Task types (iOS, iPadOS)

The following task types are available for iOS task bundles:

Enroll

When the task is transferred to devices, an enrollment email is sent to the email address that is configured for each device. Users must perform the steps that are described in the email to enroll their device.

When the task is transferred to a device that is already enrolled, the task is skipped.

Enroll Sophos container

When the task is transferred to devices, an enrollment email is sent to the email address that is configured for each device. Users must perform the steps that are described in the email to enroll their device.

When the task is transferred to a device that is already enrolled, the task is skipped.

Assign policy

Select a policy. For information on how to add policies to this list, see Policies.

When the task is transferred to devices, the policy is silently assigned.

Uninstall policy

Under Select source, select Policies and then select a policy from the list.

In addition to the policies you’ve created in Sophos Mobile, the list includes all policies installed on a managed device.

You can also uninstall a policy that’s not listed if you know its identifier.

You can only uninstall iOS device policies. For other policy types, either update the policy, assign a different policy, or unenroll the device.

Install provisioning profile

Select an app provisioning profile from the list of available profiles. For information on how to add profiles to this list, see Import provisioning profile (iOS, iPadOS).

When the task is transferred to devices, the provisioning profile is silently installed.

Uninstall provisioning profile

Under Select source, select Profiles and then select a provisioning profile from the list.

In addition to the profiles that are available on the Sophos Mobile server, the list includes profiles that are in use on the managed devices.

You can also remove a provisioning profile that is not contained in the list. Select Identifier and then enter the identifier of the profile you want to remove from devices.

When the task is transferred to devices, the provisioning profile is silently removed.

Reconfigure SMC app

When the task is transferred to a device, the user is asked to scan a QR code or to enter configuration details manually. This reconnects a previously uninstalled Sophos Mobile Control app to the server.

Note This task should be preceded by an Install app task for the Sophos Mobile Control app.

Install app

Select an app from the list of available apps. For information on how to add apps to this list, see Add app.

When the task is transferred to devices, users receive a notification on their devices that Sophos Mobile wants to install the app. Users can tap Install to start the process, or Cancel to reject the installation.

If users reject the installation, the task fails.

If the app is already installed on a device that receives the task, it is updated.

Uninstall app

Under Select source, select Apps to select an app from the list of available apps.

In addition to the apps that are available on the Sophos Mobile server, the list includes apps that are in use on the managed devices - with the exception of system apps.

You can also uninstall an app that is not contained in the list. Select Identifier and then enter the bundle ID of the app you want to uninstall from devices.

When the task is transferred to devices, the app is uninstalled silently.

Install latest iOS update

When the task is transferred to devices, the latest available version of iOS or iPadOS is installed. Depending on the device model, different updates might be installed.

You can update iOS and iPadOS for the following device types:

  • Supervised devices
  • Supervised Apple DEP devices

For other devices, the task will fail.

Send message

Enter a plain text to be displayed on the devices.

When the task is transferred to devices, the message text is displayed in a notification window. Users can display past messages in the Sophos Mobile Control app.

Unenroll

When the task is transferred to devices, they are unenrolled from Sophos Mobile. See Unenroll devices. Device users do not need to confirm the operation.

You can’t add an Unenroll task and a Wipe task to the same task bundle.

Wipe

When the task is transferred to devices, they are reset to their factory settings. Device users do not need to confirm the operation.
CAUTION Use this task type with care. All data on the devices that receive the task is deleted without user confirmation.

You can’t add an Unenroll task and a Wipe task to the same task bundle.