Export (0) Print
Expand All

How to Create and Deploy Applications for Mobile Devices in Configuration Manager

Updated: May 26, 2014

Applies To: System Center 2012 Configuration Manager SP1, System Center 2012 R2 Configuration Manager

Mobile apps that are deployed using Configuration Manager appear in the company portal on mobile devices. You can deploy sideloaded apps or links to application stores to enrolled devices. Use the information in the following sections to help you create and deploy applications to mobile devices.

The following table provides the steps, details, and more information for creating and deploying apps for mobile devices.

 

Step More Information

Step 1: Create a Configuration Manager application that contains the mobile app.

Use the Create Application Wizard to create an application for the mobile device.

Step 2: Deploy the application.

Use the Deploy Software Wizard to deploy the application to mobile devices. For more information, see To deploy an application to mobile devices.

You can use the Create Application Wizard to create an application to that you can deploy to mobile devices.

 

Device Type Supported Files

Windows Phone 8

*.xap

Windows Phone 8.1

*.xap, *.appx, *.appxbundle

Windows RT and Windows RT 8.1

*.appx, *.appxbundle

Windows 8.1 enrolled as a mobile device

*.appx, *.appxbundle

iOS

*.ipa

Android

*.apk

  1. In the Configuration Manager console, click Software Library.

  2. In the Software Library workspace, expand Application Management, and then click Applications.

  3. In the Home tab, in the Create group, click Create Application.

  4. On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files.

  5. In the Type drop-down list, select the supported file type.

  6. Click Browse to select the app package you want to import, and then click Next.

  7. On the General Information page of the wizard, enter the descriptive text and category information that you want users to see in the company portal.

  8. Complete the wizard.

The new application is displayed in the Applications node of the Software Library workspace.

  1. In the Configuration Manager console, click Software Library.

  2. In the Software Library workspace, expand Application Management, and then click Applications.

  3. In the Home tab, in the Create group, click Create Application.

  4. On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files.

  5. In the Type drop-down, select the app package for your device type.

  6. Click Browse to open the store, select the app you want to include, and then click Next.

  7. On the General Information page, enter the descriptive text and category information that you want users to see in the company portal.

  8. Complete the wizard.

The new application is displayed in the Applications node of the Software Library workspace.

To create a link to the Windows Store for Windows RT, the app must be installed on a Windows 8 or Windows computer. You must first configure WinRM for HTTPS on the Windows 8 computer.

  1. Create an HTTPS-based listener by running winrm qc –Transport:HTTPS.

  2. Run the command enable-psremoting to allow PowerShell remoting.

  3. Run the command winrm delete winrm/config/Listener?Address=*+Transport=HTTP to remove the HTTP-based listener that was automatically created by the enable-psremoting command.

  4. Open Windows Firewall and add an inbound rule for port 5986, which is the default HTTPS port for Windows Remote Management (WinRM).

  1. In the Configuration Manager console, click Software Library.

  2. In the Software Library workspace, expand Application Management, and then click Applications.

  3. In the Home tab, in the Create group, click Create Application.

  4. On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files.

  5. In the Type dropdown, select Windows app package (in the Windows Store)

  6. Click Browse and then, in the Browse Windows App Packages dialog box, connect to a computer that runs Windows 8 and that has the required app installed, select the app, and then click Next.

  7. On the General Information page, enter the descriptive text and category information that you want users to see in the company portal.

  8. Complete the wizard.

    noteNote
    For applications containing a link to the Windows Store, you must create a requirement that adds the value Windows RT to the Operating system condition.

Use the information in the following section to deploy applications to mobile devices.

  1. In the Configuration Manager console, click Software Library.

  2. In the Software Library workspace, expand Application Management, and then click Applications.

  3. In the Applications list, select the application that you want to deploy, on the Home tab, in the Deployment group, click Deploy.

  4. On the General page of the Deploy Software Wizard, specify the following information:

    • Software – To display the applications that you want to deploy. You can click Browse to select a different application to deploy.

    • Collection – Click Browse and select the collection that you selected for enablement in the Windows Intune Subscription Wizard.

  5. Click Next.

  6. On the Content page of the wizard, select Manage.Microsoft.com as your distribution point. Click Next.

  7. On the Deployment Settings page of the Deploy Software Wizard, specify the following information:

    • Action – From the drop-down list, select Install to install the application.

    • Purpose – From the drop-down list, select the purpose using the table below.

       

      Deployment scenario Windows 8.1 Windows Phone 8 and Windows Phone 8.1 Windows RT iOS Android

      Available Install deployed to users

      Yes

      Yes

      Yes

      Yes

      Yes. Users can view all available apps regardless if the apps are available to personal or company devices.

      Required Install of sideloaded apps that are deployed to users and devices

      Automatically installed

      Available on Windows Phone 8.1

      Automatically Installed

      User is prompted and must consent  before app is installed

      User is prompted and must consent before app is installed

      Remote Uninstall for sideloaded apps deployed to users and devices

      Automatically uninstalled

      Available on Windows Phone 8.1

      Automatically uninstalled

      Yes

      User is prompted and must consent before app is uninstalled

  8. Complete the wizard by specifying your preferred setting for the alerts and scheduling pages. The User Experience page is not relevant to mobile devices.

Supersedence works the same for mobile apps as it does for other apps with the exception of the Windows Phone 8 company portal app.

For more information about superseding applications, see How to Use Application Supersedence in Configuration Manager.

