Results 1 to 4 of 4

Thread: [SOLVED] iPhone provisioning with ZCS6

  1. #1
    Dirk's Avatar
    Dirk is offline Moderator
    Join Date
    May 2006
    Location
    England.
    Posts
    927
    Rep Power
    10

    Default [SOLVED] iPhone provisioning with ZCS6

    I notice that in the preferences section of the web client, a new 'Mobile Devices' sections shows up, listing my iPhone and stating 'needs provisioning'

    I assume that once provisioned, remote wipe will be possible.
    So I installed the iPhone Configuration Utility and made a mobileconfig that would configure the mail settings and deployed it to the phone.

    The phone still shows as unprovisioned though. I see a "configuration profiles" and "provisioning profiles" in the apple utility, but cant workout how to convert the config profile I've made, into the needed provisioning profile.

    Has anyone done this?
    Or, given the new code in zimbra, how what method does zimbra want me to do to change the "needs provisioning" message to "Provisioned OK" ?

  2. #2
    Dirk's Avatar
    Dirk is offline Moderator
    Join Date
    May 2006
    Location
    England.
    Posts
    927
    Rep Power
    10

    Default

    It turns out that I needed to delete the phone from the web client, enable mobile profiles in the admin console and then redeploy the phone.

    It then shows as provisioned and I have a remote wipe button. I'll grab my spare iphone later and test this out on that, I dont fancy killing my main phone!

  3. #3
    ewilen's Avatar
    ewilen is offline Moderator
    Join Date
    Jun 2008
    Location
    Berkeley, CA
    Posts
    1,474
    Rep Power
    9

    Default

    Quote Originally Posted by Dirk View Post
    It turns out that I needed to delete the phone from the web client, enable mobile profiles in the admin console and then redeploy the phone.
    This is good, also note that as of 6.0.5, you don't have to delete the phone from the web client.

    However, I'd like to give my users the peace of mind of knowing that they can perform a remote wipe if necessary, without forcing any policies on them. In particular, I don't want to impose an auto-wipe after incorrect pin inputs no matter how many times they get their PIN/password wrong.

    Does anyone know how for sure to do this? I don't care to test by setting my value (zimbraMobilePolicyMaxDevicePasswordFailedAttempts) to zero and then have my device immediately wipe itself.

    Failing that, is there a known maximum value for that property? I've just confirmed via zmprov that I have zimbraMobilePolicyMaxDevicePasswordFailedAttempts at 999999999, but I would like to be sure of the maximum that system can really handle.

  4. #4
    ewilen's Avatar
    ewilen is offline Moderator
    Join Date
    Jun 2008
    Location
    Berkeley, CA
    Posts
    1,474
    Rep Power
    9

    Default

    See Bug 36978 - Expose Mobile Policy Information to Admins.

    At the moment, the only sure way of disabling auto-wipe is to turn off "Force pin on device" (in zmprov, zimbraMobilePolicyDevicePasswordEnabled: FALSE).

    Also, the ActiveSync spec says that if you set maximum failed password attempts before wipe, it must take a value between 4 and 16. Zimbra doesn't seem to enforce this, but I think it's prudent to only enter legal values. (I don't know what a given device will do if Zimbra sends it an illegal value.)
    Last edited by ewilen; 05-04-2010 at 04:43 PM.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. iPhone 2.0 Battery Life and ActiveSync (Bug 29903)
    By Jason Hung in forum Zimbra Mobile
    Replies: 44
    Last Post: 08-19-2008, 02:02 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •