NOTE: The Workflow actions available to you depend on the Workflow model you select, the MDM system you use, and the OS of your devices.
The Restore from Backup action allows you to upload an iOS backup created from Apple Devices, iTunes, or Configurator to Mobile Access Management, which can be used to further customize your devices.
Feature Availability
⚠️ Imprivata Mobile Access Management no longer supports restore from backup on iOS 14 and later DEP devices.
⚠️ We do not recommend this feature with iOS 13. iOS 13 introduced changes that made it difficult to use backups while keeping the device on Wi-Fi. iOS 13.4 further changes the Restore from Backup process to display a dialog that inhibits automation.
Non-DEP Devices
| Device | Launchpad | Non-DEP iOS 12 and earlier | Non-DEP iOS 13.0-13.3 | Non-DEP iOS 13.4+ |
| Wi-Fi Device | Mac & Windows | | | Setup Screen Blocks Automation |
| Cellular Device with active SIM | Mac & Windows | | | Setup Screen Blocks Automation |
DEP Devices
| Device | Launchpad | DEP iOS 12 and earlier | DEP iOS 13.0-13.3 | DEP iOS 13.4+ | DEP iOS 14+ |
| Wi-Fi Device | Windows | | | | Not Supported |
| Wi-Fi Device | Mac Launchpad with Network Tethering disabled | | | | Not Supported |
| Wi-Fi Device | Mac Launchpad with Network Tethering enabled | | | Setup Screen Blocks Automation | Not Supported |
| Cellular Device with active SIM | Mac & Windows | | | Setup Screen Blocks Automation | Not Supported |
DEP backups require you have uploaded MAM’s supervision identity into your MDM before you create the backup.
Future iOS versions may further limit the use of backups.
Backups and iOS 13.4
MAM is not able to skip all setup screens on iOS 13.4 Beta when restoring a backup.
This prevents a fully automated setup and, despite the dialog displayed, apps from MDM will not load. In addition, until this dialog is dismissed, MAM is unable to launch apps, and is unable to use out Checkout Locker app to lock the device.
I was using a backup before. What should I do now?
Many MAM customers depended on a backup for touch-free provisioning. Unfortunately, this feature is no longer recommended for iOS 13.4 and above. The following alternatives are available to these customers:
- Delay iOS 13.4. This is not a long term solution, of course.
- Continue using a backup with your devices, and during provisioning tap on the “Restore Completed” dialog to dismiss. Note that someone will need to dismiss this dialog promptly, because the dialog blocks MDM from installing apps, despite the text on the dialog.
- Remove the Restore from Backup action from your provisioning workflow. This is recommended as the long term solution.
Unfortunately, removing the backup will mean more setup and configuration to be done by hand by your users or staff.
- Passcode lock will be set to the default “immediately”
- Apps will prompt for microphone and camera permission
- Government alerts will be enabled
Unfortunately, no MDM can control these features today.
Backups and iOS 12 and earlier
This legacy documentation is included for reference. Backups are no longer recommended for iOS 13 and greater.
NOTE: While many settings are preserved in a backup, iOS backups are NOT exact, mirror images of an iOS device: they do not include actual applications or the iOS operating system itself. Backups may include app content and settings, but what’s backed up really depends on the specific app. Imprivata recommends testing your workflow thoroughly to confirm desired results.
MAM makes sure that backups are portable:
- Across device models: under most circumstances, an iPhone backup may be restored to an iPad, and vice-versa.
- Across iOS versions: An older iOS backup may be used on a device with a newer iOS version. For example a backup of an iOS 11 device may be restored to an iOS 12 device, but will fail if you try an iOS 10 device.
Create a Backup
We have published instructions for creating a backup in a separate document.
Using Restore from Backup
Use the Choose existing Backup File option to select a specific backup file to use. Alternatively, you may choose the Type a filename option to enter the name of the backup file as text. This is useful if you wish to use attributes for intelligent workflows.
Backups display the iOS version. This helps you remember the version of the original iOS device. For example, the backup below may be used with iOS 12.1.1 and greater, including iOS 13.
To upload a new backup , click Upload. The maximum upload file size is 4 GB.
Working with encrypted backups
MAM detects encrypted backups when uploaded and prompts you for a password.
- If you accidentally entered the wrong password for an encrypted backup, you’ll need to replace the backup file using the Cache tab.
- Backups added before GroundControl 4.5 can be re-uploaded if you want to capture the helpful iOS version and backup type in GroundControl.
Backup Scrubbing
By default, MAM does some cleanup on the backups you upload. We remove old Wi-Fi networks, MDM enrollment, supervision, and Apple IDs.
What Settings do Backups Preserve?
| Feature | Can be restored | Notes |
| Airplane Mode | | |
| WiFi | | Useful if Airplane mode is on |
| Bluetooth | | May require similar devices for master & clone |
| Cellular Cellular Data | | |
| Notifications AMBER Alerts | | |
| Notifications Emergency Alerts | | |
| Notifications Public Safety Alerts | | |
| Sounds Vibrate on Ring | | |
| Sounds Vibrate on Silent | | |
| Sounds Ringer and Alerts Sound Level | | |
| Sounds Change with Buttons | | |
| Sounds Keyboard Clicks | | |
| Do Not Disturb Do Not Disturb | | |
| Do Not Disturb Scheduled | | |
| Do Not Disturb Activate | | |
| General Software Update Automatic Updates | | |
| General Handoff | | |
| General Background App Refresh | | |
| General Date & Time 24-Hour Time | | |
| General Keyboards Enable Dictation | | |
| Display & Brightness Auto-Lock | | |
| Battery Low Power Mode | | |
| Privacy Location Services | | |
| Passwords & Accounts AutoFill Passwords | | |
| Apple ID (iTunes Store) | | GroundControl's "Backup Scrubbing" must be disabled |
| Apple ID Password | | Apple ID Passwords are never preserved |
| Restrictions Passcode | | |
| Battery Percentage on/off | | |
| Text Size | | |
| Raise to Wake | | |
| Enterprise App Trust | | Useful if you don't have MDM |
| Accessibility: Large Text, Reduce Motion, Assistive Touch | | |
| Add/Set Keyboards | | |
| Text Replacements | | |
| Contacts | | Contact list is preserved from master to slave |
| Apps | | Apps are not stored in backups |
| iOS Version | | iOS versions are not stored in backups |
