This article describes in detail how to set up the iPad in the Enterprise using iPCU aka iPhone Configuration Utility. This could also be used for the iPhone although I have not detailed out any differences.
Preparation as an iPad Administrator:
You will need to set up iTunes on your computer as the administrator of the iPads. You must also have the iPhone configuration utility download here
System requirements are Windows XP SP3, Windows Vista SP1, Windows 7, .NET 3.5 SP1
You will need to know the iPad user’s Active Directory network password or have the user present to type it in.
To set up wireless WiFi – make sure you have the network wireless password or if you use certificates there is a section below for doing that little nightmare.
If you are using Active Sync through Microsoft Exchange to do email then enable it per the screen shots below.
On Exchange Snap In ensure you enable active sync, if the user already had an iPad this is probably already done. If you are using an ActiveSync policy(s) this is where you would assign it to the user.
Reset or Wipe the iPad
If the iPad you are provisioning was used by someone else you need to wipe it. If the user was terminated or left on some extenuating circumstances you may want to back up the iPad for legal purposes – this is done via iTunes. Otherwise, let’s continue with the wipe - on the iPad itself go to "Erase All Content and Settings" in Settings > General > Reset > Erase All Content and Settings
If possible, your device should have a full charge before beginning this process. If it doesn't have a full charge, connect the device to power and leave it connected until the process is complete. This process could take some time depending on the iOS version it is running.
Finally – iPad Provisioning
Now plug in the iPad to your computer. If the iPad was deployed before you need a new SIM card or if this is a brand new iPad and you are replacing another then move the SIM from old iPad to this new iPad. Set this iPad up as new unless you are restoring due to a stolen or lost unit. As you can see by the below, uncheck all the automatically sync boxes and rename the iPad appropriately.
Launch the iPhone configuration utility. You must close iTunes, both cannot be launched at same time. The iPad is still plugged in to your computer at this point. Note that the iPad will show up here. Take note of the serial number and assign it in your asset tracking system if applicable. For your first time there will be a profile called Default.
For all subsequent profiles go to FILE --> Duplicate and duplicate one of your working ones then step through as below and change items. See example of below for duplicate
Below are a series of screenshots for the items to change in the default profile. Step through the menu items in the middle of the page. There is no save or apply button on the pages. Moving to another menu choice saves the entry.
VPN configuration Through Provisioning Tool
There are many choices for Connection Type so choose the appropriate one for your network. Often it will be Cisco IPSec or Cisco AnyConnect.
Pop or IMAP
In the next menu option, MAIL, you would only configure this if your organization is using POP or IMAP mail instead of Exchange or if you were going to put the user’s personal email on the iPad for them.
In the iPhone configuration Utility the below is the exchange set up and should be self- explanatory as in the picture.
If you are using certificate in your network see end of this document for adding it to the profile
Last step in the iPhone Configuration Utility is to “INSTALL” the configuration profile on the iPhone Configuration Utility. Change to the configuration profile section under Library (with the iPad connected) and choose the appropriate profile, and click INSTALL. The profile will upload to the iPad now. On the iPad you’ll get a prompt to either unlock it if you have lock set up or to just install the profile. You can monitor the "console" tab in the IPCU to see the progress.
General Setup Recommendations on Corporate iPads
On the iPad itself go to Settings then
Mail, Contacts, Calendars and change the signature file for the user and change the calendar sync to 6 months back.
Also under Mail, Contacts, Calendars -- go to Corporate E-Mail and ensure the Mail days to sync is set to unlimited.
General -- sounds -- turn new mail and sent mail sounds OFF
Store -- ensure you are logged out so that the user must use their own iTunes account for purchases and not yours…
Remember to remind the user that they are restricted to 2 GB of data usage per month. They should keep the cellular data off as a general rule and use the wireless at work and at home. Adjust this based on your corporate data plan and policy.
VPN configuration on iPad itself using CISCO IPSec - Example
Go to General --> Network --> VPN Configuration
This is how to set them up, first export the certificate from the user’s computer.
Now export the certificate and place it on the user’s desktop. Email this certificate to yourself. When presented with the wizard say and for the next box
Then type in any password (something simple like their first name) when presented and choose a file name – just name it firstlast. DO NOT replace the extension! See the screenshot below:
You need to import these certificates into your computer for access by the iPhone configuration utility in the next steps. First you need to import these certificates into your computer. Often you can import into your computer by just double clicking on the attached file in the email. Barring that launch internet explorer, Tools --> Internet Options --> content Tab --> click import -- choose the other people tab (as indicated below) and begin the import wizard. The password box you will be presented with is the simple password you chose in the step just above.
Now go back to the iPhone Configuration Utility and choose Credentials
If you've done the certificate portion of the configuration separately then you will need to install the profile again on the iPad. This is as simple as clicking INSTALL in the IPCU. No need to remove the original profile first. If your certificates have an expiration date then at some point (post expiration date) you will have to renew the certificate on the users machine and then re-import it all over again. There are MDM solutions that get around this or you can just extend your certificate dates out further.