calendar files in the standard iCalendar (.ics) format.
An easy way to distribute subscribed calendars to your users is to send the fully
qualified URL in SMS or email. When the user taps the link, the device offers to
subscribe to the specified calendar.
Enterprise Applications
To deploy enterprise iPhone OS applications, you install the applications on your
devices using iPhone Configuration Utility or iTunes. Once you deploy an application to
users’ devices, updating those applications will be easier if each user has iTunes
installed on their Mac or PC.
Online Certificate Status Protocol
When you provide digital certificates for iPhone OS devices, consider issuing them so
they’re OCSP-enabled. This allows the device to ask your OCSP server if the certificate
has been revoked before using it.
Determining Device Passcode Policies
Once you decide which network services and data your users will access, you should
determine which device passcode policies you want to implement.
Requiring passcodes to be set on your devices is recommended for companies whose
networks, systems, or applications don’t require a password or an authentication token.
If you’re using certificate-based authentication for an 802.1X network or Cisco IPSec
VPN, or your enterprise application saves your login credentials, you should require
users to set a device passcode with a short timeout period so a lost or stolen device
cannot be used without knowing the device passcode.
Policies can be set on iPhone, iPod touch, and iPad in either of two ways. If the device is
configured to access a Microsoft Exchange account, the Exchange ActiveSync policies
are wirelessly pushed to the device. This allows you to enforce and update the policies
without any user action. For information about EAS policies, see “Supported Exchange
ActiveSync Policies” on page 8.
If you don’t use Microsoft Exchange, you can set similar policies on your devices by
creating configuration profiles. If you want to change a policy, you must post or send
an updated profile to users or install the profile using iPhone Configuration Utility. For
information about the device passcode policies, see “Passcode Settings” on page 32.