Skip to main content

Admin Dashboard

Workspace One - iOS Configuration Guide

The following contains procedures for deploying Workspace One for iOS.

Adding the Blocksi for iPad App to Workspace ONE

To add the Blocksi for iPad app to Workspace ONE

  1. Go to the Workspace ONE console.

  2. Click the Resources > Apps > Native > Purchased tab.

  3. Click the Sync assets button.

    Note

    A token is provided to you to pass the iOS app from Apple Business Manager to Workspace ONE using sToken.

  4. Click the Blocksi for iPad app. If the app is shown as Unknown, click Unknown and type the Name and Bundle ID to com.blocksi.dnsproxy.

    Edit Application

  5. Click SAVE > ASSIGN. The Distribution fields should look like the following:

    Blocksi for iPad Assignment

  6. Go to the Application Configuration section.

  7. Turn the Send configuration toggle on.

  8. Click the Upload XML button and upload the ios-spec-file.xml file.

    Note

    You need to change the value of adminPassword and organizationId to match your school’s organization ID (main super-admin account). Below is just an example of those values.

    If the customer does not use user authentication or has one policy for the whole company, the keys userAuthEnabled and userId should be deleted. If everything is correct, you will see the set of our conf keys. See the example below.

    Blocksi for iPad Assignment App Configuration

    Note

    If you cannot see those keys, the XML file format is incorrect, or Workspace ONE cannot parse this configuration file and will not inform you that something went wrong. In this case, check the XML file or send it to us for review.

    Regarding the Configuration values, more details are available in the Configurable Values for the iOS Filtering App document.

  9. Click Create > Publish

Adding the App Profile

To add the app profile

  1. Go to Resources > Profiles & Baselines > Profiles > Add > Add Profile > Apple iOS.

  2. Select Context: user or device profile. The Workspace ONE console does not have UI for DNS Proxy settings implemented, but it is reachable through Custom Settings.

  3. Go to Custom Settings (at the very bottom of the list), select the Enable Custom Lookup Value checkbox, and paste text from the iOS-custom-policy- configuration.plist file. The result should look like this:

    iOS Filtering Custom Settings

  4. Go to General payload. These settings do not affect the functionality of the application; needless to say that Smart groups should include target devices (or users). The customer will fill these fields according to own requirements. Overall, it should look something like this:

    iOS Filtering General

  5. Click SAVE & PUBLISH.

  6. Click PUBLISH.

Checking the Deployment Status on the iOS Device

IMPORTANT:

  • Make sure that the profile and Blocksi for iOS app is assigned to target device(s).

  • Make sure that the app is installed on target device – the install might take some time.

  • Make sure that the profile is installed properly on the device. To do this, on the iOS device, go to Settings > General > VPN & Device Management > Device Manager > More Details. The DNS proxy should be shown there with our set IDs and should look like this.

    Device Manager

    1. Go to the Blocksi for iOS app.

    2. Make sure the app says Everything is ok.

    3. Click Details and type the admin password. This is the value of the adminPassword key from the app config/profile payload - Password123 in our example case. Make sure that values are passed properly.

    4. Make sure the DNS proxy is running.

    5. Go to Settings > VPN & Device Management > DNS.

Configuring the iOS Filtering Policy

To create the filtering policy, please see Configuring the iOS Filtering Policy on the BMEE Admin DashboardConfiguring the iOS Filtering Policy on the BMEE Admin Dashboard