FAQ: iOS Applications

What interaction does AirWatch have with the Apple ID for a device?

AirWatch can have no affiliation with the Apple ID on iOS devices. AirWatch cannot view, update, or track the Apple ID or its status.


When is the Apple ID account information required to be entered with respect to application management?

Apple requires an end-user to enter an Apple ID and/or password whenever a new public application is attempting to be installed regardless of whether this installation was sent by AirWatch or initiated by the user directly. Applications that have been installed by an Apple ID previously will not prompt the user.


Do I have to enter in my Apple ID for every application install?

No, the Apple ID will only be required for new applications that have never been installed before by that specific Apple ID. However, a standard fifteen-minute grace period will allow apps to be installed one after another with no Apple ID input. If no apps have been installed for fifteen minutes, the device will prompt for the Apple ID again.


Can I prevent my end users from installing any applications?

Yes, you can block the App Store on iOS devices through the Restrictions payload of an AirWatch profile. The field is labeled “Allow installing public apps”.


Do I need to restrict the App Store to utilize the AirWatch “Restricted Mode for Public iOS Applications”?

No, you will need to allow the App Store. If you also block the App Store, users will be unable to install any applications.


Can I prevent users from installing specific applications?

This can be done by enabling "Restricted Mode for Public iOS Applications" at an Organization Group. This will allow users to install only the applications specified in the AirWatch Console, and no others. There is no way to prevent users from installing a single, specific application.


Can public applications utilize “Per App VPN”?

Yes, iOS 7 eligible devices and applications can use the per app VPN feature by checking the “Use VPN” check box inside of the selected apps configuration.


Can I silently install public applications over the air if they are supervised?

No, only license based VPP apps officially support the silent install feature. Public apps will install “silently” if the Apple ID that is downloading the app has installed the app previously so it is affiliated with the account.


What is a provisioning profile?

A provisioning profile is a developer certificate signed profile that specifies which devices a specific iOS application can be present on.


How long is a provisioning profile valid?

A provisioning profile is valid for one year before it needs to be renewed. The developer-signing certificate is valid for three years.


What do I do if my provisioning profile is expiring or has expired?

Once you create the new provisioning profile, you can upload it to the files tab of the application in AirWatch. This will add the provisioning profile to the devices assigned to the application.


What is the expected result if I renew the provisioning profile in AirWatch?

In AirWatch 7.2 and above, we have the capability to change the provisioning profile silently and remove the older provisioning profile if it is no longer in use. In AirWatch 7.1 and below, once the provisioning profile is sent out the application will re-install and apply the new provisioning profile. This will cause both old and new profiles to be present.


Have more questions? Submit a request


Article is closed for comments.