Follow

Log in to Moki's iOS Portal and Setup Your Account for Enrollment

Section 1: Login to Moki

You should have received an invitation to create your account. You will need a Google account to access the Total Control portal because it uses Google App Engine and therefore only a Google account can get you in. If you don’t have a Google account go to accounts.google.com/signup, where you can use one of your existing email addresses or create a new gmail address to use for Moki. For the best experience use the Chrome browser when using Moki as it is our only supported browser. Do not use Internet Explorer.


Screen_Shot_2016-05-17_at_1.10.59_PM.png 

 

When you click the link in the invitation from an email that is tied to a Google account, your information will automatically populate so all you have to do is agree to the terms and hit Sign Up


Screen Shot 2014-06-18 at 11.36.29 AM (2).png

 

Coming Back to Moki

the URL for Moki is mokimanage.com. The link in your email expires after you complete this process so you'll want to save the link to your bookmarks so you can come back. If you are attempting to access Total Control on a mobile device then you'll need to use mokimanage.com/app

 

Section 2: Apple Certification Setup

In order to remotely manage iOS devices Apple requires your account be registered with Apple once per year. Fortunately this is a quick and simple process that we will walk you through. It is called APNs setup (Apple Push Notifications Setup). There are two more items that you can setup to make managing your devices easier, Device Enrollment Program (DEP), and the Volume Purchasing Plan (VPP). We'll explain more of these in detail as well as links on how to set them up completely. 

Step 1 - Setting up APNS

The first thing we have to do to get Total Control setup is register your account with Apple. If you didn't click the setup APNS link in the pop-up box follow these steps to setup APNS.

  1. Click the setup APNS link in the pop-up box

    Screen_Shot_2016-05-17_at_1.55.25_PM.png
  2.  
  3. If you clicked out of this click on your account name in the top right and select Account Settings

    Screen_Shot_2014-07-21_at_4.43.10_PM.png
  4.  
  5. Read the Warning at the top which tells you that you should create a generic company Apple ID and then proceed through the steps. If you don't have an Apple ID you can create one at appleid.apple.com

    Screen_Shot_2016-05-17_at_3.47.52_PM.png
  6.  
  7. for Click the grey Download button on step 1. You only want to save this to your files, you don't need to install it

    Screen_Shot_2016-05-17_at_4.48.43_PM.png
  8.  
  9. Click the link for identity.apple.com/pushcert on step 2 and sign in with the generic company Apple ID we discussed above.

    Screen_Shot_2016-05-17_at_3.52.56_PM.png

    Screen_Shot_2013-05-31_at_9.24.16_AM.png
  10.  
  11. Click on the green Create a Certification button. If you just created your ID then the button will probably be blue and on the left of the page under a Get Started message. Accept the terms.

    Screen_Shot_2016-06-13_at_4.42.16_PM.png
  12.  
  13. Upload the .plist file you downloaded from Moki and hit Upload

    Screen_Shot_2016-06-13_at_4.47.38_PM.png
  14.  
  15. Once the file has been uploaded a confirmation message will appear. Click the blue Download button. 

    Screen_Shot_2016-06-13_at_4.45.26_PM.png
  16.  
  17. Go back to MokiManage.com and enter the Apple ID email and hit Save

    Screen_Shot_2016-05-17_at_3.57.36_PM.png
  18.  
  19. Click on the blue Upload button in step 4 and select the .pem file you downloaded in the previous step

    Screen_Shot_2016-05-17_at_4.04.14_PM.png
  20.  
  21. When you have uploaded the certificate the boxes will change to show you the proper steps have been completed. In step 5 you can save any notes you would like, such as password hints, etc. 

    Screen_Shot_2016-05-17_at_4.18.33_PM.png

Step 2 - Setting Up DEP (Optional)

DEP is Apple's Device Enrollment Program that allows companies to purchase devices directly from Apple and ship them onsite. When the device is turned on it will enroll automatically and be configured with the settings from your enroll template. If you are installing store apps, you would also want to use VPP as it would allow you to install them without needing to sign into iTunes on these devices. You can register and learn more about DEP by going to deploy.apple.com. Once your APNS Setup is complete you can add your DEP credentials. If you want to get setup now and convert to DEP later you can, just continue through the steps. If you want to setup DEP now, here are the DEP setup steps

Step 3 - Setting up VPP (Optional)

VPP is Apple Volume Purchasing Plan. This can be used for apps in the App Store and B2B store. It is most helpful because you can install apps without signing into iTunes. You can register for VPP by going to deploy.apple.com. Once your APNS Setup is complete you can add your VPP token. Here are the VPP setup steps. You don't have to use VPP but it makes it easier at times. 

 

Section 3: Preparing Your Account for Enrollment

Moki has created an enrollment process that allows you to specify the apps, profiles and tags that are applied to devices upon enrollment. This is done through what we call Enrollment Templates. In order for an app, profile or tag to be added to an enrollment template, it first has to be added to your account. Here is a description of apps, profiles and tags, for those who may be unfamiliar with these terms. 

  • Apps - iOS apps that can be installed on an iOS device. These can be apps available in the App Store and B2B store or they could be enterprise apps that you distribute internally or built specifically for this project
  • Profiles - Files that control specific settings of an iOS device. Some examples would be a WiFi profile containing the network credentials of any networks the device will connect to, or a Restrictions profile that locks the device down to a set of approved apps, or locks the device down to run only one app
  • Tags - Moki's method of organizing devices inside the Moki account to help with updates, alerts or troubleshooting

Step 1 - Upload your app

If you have your own app or are using an app found on the App Store, you'll need to upload that app into Moki so you can control the app installation and updates. If your kiosk will display your website then you will be using our app called MokiTouch 2. This app is already installed in your account and you can skip to Step 2.

