# Getting Started with iOS App Management Mobile App Management (MAM) provides administrators with granular control at the application level. It allows organizations to secure app data, enforce corporate policies, and limit data sharing between managed and unmanaged applications. To get started with iOS app management in Hexnode UEM, follow this structured workflow to enroll, deploy, configure, and maintain applications across your fleet. 1. Technical Prerequisites --------------------------- Before initiating app management, ensure the following foundational configurations are active: - [**APNs Certificate**](https://www.hexnode.com/mobile-device-management/help/apns-settings/): A valid **Apple Push Notification service** certificate is mandatory for all over-the-air commands. - [**Device Enrollment**](https://www.hexnode.com/mobile-device-management/help/how-to-enroll-ios-devices-in-hexnode-mdm/): Devices must be enrolled in the Hexnode portal. For advanced controls like **Silent Installation**, devices must be in **Supervised Mode**. - **[VPP Integration](https://www.hexnode.com/mobile-device-management/help/how-to-deploy-apple-vpp-apps-with-hexnode-mdm/) (Optional but Recommended)**: Link your **Apple Business Manager (ABM)** account with Hexnode to manage licenses for bulk app distribution. 2. Populating the App Inventory -------------------------------- Hexnode acts as a centralized repository for all corporate software. You can add four primary types of applications: App TypeDistribution MethodKey Benefit**[Public Store Apps](https://www.hexnode.com/mobile-device-management/help/apple-mdm-app-distribution/)**App Store SearchStandard apps for broad use.**VPP Apps**Volume Purchase ProgramBulk licensing and silent installation without Apple IDs.**[Enterprise Apps](https://www.hexnode.com/mobile-device-management/help/distribute-ios-enterprise-app/)**.ipa File UploadCustom, in-house built proprietary software.**[Web Apps](https://www.hexnode.com/mobile-device-management/help/lock-ios-devices-one-website-using-kiosk-mode/)/[Clips](https://www.hexnode.com/mobile-device-management/help/add-web-clips-to-ios-with-hexnode-mdm/)**URL ConfigurationShortcuts to critical web portals that behave like native apps.**Organization Tools:** - [**App Groups**](https://www.hexnode.com/mobile-device-management/help/how-to-configure-app-groups-using-hexnode-mdm/): Bundle multiple related apps together for easier policy application. - [**App Catalog**](https://www.hexnode.com/mobile-device-management/help/app-catalog/): Create a customized store-front for users to browse and install approved apps on demand. 3. Deploying and Installing Apps --------------------------------- Hexnode offers multiple methods to get apps onto user devices, ranging from manual to fully automated processes. ### Silent App Installation This [feature](https://www.hexnode.com/mobile-device-management/help/how-to-install-apps-silently/) allows administrators to push apps to devices without user intervention. The app appears on the device without prompts or Apple ID requirements. - *Prerequisite*: The iOS device must be [**Supervised**](https://www.hexnode.com/mobile-device-management/help/ios-supervised-mode/). - *VPP Support*: Volume Purchase Program (VPP) apps can be installed silently on supervised devices, bypassing the need for personal Apple IDs. ### Enforce App Installation (Required Apps) Ensure compliance by designating specific applications as “Required.” - **Mandatory Install**: This [feature](https://www.hexnode.com/mobile-device-management/help/how-to-enforce-app-installation-on-ios-devices-using-hexnode-mdm/) pushes essential apps to the device immediately. If a user deletes a required app, Hexnode will detect it and reinstall the app automatically. 4. Security and Access Control ------------------------------- Control which applications are permitted to run to maintain productivity and security. ### Blocklisting and Allowlisting - [**Blocklist**](https://www.hexnode.com/mobile-device-management/help/how-to-block-apps-on-ios-devices-using-hexnode-mdm/): Define a list of unauthorized apps (e.g., social media or games) to prevent them from opening or hiding their icons. - **Allowlist**: Restrict the device to run only the specific apps listed by the administrator, effectively blocking all others. ### App Configurations Go beyond simple installation by pre-configuring app settings remotely. - [**XML Configurations**](https://www.hexnode.com/mobile-device-management/help/how-to-push-ios-app-configuration-using-xml-in-hexnode-mdm/): Administrators can push specific settings (such as server URLs or user account details) to managed apps using XML key-value pairs. 5. Maintenance and Updates --------------------------- Keeping apps up to date is vital for security and feature access. - [**Standard Updates**](https://www.hexnode.com/mobile-device-management/help/how-to-update-store-apps-and-enterprise-apps-on-ios-devices-using-hexnode-mdm/): Manually or automatically update Store and Enterprise apps to the latest versions. - [**Kiosk Mode Updates**](https://www.hexnode.com/mobile-device-management/help/how-to-update-an-app-in-ios-single-app-mode/): Hexnode allows you to update apps even while the device is locked in Kiosk Mode (Single App Mode) without disrupting the device state or requiring a reboot. 6. App Uninstallation and Lifecycle ------------------------------------ Manage the [removal of applications](https://www.hexnode.com/mobile-device-management/help/remove-ios-apps-from-devices-using-hexnode-mdm/) when they are no longer needed or when a device leaves the organization. - **On-Demand Removal**: Administrators can manually remove apps via the portal. - **Policy Removal**: Set apps to uninstall automatically if the associated policy is removed. - **Disenrollment**: Configure apps to be removed automatically when the MDM profile is removed from the device, ensuring corporate data does not remain on personal or retired devices. Troubleshooting iOS App Management ----------------------------------- If you encounter issues while you get started with iOS app management, check these common troubleshooting scenarios: ### Issue 1: Apps are not installing silently **Cause**: The device is likely Unsupervised, or the app is a Store app being pushed without VPP. **Solution**: ensure the device is in Supervised Mode. For Store apps, integrate Apple VPP (Volume Purchase Program) to assign licenses to the device rather than the user. ### Issue 2: “App installation invalid” Error **Cause**: Often caused by incompatibility between the app’s minimum OS requirement and the device’s current iOS version. **Solution**: Check the app’s requirements in the App Store or the Info.plist of the Enterprise app and ensure the target device is running a compatible iOS version.