05-15-2013 02:06 PM
Has anyone noticed that if a user backs up their phone using iTunes, they can restore corporate email to an iPhone? Let's say that on your UDS email profile you have limited the sync time to 30 days of mail. This means your user will have access to up to 30 days of email and calendar entries plus contacts. Also, up to 30 days back of email is available on any backup that iTunes is storing.
Is there any way to keep IOS/iTunes/iCloud from backing up a UDS protected email profile?
05-15-2013 03:20 PM
One more thing to note: The restoration of the iPhone device DOES restore certificates and other MDM settings that were configured during the initial setup of the BES 10 client for iPhone.
We have quarantine enabled on Exchange 2010 so the device was blocked at that point. But, since it is a current employee, I allowed the phone through the quarantine to test this scenario. She said she was asked for her network password after the restore. After I allowed her through the quarantine she started receiving email. I looked on her iphone and when I clicked the BES 10 client app, it was not configured. I deleted her account from the UDS server and she is still receiving email.
I really wish there was a way to keep these IOS profiles (which contain the mdm cert, root cert, mail server, username, etc.) from being backed up to iTunes or iCloud. Also, it seems super strange that the account can be deleted from UDS and the app not configured on her phone but mail still flows.
07-05-2013 08:36 AM
07-08-2013 10:23 AM
I have not heard of this Secure Workspace. I have BES 10 UDS 126.96.36.199 installed (no BDS). It looks like Secure Workspace was under a beta release. Maybe it's out now.... Maybe it will be included with the next release of BES 10 UDS.....
07-10-2013 09:08 AM
Secure Work Space is part of BES 10.1.1 which was released a couple of weeks ago. If you are still running the older Mobile Fusion product you would need to update your installation to BES 10 (which would be free).
Note that separate licenses are required for the Secure Work Space component, and that they are based on an annual per-device subscription.
Lots of info on BES 10 in the BES10 Forums (just look under Business Support Forums above).