About this policy
Policy contact:
Date of last update:
May, 2020
Policy statement
It is important that you take care to configure your iPad to be secure, and in compliance with Indiana UniversityMobile Device Security Standards. Following these policies are required if you are using this device to access data on the IU network, regardless of ownership of the iPad. So if you have recently received or purchased an iPad, and will be using it to access data on the IU network, please follow the directions below for proper setup, and registration. Once registered, it will be possible to remotely lock or wipe the iPad should it be lost or stolen. (If you have already setup an iPad, and wish to register it with this service, the iPad must be reset to factory default settings, and setup again following these instructions).
Notice:If you wish to do the following yourself, the iPad must first be registered with the Casper service. In order for it to be registered, you will need to supply the SoIC IT support group with the serial number of the iPad, and we will get that serial number to the Casper admins, and it they will register the iPad with the Casper service.
These instructions are to help you setup your new iPad for use at Indiana University, and ensure that you are in compliance with security policy IT-12.1*. Your iPad has been pre-enrolled in the Device Enrollment Program (DEP). Please complete the following steps to fully enroll your iPad, which will make the iPad compliant with IU security rules.Please do not plug the iPad into your computer, or log into an Apple account until you have completed the following.
- When you start up the iPad, you will need to select any wireless network you have access to, and login as necessary.
- The iPad will then find the Device Enrollment Program (DEP) server on campus that will do the setup and enroll your iPad. You may need to give it a minute. You will be asked if you want Indiana University to do the setup. Please accept that.
- You will then be required to login. This will be with your IU username and password.
- You will need to Accept/Trust any certificates that are presented, and select ’Next’ to get through the process. After a few seconds, the configuration will be finished. Touch ‘Get Started’.
- After a few minutes, you will get a message saying you have to create a passcode. Look towards the bottom of the screen, and touch ‘Passcode Options’. Select ‘Custom Numeric Code’ to use numbers only for your passcode. Select ‘Custom Alphanumeric Code’ to use numbers and letters for your passcode. For either choice, the passcode must be six characters long. Please create your passcode, and you are now ready to use the iPad.
If you have any questions, or need assistance, please post a request to the Luddy Helpdesk.
* Reference: IU security policy IT-12.1
Best Security Practices for the Apple iPad
The popularity of mobile computing and communication devices, such as Apple's iPhone and iPad, has lead to a dramatic rise in the number of these devices on our campus, as well as in the general population. That same popularity has also made these devices very attractive for theft. In this article, we'll list some ways that you can help to secure your device in the case of loss or theft, and point out ways you can protect your data should you be unable to retrieve your mobile device.
Use a Passcode. The Apple iPad can be configured to require a passcode to allow access for use of these devices, and thus access to your information and data. Using a passcode is an excellent first line of defense against unauthorized use of your device, and protecting any sensitive information and data you may have stored on it. Basic setup is simple. On either device, go to: Settings > General > Passcode Lock.
There you can use the default setup of entering 4 characters as a passcode to unlock your device. For more detailed instructions, options such as using a longer passcode, and configuring the device to wipe all data after a certain number of failed attempts entering the passcode, go to: http://support.apple.com/kb/HT4113
In the event you have lost your device, with little possibility of retrieving it, there are still options to protect your data remotely, including wiping the device. Those options are as follows:
Register your iPad, with the Casper Mobile Device Management service. This service is provided and maintained by UITS. By registering with this service, a member of the SoIC IT staff will be able to remotely lock, clear the passcode, or wipe your iPad.
Use Apple's Find My iPhone, iPad, or Mac service. To use this service, you must activate and use Apple iCloud. If you lose your device, and it is online anywhere, you will be able to locate it using any computer, or another iOS device. You also have other options such as setting a passcode lock remotely, or doing a remote wipe. Find out more about this service at Apple's iCloud site. Scroll down the page to learn more about using Find My iPhone, iPad, or Mac.
Use Exchange/OWA for Remote Security. If you have, or setup an Exchange account at Indiana University, you can use this account in conjunction with Outlook Web App (OWA) to remotely access your device, and do many of the above listed functions, including a remote wipe.
First, you must configure your device to use Exchange Active Sync. Once you have your device synchronized with the Exchange service, you will be able to remotely access your device using OWA. Detailed instruction for using OWA to assess, and control your device remotely are located here: http://kb.iu.edu/data/avrv.html
Likely, the best overall security would be to use a combination of the passcode lock, and one of the remote services listed here. And of course, never leave your device unattended in an insecure area, such as a lab or library for even a few minutes. It doesn't take long to put one of these devices in a pocket, or backpack. If the unfortunate should happen, then one of the remote measures listed above should be applied as soon as possible, as the longer the device is lost, the greater the chance it may still be compromised, even with the above measures against this happening installed.