Can TEM do anything to prevent or alert on an IOS backup to a PC?

Usage and Config MDM
1

(imported topic written by SystemAdmin)

Hello,

We are evaluating an application which would access highly sensitive data. The iPads would be fully managed and locked down to the

extent possible. One concern is about unauthorized backups of the iPad to a PC. Is TEM able to either (a) prevent IOS backups to

an unauthorized PC or (b) at least create an alert that a new backup was created.

Thanks,

Bill Rippon

2

(imported comment written by BenKus)

Hi Bill,

Yes. You can do one of two things:

  1. Restrict backups (for to iCloud or to a local computer) for the whole device.

  2. Restrict backups for a specific app.

To see more info, take a look at the “Restrictions” section of the iOS profile creation dashboard. Also, you can select the backup options when you select an app to deploy.

Ben

3

(imported comment written by SystemAdmin)

Ben,

Thanks for the response. I have a follow-up related to how someone could easily get around this.

So couldn’t someone simply delete the profile … establish the backup… and then restore the

profile?

Thanks,

Bill Rippon

4

(imported comment written by BenKus)

Hi Bill,

Yes. The behavior you note is built-in to Apple.

We can enforce that the user cannot remove the restriction profile, but Apple enforces that the user can always remove the MDM profile (which will remove all the profiles that we added).

To gain complete control of the device (so the user cannot remove the profiles), you will need to use the Apple “Supervise mode”. See here

https://www.ibm.com/developerworks/forums/thread.jspa?messageID=14889579&#14889579

Ben