Trust Enterprise Apps

VMware Workspace ONE (formerly AirWatch) will automatically and silently “trust” any enterprise app that it finds on a device, if you follow the following instructions. You must perform these steps for each enterprise app you wish to load, but you only need to perform these instructions once. We assume VMware Workspace ONE is already pushing the apps to the intended devices.

In your VMware Workspace ONE console, click Apps & Books > Applications > List View > Internal. Click on the pencil icon to edit the app. On the Detail tab, scroll down and in the section Make App MDM Managed if User Installed select Yes.

Ivanti Neuron (formerly MobileIron Cloud) will automatically and silently “trust” any enterprise app that it finds on a device, if you follow the following instructions. You must perform these steps for each enterprise app you wish to load, but you only need to perform these instructions once. We assume Ivanti Neuron is already set up to push the apps to the intended devices on enrollment.

Ivanti Endpoint Manager Mobile (formerly MobileIron Core) does not natively support the conversion from unmanaged apps to managed on device enrollment. With GroundControl, we’re able to call the appropriate Ivanti APIs to perform this function on devices during the deployment process, using the Enroll MDM action. Similar to other MDMs, make sure your enterprise app is uploaded to Ivanti Endpoint Manager Mobile and assigned to device. 

You can manually trust a developer without MDM. On the iOS device, tap on Settings > General > Profiles & Device Management. Look for the Enterprise App section and tap on the app name. Click on Trust to continue.

Note that this method trusts the app developer, not just the app. Once the developer has been trusted, all other apps signed by the same developer are implicitly trusted.

You may use a backup of a master device to restore to your fleet, and the fleet will allow the app to launch.

• If your devices are running iOS 11, your master device must be running 10.3 or later.
• If your devices are all pre-iOS 11, you may use a master device running iOS 9.3.5 or iOS 10.x

Use the process described immediately above to trust the app developer on your master device. Next, using the instructions in our documentation, create a backup of your master device, and upload the backup to GroundControl.

Once your backup is ready, create a workflow that (a) restores the backup and (b) installs the enterprise apps.

Notes:

• The device must confirm a valid app provisioning with Apple, so the device must have a WiFi or cellular network connection.
• WiFi sometimes takes several minutes to obtain an IP address, during which time the app installation may fail. Splitting the deployment into two parts — first WiFi then app installs — may help with this issue.
• Remember that iOS devices actually trust the app developer, not the specific app. So this method effectively trusts all apps signed by the same developer.