Symantec Mobility: Suite 5.0 - Preparing for iOS8

Products

• Mobility Suite

Issue/Introduction

 

Resolution

Symantec Mobility Suite 5.0 - Preparing For iOS 8

Apple has introduced changes to iOS security requirements and framework architecture in the release of iOS8.  Apple now requires dynamic libraries to be signed with the same team identifier as the main app.  Due to these changes, you are required to re-build you work hub, re-sign and re-wrap all wrapped enterprise applications. This action is needed to provide wrapped application support for your device users running iOS8.  
Please perform the following steps:

A.    Rebuild your App Center App to Work Hub

In order for your users to use applications on devices running iOS8, you must
rebuild the App Center App to Work Hub. Your users will receive a push
notification indicating an updated version of their Work Hub is available for
download and installation.

1.    For detailed steps how to rebuild your App Center App to Work Hub using the Work Hub builder, click   https://www.symantec.com/docs/HOWTO83852.

2.    For detailed steps how to rebuild your App Center App to Work Hub using the In-browser builder, click   http://www.symantec.com/docs/HOWTO95606


B.    Re-sign all applications and upload all applications to your Mobility Suite tenant

Apps must be signed with the latest codesigning tools from Apple in order to be wrapped for your devices running iOS8. You can re-sign your app with or without the source of your app.


Re-Signing an App With Source Code

Prerequisite: Xcode6  (Please note that Xcode6 requires a machine running OSX 10.9.4 or later.)
 

1.  Access the Apple Developer portal (https://developer.apple.com/membercenter/index.action) using your Apple developer account.
2.  From the Member Center click Certificates, Identifiers & Profiles. Click Provisioning Profiles
3. You see a list of iOS Provisioning Profiles. Locate the provisioning profile you created that was used to originally sign the app when it was built.  This provisioning profile includes the App ID + Distribution Profile. Within the App ID is included the Team ID. You must re-sign your apps using a valid Team ID from this provisioning profile. Click the provisioning profile and click Download.
4. Once you have downloaded the provisioning profile for your app, launch Xcode6.
5. Open the existing project associated with your app.
6. Rebuild the app using the provisioning profile you downloaded in step 3. (in Xcode select  Product -> Archive -> Save for Enterprise or Ad Hoc development )
7. Once the application has been rebuilt using Xcode6,  upload the application to your Mobility Suite 5.0 tenant. This is done by accessing the Apps tab from your Mobility Manager console and selecting your app. Once the app has been selected, click Replace located in the middle of the right pane. Select the application you rebuilt with Xcode6 in step 6 and upload.
8. Upon successful upload of your app, your users will receive a push notification indicating an updated version of your app is available for download and installation.

 

Re-Signing an App Without Source Code

Even without access to the source code,  apps can be re-signed with an updated provisioning profile.  
Use the attached script(s) (resign_appid.sh or resign.sh) to re-sign the app:

1.    Run the resign script
./resign_appid.sh --ipa yourIPA.ipa --profile yourProvisingProfile --identity "iPhone Distribution: Developer Name (xxxxxxxxxx)" --out yourNewResignedIPA.ipa
2.    Upon successful upload of your app, your users will receive a push notification indicating an updated version of your app is available for download and installation.



Current known issues

Work Hub ‘installing’ screen does not update
To install your work hub, you click on a work hub install link you receive in an email. This will direct you to a download page. You are able to successfully download the Work Hub. When you click “Install Work Hub”, the screen updates to “Installing”.
 

 The screen will not exit to the home page where you see the work hub icon and the installation progress. You remain at the “Installing” screen until you manually press the home button. You see that the work hub installation has completed.


 

Remote Management Trust confirmation
During the installation of your MDM profile, you will be presented with a Remote Management trust confirmation box. This allows you to trust the MDM profile source (Mobility Suite) to allow for remote management (MDM) of your device :
 

Press Trust to continue with the MDM profile installation.



‘Installing MDM’ screen does not update to reflect successful completion of MDM profile install
After you have completed the MDM profile installation, you see the following screen:

 

When you press done, the screen will change to the following:

 

This screen will not update to reflect successful completion of MDM. You must press the home button and press you work hub icon. You are then connected to your appstore.


 

Secure Web App does not load after it is re-wrapped
A Secure Web App will stop when launched on an iOS8 device after the application has been re-wrapped. The solution to this issue is to delete the secure web app and create anew.



http://www.symantec.com/docs/DOC7732