JAMF PRO - iOS Configuration Guide
Note
We support iOS 13.1 and higher.
You must download the BlocksiForOSX.pkg application.
LDAP users and OUs need to be synced with Blocksi
This is accomplished with the Blocksi AD Synchronization App.
The app needs to be installed and configured on your LDAP server.
You can find these instructions in the Downloads window on the Admin Dashboard. The download section is located under Profile > Downloads.
To get your organization ID and name
Note
This information must be provided to Blocksi to authorize your organization for iOS filtering.
Sign in to your Apple School Manager account with your Administrator credentials.
Click your name in the bottom left of the sidebar.
Go to Preferences > Enrollment Information.
The Organization ID is numeric and can be found in the Organization Info section. Your Organization Name is the name of your admin account; for example, admin@blocksicloud.net. (The name appears above the Organization ID.)
Send this information to Blocksi and we will add your organization to the approved list of customers who can use our filtering app.
To enable custom apps
Sign in to your Apple School Manager account with your Administrator credentials.
Click your name in the bottom left of the sidebar.
Click Preferences at the bottom of the sidebar.
Click Enrollment Information.
Scroll down to the Customer Apps section.
Click Enable in the Custom Apps row.
To configure volume purchasing
Go to Settings > Global Management > Volume Purchasing.
Type the Display Name, and select Country or Region.
Click Upload Service Token.
Go to AppStore and locate Blocksi for iPad.
Sign in to Apple School/Business Manager, and select Blocksi for iPad.
Select License Type - Managed, and type 10 in Quantity.
Select Blocksi LLC in Assign to, and click Get.
Go to Personal Settings > Apps and Books.
Locate server token (Blocksi LLC in Location), and click Download.
Go back to Settings > Global Management > Volume Purchasing, and click Upload Service Token.
Click Choose File from Server Token window, and click Upload.
To add the Blocksi Mobile Device App to JAMF
Click Devices in upper left-hand corner.
Click Mobile Device Apps from the Main Menu, and click New.
Click App Store app or apps purchased in volume option under Choose an App Type, and click Next.
Type blocksi in the Search box.
Select Country or Region, and click Next.
Click the Apps Purchased in Volume tab.
Click Add to the right of Blocksi for iPad to open the New Mobile Device App screen.
Make sure Blocksi for iPad appears in the Display Name box, and select the Enabled checkbox.
Select the Free checkbox.
Type com.blocksi.dnsproxy in the Bundle Identifier box.
Select Install Automatically/Prompt Users to Install from the Distribution Method drop-down list.
Clear the Allow users to remove app (iOS 14 or later) checkbox, and then click the Scope tab.
Select All Mobile Devices from the Target Mobile Devices drop-down list.
Select All Users from the Target Users drop-down list, and click the Managed Distribution tab.
Select the Assign Content Purchased in Volume checkbox, and click the App Configuration tab.
Type the following in the Preferences box.
<plist>
<dict>
<key>organizationId</key>
<string>BlocksiSuperAdmin@domain.com</string>
<key>adminPassword</key>
<string>123Blocksi</string>
<key>ttl</key>
<string>60</string>
<key>userAuthEnabled</key>
<string>false</string>
</dict>
</plist>
Note
The organizationID value must match the email address of your Blocksi Super Admin. The adminPassword string is a password for administrators to use to access detailed information on the iOS device.
Click Save.
To create the configuration profile
Click Configuration Profiles from the Main Menu.
Click test, and then click Edit.
Click DNS Proxy from the Options list, and click Configure.
Copy and paste into the Provider Configuration XML box.
<plist>
<dict><key>organizationId</key>
<string>BlocksiSuperAdmin@domain.com</string>
<key>adminPassword</key>
<string>123Blocksi</string>
<key>ttl</key>
<string>60</string>
<key>userAuthEnabled</key>
<string>false</string>
</dict>
</plist>
Note
Please change the string BlocksiSuperAdmin@domain.com to the Super Admin account for your Blocksi account. You may also change the 123Blocksi password string to whatever password you choose or leave as is.
Type com.blocksi.dnsproxy into the App Bundle ID box.
Type com.blocksi.dnsproxy.ext into the Provider Bundle ID box.
Go back to Devices in top left corner, and click Search.
Click iPhone.
Click the Management tab.
To create the filtering policy, please see Configuring the iOS Filtering Policy on the BMEE Admin Dashboard