Available iOS task types

The following task types are available for iOS task bundles:

Enroll

When the task is transferred to devices, an enrollment email is sent to the email address that is configured for each device. Users must perform the steps that are described in the email to enroll their device.

When the task is transferred to a device that is already enrolled, no enrollment email is sent.

Enroll Sophos container

When the task is transferred to devices, an enrollment email is sent to the email address that is configured for each device. Users must perform the steps that are described in the email to enroll their device.

When the task is transferred to a device that is already enrolled, no enrollment email is sent.

Install profile

Select a profile or policy from the list of available profiles and policies. For information on how to add profiles or policies to this list, see Profiles and policies.

When the task is transferred to devices, the profile is silently installed or the policy is silently assigned.

Uninstall Profile

Under Select source, select Profiles and then select a profile from the list.

In addition to the profiles that are available on the Sophos Mobile server, the list includes profiles that are in use on the managed devices.

You can also uninstall a profile that is not contained in the list. Select Identifier and then enter the identifier of the profile you want to uninstall from devices.

When the task is transferred to devices, the profile is silently uninstalled.

Note You cannot directly uninstall a Sophos container policy from devices. Instead, use the device action Unenroll Sophos container. This will also remove the related policy from the device.

Install provisioning profile

Select an app provisioning profile from the list of available profiles. For information on how to add profiles to this list, see Import provisioning profiles for iOS apps.

When the task is transferred to devices, the provisioning profile is silently installed.

Uninstall provisioning profile

Under Select source, select Profiles and then select a provisioning profile from the list.

In addition to the profiles that are available on the Sophos Mobile server, the list includes profiles that are in use on the managed devices.

You can also remove a provisioning profile that is not contained in the list. Select Identifier and then enter the identifier of the profile you want to remove from devices.

When the task is transferred to devices, the provisioning profile is silently removed.

Reconfigure SMC app

When the task is transferred to a device, the user is asked to scan a QR code or to enter configuration details manually. This reconnects a previously uninstalled Sophos Mobile Control app to the server.

Note This task should be preceded by an Install app task for the Sophos Mobile Control app.

Install app

Select an app from the list of all available apps. For information on how to add apps to this list, see Add app.

When the task is transferred to devices, users receive a notification on their devices that Sophos Mobile wants to install the app. Users can tap Install to start the process, or Cancel to reject the installation.

If users reject the installation, the task fails.

If the app is already installed on a device that receives the task, it is updated.

Remove app

Under Select source, select Apps to select an app for removal from the list of available apps.

In addition to the apps that are available on the Sophos Mobile server, the list includes apps that are in use on the managed devices - with the exception of iOS system apps.

You can also remove an app that is not contained in the list. Select Identifier and then enter the bundle ID of the app you want to remove from devices.

When the task is transferred to devices, the app is removed silently.

Install latest iOS update

When the task is transferred to devices, the latest available update of the iOS software is installed. Depending on the iOS device model, different updates might be installed.

You can update the iOS software for the following device types:

  • Supervised devices with iOS 10.3 or higher
  • Supervised Apple DEP devices

For other devices, the task will fail.

Send message

Enter a plain text to be displayed on the devices.

When the task is transferred to devices, the message text is displayed in a notification window. Users can display past messages on the Messages page of the Sophos Mobile Control app.

Unenroll

When the task is transferred to devices, they are unenrolled from Sophos Mobile. See Unenroll devices. Device users do not need to confirm the operation.

You can’t add an Unenroll task and a Wipe task to the same task bundle.

Wipe

When the task is transferred to devices, they are reset to their factory settings. Device users do not need to confirm the operation.
Important Use this task type with care. All data on the devices that receive the task is deleted without user confirmation.

You can’t add an Unenroll task and a Wipe task to the same task bundle.