iOS and iPadOS Device Management (MDM) and Security Software Designed for the Future of Work

Yes, Kandji integrates with Apple Business Manager to enable streamlined management of iPhone and iPad.

For information on the latest iOS versions Kandji supports, visit our support page.

Kandji uses Apple’s MDM framework to upgrade or update end-user operating systems. Whether you’re upgrading to a major OS or updating to a minor OS version, users will receive the same great experience.

Unified endpoint management (UEM) is a management solution designed to work with a wide range of platforms, including Windows, Android, and Apple. UEM is challenging because these various platforms have different release cycles, provisioning systems, and deployment and management methods. UEM systems are architected in a way that serves all platforms but doesn't necessarily use the complete feature set that each provides. Conversely, MDM solutions focus on specific platforms. Kandji utilizes Apple’s MDM framework to configure and update Apple devices. Read more about MDM, EMM, and UEM solutions here.

Kandji can ensure that data stored on the device is encrypted for all Apple devices. If the device is lost or stolen, an attacker won't be able to access the data without a passcode. The data is automatically obliterated after a number of failed login attempts. You can disallow iCloud backups, so users can't restore backups that contain corporate data to personal devices. And for iOS and iPadOS devices, you can restrict corporate data to being used only by apps installed by Kandji.

With Kandji, you can completely block the App Store and still install apps, including those licensed using Apps and Books in Apple Business Manager, or your own in-house apps. Many companies choose to allow the use of the App Store but restrict the ability to share corporate data with apps that were not deployed by MDM.

Yes, VPN clients and configurations can be deployed to Apple devices.

Kandji has a robust set of pre-built Library Items for managing devices that automatically create the necessary configuration profiles, so you don't need to create them manually. You can also upload custom configuration profiles to deploy to your devices.

Kandji supports the management of all Apple operating systems, including macOS, iOS, iPadOS, and tvOS.

Yes, Kandji can manage tvOS.

Apple designed iOS, iPadOS, and tvOS so they can be managed exclusively using the MDM framework. This provides powerful and robust management for these platforms. macOS also supports the MDM framework, but may require additional management outside that framework’s scope. For that reason, Kandji provides admins not only with capabilities supported by the MDM framework, but also with additional management for macOS using the Kandji Agent. Apple continues to evolve the MDM framework to support additional capabilities. As it does so, Kandji will continue to migrate features from the Kandji Agent to the MDM framework as they become available from Apple.

Yes. In Apple Business Manager or Apple School Manager, configure the device to be required to enroll in Kandji. (You can even configure Apple Business Manager or Apple School Manager to automatically require all new devices your organization purchases to be enrolled in Kandji.) When a user turns on the new device and connects it to the internet, the Setup Assistant on the device will display the Remote Management screen. The user can't use the device until they continue with Setup Assistant and allow the device to enroll in Kandji automatically. You can optionally configure Kandji to require user authentication using credentials from your organization's identity provider (IdP) before the device is allowed to enroll.

Apple or an Apple Authorized Reseller can automatically add those devices to your Apple Business Manager instance when you purchase your devices. You can then automatically assign those devices to your MDM or manually assign them in the Apple Business Manager interface. When a user turns on the new device and connects it to the internet, a Remote Management screen prompts them to enroll in Kandji. The user must continue enrolling into Kandji before the device becomes usable.

Yes, Kandji supports users enrolling devices through a secure web portal. Apple Business Manager can streamline enrollment into Kandji, but it is not required. To add Mac computers to Apple Business Manager after purchase, use Apple Configurator for iPhone. Add iPhone, iPad, and Apple TV devices to Apple Business Manager using Apple Configurator 2. Apple requires that Mac systems and Apple devices added to Apple Business Manager after the time of purchase are erased and that they have not been provisioned.

Kandji uses the MDM framework to collect information from iOS, iPadOS, and tvOS devices. This includes the installed configuration profiles, apps, and certificates. Kandji will also show admins available OS updates, security information such as passcode compliance, and information about the device itself like serial number or battery health. All of this information provides admins with powerful insights while protecting user privacy.