Kaspersky Secure Mobility Management

App Control on iOS MDM devices

Expand all | Collapse all

These settings apply to supervised devices.

Kaspersky Security Center lets you manage apps on iOS MDM devices to keep these devices secure. You can create a list of apps allowed to be installed on devices and a list of apps prohibited from being displayed and launched on devices.

To configure the list of apps allowed or prohibited to be installed on devices:

1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Policies & profiles. In the list of group policies that opens, click the name of the policy that you want to configure.
2. In the policy properties window, select Application settings.
3. Select iOS and go to the Security controls section.
4. On the App Control card, click Settings.

   The App Control window opens.

5. Enable the settings using the App Control toggle switch.
6. In the Operating mode field, select one of the following options:
   • Use all apps except forbidden ones

     All apps will be displayed and available to run on the device except the ones from the list.

   • Use only allowed apps

     This option is selected by default. If you select this option, the user will be able to open only the following apps on the device:

     • Apps in the list
     • System apps

     All other apps will be hidden.

7. Click Add to add apps to the list.
8. In the window that opens, specify the app's bundle ID in the corresponding field. Specify the com.apple.webapp value to allow or restrict all Web Clips. How to get the bundle ID of an app

   If necessary, you can specify several bundle IDs by clicking the Add bundle ID button.

   To get the bundle ID of a built-in iPhone or iPad app,

   Follow the instructions in the Apple documentation.

   To get the bundle ID of any iPhone or iPad app:

   1. Open the App Store.
   2. Find the required app and open its page.

      The app's URL ends with its numerical identifier (for example, https://apps.apple.com/us/app/google-chrome/id535886823).

   3. Copy this identifier (without the letters "id").
   4. Open the web page https://itunes.apple.com/lookup?id=<copied identifier>.

      This downloads a text file.

   5. Open the downloaded file and find the "bundleId" fragment in it.

   The text that directly follows this fragment is the bundle ID of the required app.

   To get the bundle ID of an app that has been added to Kaspersky Security Center:

   1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Mobile → Apps.
   2. Click iOS apps.

      In the list of apps that opens, app identifiers are displayed in the Bundle ID column.

9. Click Save.
10. Click OK.
11. Click Save to save the changes you have made.

Mobile device settings are changed after the next device synchronization with the iOS MDM Server.

As a result, once the policy is applied, the specified settings for apps are configured on devices.