Reinstalling Native iOS Applications

Question

Created Jan ’22

Replies 2

Boosts 0

Participants 3

Hello, I am currently attempting to see if I can reinstall default iOS applications (think mail and safari), in order to apply a Per App VPN to them. I have been able to generate the payload below, which does seem to have an effect, however on my test device, it requests that Iog into iTunes. According to documentation found here, setting the management flag to one should allow me to reinstall first-party apps without doing this.

I should add that I do not have Safari in my VPP licence at the moment, is this behaviour expected as a result of this and I need to add Safari to my VPP licence, or am I missing something in the install application command?

Regards

<?xml version="1.0" encoding="UTF-8"?> <plist version="1.0"> <dict> <key>CommandUUID</key> <string>17b0d8f0-e3e3-4cd3-be13-d4c93a42ba0b</string> <key>Command</key> <dict> <key>RequestType</key> <string>InstallApplication</string> <key>ManagementFlags</key> <integer>1</integer> <key>Attributes</key> <dict> <key>VPNUUID</key> <string>c8975b8e-eeb6-49ce-92bf-47e528e31764</string> </dict> <key>Identifier</key> <string>com.apple.mobilesafari</string> <key>InstallAsManaged</key> <true /> <key>ChangeManagementState</key> <string>Managed</string> </dict> </dict> </plist>

Boost

Answer 1

Engineer OP

Apple

Jan ’22

Hi there, you cannot manage first party apps. For Mail you want to use the Per-Account VPN option. You'll want to add the VPNUUID key to the Mail payload that will match the VPNUUID in the AppLayerVPN payload. For Safari you can define the domains that you want to go over the VPN with the SafariDomains key in the AppLayerVPN payload.

0

Answer 2

Device Management Engineer OP

Apple

Jan ’22

The reason the device is prompting for an iTunes account is because the MDM command posted above is missing the purchase method. It will default to 0 if no purchase method is defined.

Please add this to the request:

<key>Options</key>
<dict>
	<key>PurchaseMethod</key>
	<integer>1</integer>
</dict>

0