  1. Click on the Apps tab

    Screen_Shot_2016-06-13_at_4.49.37_PM.png
  2.  
  3. Click the + icon on the left

    Screen_Shot_2016-06-13_at_4.50.36_PM.png
  4.  
  5. If your app is on the iTunes store you only need the ID number for the app. The quickest way to get this is to Google the app and iTunes in the same search criteria. See the first screenshot below for how to format your search. Click on your app from the search results and then look at the URL and copy the numbers after the ID. Paste the numbers into the iTunes Store ID field and hit Add App

    Screen_Shot_2014-09-23_at_4.30.19_PM.png

    Screen_Shot_2013-12-11_at_11.08.21_AM.png

    Screen_Shot_2016-06-10_at_2.08.52_PM.png
  6.  
  7. If you're using an Enterprise app then you can either upload the .ipa file and host it on our secured server (32 MB max) or you can insert the manifest URL ending in .plist. Learn to create a .plist file  

    Screen_Shot_2016-06-10_at_2.07.02_PM.png

    Screen_Shot_2016-06-10_at_2.07.50_PM.png

Step 2 - Create Profiles

Profiles are the way that we manage the settings and user experience of the device. Below is a brief description of how to create your profiles. You can also read this article on the iOS Profile Definitions.

  • Click the iOS Profiles tab in the top navigation

    Screen_Shot_2016-06-10_at_2.47.18_PM.png
  •  
  • Select the profile you want to create and hit New Profile

    Screen_Shot_2016-06-10_at_2.50.44_PM.png
  •  
  • Below is a brief description of the available profiles. For a more complete walkthrough on how to set each of them up please refer to this article on iOS Profile Definitions
    • Restrictions - Restrict which apps, device functionality, and media content are available to the user
    • Passcodes - Specify passcode policies to be enforced on the device
    • WiFi - Save a WiFi network SSID and password to the device so that when a network  is in range it can connect without needing user interaction. There can be multiple WiFi profiles on a device at one time
    • Web Clips - Specify a URL to be added to the Home Screen for easy access
    • App Lock - Lock the device down to a single app
    • Global ProxySets the HTTP PROXY settings for your network traffic to run through
    • Custom - Is where you would go to upload profiles created in Apple Configurator

Step 3 - Create Tags

If you want all your devices to come preconfigured with organizational Tags then follow the following steps, otherwise proceed to Step 4.

  1. Click the Tags tab in the top navigation

    Screen_Shot_2016-06-13_at_4.19.45_PM.png
  2.  
  3. Click the + icon on the left side of the screen

    Screen_Shot_2016-06-13_at_4.08.01_PM.png
  4.  
  5. Type in your tags and hit Enter (Tags can have spaces)

    Screen_Shot_2014-09-23_at_4.39.23_PM.png
  6.  
  7. Hit Save

Step 4 - Enrolling Your Devices

Now that you have added all the apps, profiles and tags into your account, you are prepared to create an Enrollment Template

  1. Click on the Enroll tab at the top

    Screen_Shot_2016-06-13_at_4.18.09_PM.png
  2.  
  3. Click on the + icon and select iOS

    Screen_Shot_2016-06-13_at_4.22.03_PM.png
  4.  
  5. Give the enrollment a name to remember it later and select the text boxes underneath each section to add the Apps, Profiles and Tags you want devices to receive when using this template

    Screen_Shot_2016-06-13_at_4.25.26_PM.png
  6.  
  7. Hit Save
  8. Click the Download Configuration Profile button and then you can hit Done

    Screen_Shot_2016-06-13_at_4.29.11_PM.png

Step 5 - Methods of Device Enrollment

There are three different methods of enrolling your devices and each comes with different benefits and options for updating and controlling the device as well as a different process to enroll (It's an Apple thing). If you already know the method you are going to use to enroll then skip to the bottom and choose the enrollment method you will use. If you aren't sure which method you will use then read the following descriptions.

Method 1 - DEP

DEP stands for Apple's Device Enrollment Program. It is the only method of enrollment that allows you to remotely update the OS. You must apply to join the program and Apple must approve your organization. Some of it's benefits include: 

  • Ship devices directly to their destination
  • Supervises the devices
  • Allows remote iOS updates
  • Update apps without user interaction
  • Use App Lock or SAM
  • Use VPP
  • Devices will reenroll upon a factory reset

While it does provide several benefits it is the most complex and difficult to setup of all the options. It requires a new Apple ID and requires you to register with and use VPP if you don't want to give locations the credentials to your iTunes account.

Method 2 - Supervise with Apple Configurator

This options provides the most granular control of your device settings and UI but it also requires that you have a Mac computer and can take the time to configure your devices yourself. Some of it's benefits include:

  • Supervises the devices
  • Use App Lock or SAM
  • Use VPP
  • Update apps without user interaction
  • Configure up to 50 devices at once

Method 3 - Enroll through the Website

This is the simplest method of enrollment as it only requires you to go to a website in safari, enter a code and then allow a profile to be installed. However, it also comes with the most limitations for controlling it remotely. Some of it characteristics are:

  • Enroll from a website
  • Use VPP

You'll notice that it doesn't allow for any type of lockdown remotely or remote app updates without user interaction. This is the least used method.  

What method of enrollment will you use?

DEP

Supervise with Apple Configurator

Enroll through the website

 

 

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

0 Comments

Article is closed for comments.