Distribute Apple apps 编辑

Endpoint Management manages apps deployed to devices. You can organize and deploy the following types of iOS/iPadOS and macOS apps.

• Public App Store (iOS/iPadOS only): These apps include free or paid apps available in a public app store, such as the Apple App Store or Google Play. For example, GoToMeeting.
• Enterprise (iOS/iPadOS/macOS): Native apps that aren’t MDX-enabled and don’t contain the policies associated with MDX apps.
• MDX (iOS/iPadOS only): Apps prepared with the MAM SDK or wrapped with the MDX Toolkit. These apps include MDX policies. You get MDX apps from internal sources and public stores.
• Volume purchase (iOS/iPadOS/macOS): Apps with licenses managed through the Apple volume purchase program.
• iOS custom apps (iOS/iPadOS only): Proprietary business-to-business apps developed in-house or by a third-party.

For more information about different types of apps, see Add apps.

Some deployments require an Apple Business Management (ABM) or Apple School Management (ASM) account. See the following sections for more information.

For each type of app and distribution method, Citrix recommends a set of configuration practices. For information about distributing apps for other platforms, see Add Apps. The following sections provide more in depth information for iOS app configuration.

General steps for app distribution

Public app store apps

You can add free and paid apps available on the App Store to Citrix Endpoint Management.

Step 1: Add and configure apps

1. In the Endpoint Management console, navigate to Configure > Apps. Click Add.
2. Click Public App Store.
3. Select iPhone or iPad for platforms
4. Type the app name in the search box and click Search.
5. Apps matching the search criteria appear. Click the desired app.
6. Assign a delivery group to the app and click Save.

Step 2: Configure app deployment

1. In the Endpoint Management console, navigate to Configure > Apps.
2. Select the app you want to configure and click Edit.
3. Citrix recommends enabling the Force app to be managed feature.
4. Assign any delivery groups and click Save.
5. Navigate to Configure > Delivery Groups and click Add.
6. In the Apps section, drag the desired apps to the Required Apps box.
7. Navigate back up to Configure > Delivery Groups.
8. Select the delivery group and click Deploy.
9. Users receive a request to install the app and the app installs in the background after they accept.

Public app store apps delivered with Apple volume purchase

You can manage iOS/iPadOS app licenses through the Apple volume purchase program. Follow these steps to add volume purchase apps to Endpoint Management.

Step 1: Link accounts

1. Set up and enroll in Apple Business Manager (ABM) or Apple School Manager (ASM). For more information about these programs, see Apple documentation.
2. Link your ABM/ASM account with Endpoint Management. For more information on linking volume purchase accounts, see Apple Volume Purchase.

3. When you add your volume purchase account, enable App Auto Update. This setting ensures that apps on user devices automatically update when an update appears in the Apple store. If an app has the Force app to be managed setting enabled, it updates without prompting the user. The update happens regardless of whether the app is required or optional.

   To use the Force app to be managed and App Auto Update settings, enable the apple.app.force.managed server property. See Server properties.

Step 2: Get apps and licenses from Apple

Purchase apps on your ABM/ASM account. You can make purchases in Apple Books (for iOS/iPadOS only) and the Apple App Store. Keep in mind that you must purchase all apps, even if they are free. Once you purchase licenses on ABM/ASM, Endpoint Management shows the app automatically.

For information about how to make apps available to your business, see Apple documentation.

Step 3: Configure app deployment

1. In the Endpoint Management console, navigate to Configure > Apps.
2. Select the volume purchase app you want to configure and click Edit.
3. Select the platforms: iPhone, iPad, or macOS.
4. Citrix recommends enabling the Force app to be managed feature (iOS/iPadOS only).
5. Assign any delivery groups and click Save.
6. Navigate to Configure > Delivery Groups and click Add.
7. In the Apps section, drag the desired apps to the Required Apps box.
8. Navigate back to Configure > Delivery Groups.
9. Select the delivery group and click Deploy.
10. Users receive a request to install the app and the app installs in the background after they accept.

Enterprise apps

You can also add native apps that don’t have any MDX policies associated with them. Follow these steps to add apps that don’t exist on the App Store.

