Declaring settings.
WHAT A PROFILE IS
A signed file containing settings applied to a device.
WHAT THEY CAN CONFIGURE
Network settings, including wireless and virtual private networks Email and calendar accounts Passcode requirements Restrictions Certificates Privacy consents, in managed environments Software update behaviour
WHY THAT PRIVACY POINT MATTERS
It allows granting consents that would otherwise require each user to approve them individually.
HOW THEY ARE DELIVERED
Through a management server, or installed manually.
WHAT SIGNING PROVIDES
Assurance of origin, and the profile appearing as verified.
WHAT TO BE CAREFUL WITH
Profiles from untrusted sources.
WHY
A malicious profile can install certificates permitting interception of traffic.
WHAT TO CHECK ON ANY DEVICE
Which profiles are installed, and who issued them.
WHAT DECLARATIVE MANAGEMENT ADDS
Devices applying and maintaining a declared state themselves, rather than waiting for instructions.
WHY THAT IS BETTER
It works when the device is offline, and reduces server dependence.
WHAT TO DOCUMENT
Every profile deployed and what it changes.