The following table provides the steps, details, and more information for creating and deploying the latest Windows Phone 8 company portal app.

 

Step More Information

Step 1: Get the latest company portal app.

Download the Windows Phone 8 company portal app.

Step 2: Sign the company portal app with your Symantec certificate.

For information on how to sign the company portal app, see Prerequisites for Enrolling Windows Phone 8 Devices.

Step 3: Create a new application with the latest version of the company portal app and specify a supersedence relationship.

For more information, see Create an application for Windows Phone 8 devices and How to Use Application Supersedence in Configuration Manager.

Step 4: Add the application to the Windows Intune Subscription Wizard.

Add the application Windows Phone 8 page of the Windows Intune Subscription Wizard. For more information, see Configuring the Windows Intune Subscription.

Step 5: Delete the deployment that is automatically created when you added the company portal app to the Windows Intune Subscription Wizard.

The Windows Intune subscription has created an automatic deployment of this app, as this deployment will not support supersedence.

Step 6: Create a new deployment of the application and check Automatically upgrade any superceded versions of this application on the Deployment Settings page of the Deploy Software Wizard.

Create a new deployment with supersedence using the application you created with the supersedence relationship.

Step 7 (Optional): The superseding apps would install on devices after 7 days by default. To deploy the company portal app sooner to previously enrolled devices, you can change the schedule re-evaluation for deployments setting to a lower value.

ImportantImportant
Setting this value to a lower value than the default may negatively affect the performance of your network and client computers.

For more information, see Software Deployment.

Users can request approval to download an app from their devices. The following table contains information on how to request approval in order to download an app.

 

Platform Users can request approval to download an app from the company portal.

Windows Phone 8

Yes

Windows RT or Windows RT 8.1

A user can only request approval to download an app from a Windows-based computer or a Windows RT device. If you deploy an app that requires approval from an administrative user, the user must request approval from the Application Catalog on a Windows-based computer. As soon as the user requests approval, the app appears in the company portal.

Windows 8.1

Yes

iOS company portal app

Not available

Android company portal app

Not available

Requirements rules specify conditions that must be met before a deployment type can be installed on a client device. The requirements that are specific to mobile devices are listed in the following table:

 

Platform Requirements available

Windows Phone 8

Not available

Windows RT, Windows RT 8.1, Windows 8.1, Windows 8.1 Pro

Operating system version, device ownership, and language requirements are supported.

ImportantImportant
For applications containing a link to the Windows Store, you must create a requirement that adds the value Windows RT to the Operating system condition.

If you create a deployment type for a Windows app package (*.appx) file with any additional requirements, those rules will not be evaluated.

iOS

iOS operating system, device ownership, language requirements, and chassis (iPad or iPhone) are supported.

Android

Not available

For more information about requirements, see the Step 6: Specify Requirements for the Deployment Type section in the How to Create Deployment Types in Configuration Manager topic.

To deny apps for Windows Phone 8.1, do the following:

  1. Create a configuration item to deny apps for Windows Phone 8.1, the procedure is below.

  2. Create a configuration baseline using the configuration item you created in step 1.

  3. Deploy the configuration baseline with Remediate noncompliant rules when supported to a user or device collection.

  1. In the Configuration Manager console, click Assets and Compliance > Compliance Settings > Configuration Items > Create Configuration item.

  2. Name the Configuration Item, select Mobile Device for the type of configuration item, and click Next.

  3. Check Configure additional settings that are not in the default setting groups and click Next.

  4. Click Add… and click Create Setting…

  5. Fill in the following fields with the values in the table:

     

    Field Input Value

    Setting type

    OMA URI

    Data type

    String

    OMA-URI

    ./Vendor/MSFT/PolicyManager/My/ApplicationManagement/ApplicationRestrictions

    Click OK.

  6. Select the setting just created from the Available settings list and click Select…

  7. In Create Rule, for Rule type select Value. For the setting, select Equals, add “<AppPolicy Version="1" xmlns="http://schemas.microsoft.com/phone/2013/policy"><Deny><App ProductId="{product ID}"/></Deny></AppPolicy>”

    noteNote
    The product ID is found in the app URL in the Windows Phone store. The app URL is in this format www.windowsphone.com/language/store/app/ app name/product ID

  8. Close the Browse Settings dialog, the rule should appear in the Additional settings list. Click Next.

  9. In Supported Platforms, check All Windows Phone 8.1 and finish the wizard.

On iOS, Windows Phone 8, and Windows RT, if the certificate that is used to sign apps expires, apps are no longer available for users to download.

 

Platform Expired certificate consequences Resolution

iOS

Users can no longer install apps

Renew the APNs certificate and locate the Windows Intune Subscription iOS page to upload the new certificate.

The new certificate must be generated by renewing the existing certificate with same Apple ID so that devices do not need to be enrolled again.

Windows Phone 8

Users can no longer install apps

Renew the code signing certificate and go the Windows Intune Subscription page to upload the certificate. All apps signed with the previous certificate and the new certificate will run.

Windows RT

Users can no longer install apps

Renew the code signing certificate and open the Windows Intune Subscription Wizard Windows RT page to upload the new certificate.

-----
For additional resources, see Information and Support for Configuration Manager.

Tip: Use this query to find online documentation in the TechNet Library for System Center 2012 Configuration Manager. For instructions and examples, see Search the Configuration Manager Documentation Library.
-----
Was this page helpful?
(1500 characters remaining)
Thank you for your feedback
Show:
© 2014 Microsoft