Step 1: Add and configure apps

1. In the Endpoint Management console, navigate to Configure > Apps. Click Add.
2. Click Enterprise.
3. On the App information page, configure the following:
   • Name: Type a descriptive name for the app. The name appears under App Name on the Apps table.
   • Description: Type an optional description of the app.
   • App category: Optionally, in the list, click the category to which you want to add the app.
4. Click Next. The App Platforms page appears.
5. Select the platforms: iPhone, iPad, or macOS.
6. Upload the IPA file (iOS/iPadOS) or upload the PKG file (macOS)
7. Click Next. The App details page appears.
8. Configure these settings:
   • File name: Optionally, type a new name for the app.
   • App description: Optionally, type a new description for the app.
   • App version: You can’t change this field.
   • Minimum OS version: Optionally, type the oldest operating system version that the device can run to use the app.
   • Maximum OS version: Optionally, type the most recent operating system that the device must run to use the app.
   • Excluded devices: Optionally, type the manufacturer or models of devices that cannot run the app.
   • Remove app if MDM profile is removed: Select whether to remove the app from a device when the MDM profile is removed. The default is On. (iOS/iPadOS only)
   • Prevent app data backup: Select whether to prevent the app from backing up data. The default is On. (iOS/iPadOS only)
   • Force app to be managed: If you install an unmanaged app, select On if you want users on unsupervised devices see a prompt to allow management of the app. If they accept the prompt, the app is managed. If an app has the Force app to be managed setting enabled, it updates without prompting the user. The update happens regardless of whether the app is required or optional. (iOS/iPadOS only)

   To use the Force app to be managed and App Auto Update settings, enable the apple.app.force.managed server property. See Server properties.

   

9. Assign a delivery group to the app and click Save.

Step 2: Configure app deployment

1. In the Endpoint Management console, navigate to Configure > Delivery Groups. Select the delivery group to configure and click the Apps page.
2. Drag the desired apps to the Required Apps box.
3. Navigate to Configure > Delivery Groups.
4. Select the delivery group and click Deploy.
5. Users receive a request to install the app and the app installs in the background after they accept.

MDX apps

To use MDX policies and security features, add apps that are MAM SDK enabled or MDX-wrapped. You can deploy MDX apps using volume purchase or without it.

To add the MDX version of a public app store app, follow the steps under Public app store apps, and then follow the steps in this section.

Step 1: Add and configure apps

1. In the Endpoint Management console, navigate to Configure > Apps. Click Add.
2. Click MDX.
3. Select iPhone or iPad for platforms.
4. Upload the MDX file.
5. Configure the app details. Set App deployed via Volume purchase to Off. Citrix also recommends enabling the Force app to be managed feature.
6. Configure the MDX policies. Set Disable required upgrade to On.
7. Assign a delivery group to the app and click Save.

Step 2: Configure app deployment

1. In the Endpoint Management console, navigate to Configure > Delivery Groups and click Add.
2. In the Apps section, drag the desired apps to the Required Apps box.
3. Navigate to Configure > Delivery Groups.
4. Select the delivery group and click Deploy.
5. Users receive a request to install the app and the app installs in the background after they accept.

MDX apps distributed using Apple volume purchase

To use MDX policies and security features, add apps that are MAM SDK enabled or MDX-wrapped. To deploy apps using volume purchase, the apps must exist on the app store.

Step 1: Link accounts

1. Set up and enroll in Apple Business Manager (ABM) or Apple School Manager (ASM). For more information about these programs, see Apple documentation.
2. Link your ABM/ASM account with Endpoint Management. For more information on linking volume purchase accounts, see Apple Volume Purchase.

3. When you add your volume purchase account, enable App Auto Update. This setting ensures that apps on user devices automatically update when an update appears in the Apple store. If an app has the Force app to be managed setting enabled, it updates without prompting the user. The update happens regardless of whether the app is required or optional.

   To use the Force app to be managed and App Auto Update settings, enable the apple.app.force.managed server property. See Server properties.

Step 2: Get apps and licenses from Apple

Purchase apps on your ABM/ASM account. You can make purchases in Apple Books (for iOS/iPadOS only) and the Apple App Store. Keep in mind that you must purchase all apps, even if they are free. Once you purchase licenses on ABM/ASM, Endpoint Management shows the app automatically.

For information about how to make apps available to your business, see Apple documentation.

Step 3: Add and configure apps

1. In the Endpoint Management console, navigate to Configure > Apps. Click Add.
2. Click MDX.
3. Select iPhone or iPad for platforms.
4. Upload the MDX file.
5. Configure the app details. Set App deployed via Volume purchase to On. Citrix also recommends enabling the Force app to be managed feature.
6. Configure the MDX policies. Set Disable required upgrade to On.
7. Assign a delivery group to the app for each platform and click Save.

This configuration results in two entries listed for this app in the apps list. When you select an app to configure, select the app with Type MDX.

Step 4: Configure app deployment

1. In the Endpoint Management console, navigate to Configure > Delivery Groups and click Add.
2. In the Apps section, drag the desired MDX apps to the Required Apps box.
3. Navigate to Configure > Delivery Groups.
4. Select the delivery group and click Deploy.
5. Users receive a request to install the app and the app installs in the background after they accept.

