Apple iOS Configuration - Revision history

Chris: I have the instructions for installing the decryption certificate on the latest apple Ios.

2024-04-02T13:50:53Z

I have the instructions for installing the decryption certificate on the latest apple Ios.

← Older revision		Revision as of 14:50, 2 April 2024
Line 9:		Line 9:

	* Launch Safari and browse to https://''<your Opendium host name>''/opendium.crt or scan the QR code that is displayed on the [[Web]] tab.		* Launch Safari and browse to https://''<your Opendium host name>''/opendium.crt or scan the QR code that is displayed on the [[Web]] tab.
	* ~~Tap ''Install''~~ and ~~enter~~ the ~~device's passcode~~.		* A message pops up and asks if you want to allow the profile, click Allow.
	* A ~~warning will be shown~~ that ~~the certificate~~ will ~~be added~~ to ~~the list of trusted certificates. Tap~~ ''~~Install~~.''		* A message comes up that says you will need to install this profile through settings''.''
	* ~~A confirmation~~ will be ~~shown indicating that~~ the ~~certificate was installed~~. ~~Tap ''Done~~.''		* Navigate to settings and there should be a Profile Downloaded section click this, this will disappear after 8 minutes and be deleted if not used, only 1 profile can be accessed in this way at a time(it will always be the most recent profile downloaded).
			* Click the install option in the top right corner of the profile and follow the install wizard for the profile.
	* On iOS 10.3 and above, go to Settings > General > About > Certificate Trust Settings and enable full trust for the Opendium certificate. This step is not required for earlier versions of iOS.		* On iOS 10.3 and above, go to Settings > General > About > Certificate Trust Settings and enable full trust for the Opendium certificate. This step is not required for earlier versions of iOS.

Chris: Removed "Ensure that a lock screen PIN is configured on the Android device" from Apple iOS Configuration page.

2024-02-26T11:21:10Z

Removed "Ensure that a lock screen PIN is configured on the Android device" from Apple iOS Configuration page.

← Older revision		Revision as of 12:21, 26 February 2024
Line 8:		Line 8:
	If the network's [[Web: Permissions & Limits#HTTPS%20decryption\|HTTPS Decryption]] mode is set to ''Active'', you must install your unique Opendium inspection certificate, either through an MDM or:		If the network's [[Web: Permissions & Limits#HTTPS%20decryption\|HTTPS Decryption]] mode is set to ''Active'', you must install your unique Opendium inspection certificate, either through an MDM or:

	* Ensure that a lock screen PIN is configured on the Android device
	* Launch Safari and browse to https://''<your Opendium host name>''/opendium.crt or scan the QR code that is displayed on the [[Web]] tab.		* Launch Safari and browse to https://''<your Opendium host name>''/opendium.crt or scan the QR code that is displayed on the [[Web]] tab.
	* Tap ''Install'' and enter the device's passcode.		* Tap ''Install'' and enter the device's passcode.

Steve: Created page with "== One-to-one devices == This section covers devices which are always used by the same user, such as devices deployed in a one-to-one arrangement or bring your own device. Scroll down for information regarding shared devices. * If possible, configure your wireless network to use 802.1x (WPA-Enterprise) authentication and to RADIUS#Linking%20a%20network%20access%20controller%20to%20the%20Opendium%20system|send RADIUS accounti..."

2022-10-13T10:53:38Z

Created page with "== One-to-one devices == This section covers devices which are always used by the same user, such as devices deployed in a one-to-one arrangement or bring your own device. Scroll down for information regarding shared devices. * If possible, configure your wireless network to use 802.1x (WPA-Enterprise) authentication and to RADIUS#Linking%20a%20network%20access%20controller%20to%20the%20Opendium%20system|send RADIUS accounti..."

New page

== One-to-one devices ==
This section covers devices which are always used by the same user, such as devices deployed in a one-to-one arrangement or bring your own device. Scroll down for information regarding [[Apple iOS Configuration#Shared devices|shared devices]].

* If possible, configure your wireless network to use 802.1x (WPA-Enterprise) authentication and to [[RADIUS#Linking%20a%20network%20access%20controller%20to%20the%20Opendium%20system|send RADIUS accounting data]] to the Opendium system. Set the [[Web: Permissions & Limits#User%20identification|User Identification]] mode to ''RADIUS''. If 802.1x authentication cannot be used, Set the [[Web: Permissions & Limits#User%20identification|User Identification]] mode to ''Single User Devices''.
* If you are using 802.1x and RADIUS accounting, log the device onto the network with the user's credentials.
* If you are not using 802.1x and RADIUS accounting, the user must use the captive portal to authenticate. iOS devices can automatically log in to the captive portal using the WISPr protocol whenever the device reconnects to the network.

If the network's [[Web: Permissions & Limits#HTTPS%20decryption|HTTPS Decryption]] mode is set to ''Active'', you must install your unique Opendium inspection certificate, either through an MDM or:

* Ensure that a lock screen PIN is configured on the Android device
* Launch Safari and browse to https://''<your Opendium host name>''/opendium.crt or scan the QR code that is displayed on the [[Web]] tab.
* Tap ''Install'' and enter the device's passcode.
* A warning will be shown that the certificate will be added to the list of trusted certificates. Tap ''Install.''
* A confirmation will be shown indicating that the certificate was installed. Tap ''Done.''
* On iOS 10.3 and above, go to Settings > General > About > Certificate Trust Settings and enable full trust for the Opendium certificate. This step is not required for earlier versions of iOS.

== Shared Devices ==
This section covers devices which are shared between multiple users (one user logged in at a time), such as devices that are free for any student to use.

* Configure your wireless network to use 802.1x (WPA-Enterprise) authentication and to [[RADIUS#Linking%20a%20network%20access%20controller%20to%20the%20Opendium%20system|send RADIUS accounting data]] to the Opendium system.
* Set the [[Web: Permissions & Limits#User%20identification|User Identification]] mode to ''RADIUS''.
* Log the device onto the network with a user name that starts with "op-shared-". For example, "op-shared-tablet". This user must exist on the Opendium system.
* The user must use the captive portal to authenticate.
* When the user has finished with the device, they must disconnect from the wifi (i.e. turn wifi off on the device, shut down the device, or place the device in a shielded box/cupboard).

If the network's [[Web: Permissions & Limits#HTTPS%20decryption|HTTPS Decryption]] mode is set to ''Active'', you must install your unique Opendium inspection certificate. This is usually done through your MDM system.

Shared devices cannot be supported on networks which do not support 802.1x and RADIUS accounting. If your network cannot support 802.1x, the only option is to disable [[Web: Permissions & Limits#User%20identification|User Identification]].
[[Category:Client Configuration]]