Custom apps

Custom apps are proprietary business-to-business apps. You can use Endpoint Management and Apple volume purchase to distribute proprietary apps privately and securely. You can distribute the apps to specific partners, clients, franchisees, and internal employees.

Requirements for custom apps

• Apple Business Manager or Apple School Manager account
• Apple volume purchase account (requires devices with iOS 7 or later)
• Enroll devices in Endpoint Management, using one of the following Apple enrollment modes:
  • Automated Device Enrollment
  • Device enrollment
  • User enrollment

Step 1: Link accounts

To deploy custom apps using volume purchase, link your volume purchase account to Endpoint Management.

1. Set up and enroll in Apple Business Manager (ABM). For more information about these programs, see Apple documentation.
2. Link your ABM account with Endpoint Management. For more information on linking volume purchase accounts, see Apple Volume Purchase.

3. When you add your volume purchase account, enable App Auto Update. This setting ensures that apps on user devices automatically update when an update appears in the Apple store. If an app has the Force app to be managed setting enabled, it updates without prompting the user. The update happens regardless of whether the app is required or optional.

   To use the Force app to be managed and App Auto Update settings, enable the apple.app.force.managed server property. See Server properties.

Step 2: Configure apps on ABM

Add apps on your ABM account. You can upload and distribute your own custom apps or buy licenses for custom apps from other organizations. For more information on adding and enabling custom apps on ABM, see Apple documentation.

Step 3: Add and configure apps in Endpoint Management

1. In the Endpoint Management console, navigate to Configure > Apps. Volume purchase apps appear in the list of apps.
2. Select the app you want to configure. Click Edit.
3. Select the platforms: iPhone, iPad, or macOS.
4. Choose the delivery groups to which you want the app distributed. Click Save.

Step 4: Configure app deployment

1. In the Endpoint Management console, navigate to Configure > Delivery Groups and click Add.
2. In the Apps section, drag the desired apps to the Required Apps box.
3. Navigate back to Configure > Delivery Groups.
4. Select the delivery group you want deployed and click Deploy.
5. Users receive a request to deploy apps. Apps install in the background after users accept them.

MDX enabled custom apps

To use MDX policies and security features, add custom apps that are MAM SDK enabled or MDX-wrapped.

Step 1: Link accounts

To deploy custom apps using volume purchase, link your volume purchase account to Endpoint Management.

1. Set up and enroll in Apple Business Manager (ABM). For more information about these programs, see Apple documentation.
2. Link your ABM account with Endpoint Management. For more information on linking volume purchase accounts, see Apple Volume Purchase.

3. When you add your volume purchase account, enable App Auto Update. This setting ensures that apps on user devices automatically update when an update appears in the Apple store. If an app has the Force app to be managed setting enabled, it updates without prompting the user. The update happens regardless of whether the app is required or optional.

   To use the Force app to be managed and App Auto Update settings, enable the apple.app.force.managed server property. See Server properties.

Step 2: Configure apps on ABM

Add apps on your ABM account. You can upload and distribute your own custom apps or buy licenses for custom apps from other organizations. For more information on adding and enabling custom apps on ABM, see Apple documentation.

Step 3: Add and configure apps in Endpoint Management

1. In the Endpoint Management console, navigate to Configure > Apps. Click Add.
2. Click MDX.
3. Select the iPhone or iPad platforms.
4. Upload the MDX file for the app you want to add.
5. Configure the app details. Set App deployed via Volume purchase to On. Citrix also recommends enabling the Force app to be managed feature.
6. Configure the MDX policies. Set Disable required upgrade to On.
7. Assign a delivery group to the app and click Save.

This configuration results in two entries listed for this app in the apps list. When you select an app to configure, select the app with Type MDX.

Step 4: Configure app deployment

1. In the Endpoint Management console, navigate to Configure > Apps. Volume purchase apps appear in the list of apps.
2. Select the app you want to configure. Click Edit.
3. Choose the delivery groups to which you want the app distributed on each platform. Click Save.
4. Navigate to Configure > Delivery Groups and click Add.
5. In the Apps section, drag the desired MDX apps to the Required Apps box.
6. Navigate back to Configure > Delivery Groups.
7. Select the delivery group you want deployed and click Deploy.
8. Users receive a request to deploy apps. Apps install in the background after they accept.

Optional apps (iOS/iPadOS only)

Citrix recommends deploying apps as Required. Required apps install silently on user devices, minimizing interaction. Having this feature enabled also allows apps to update automatically.

Optional apps allow users to choose what apps to install, but users must initiate the installation manually through Secure Hub.

To install optional apps, users must launch Secure Hub, go to Store, select Details for the desired app, and click Add.