Create an iOS Backup

Step 1: Configure your Master Device

Non DEP

1. Make the master from an erased iOS device. The device does not to be supervised but it can be.

2. Configure the device as desired.

DEP

1. Your MDM DEP profiles must contain Mobile Access Management’s Supervision Identity. If you do not want your devices to pair with hosts other than MAM, Imprivata recommends creating two DEP profiles:

   • Master Device: this DEP profile allows pairing for the master device so that it can pair with iTunes to create the backup.

   • All other devices: For the rest of devices you’re restoring to, you can disallow pairing, but this DEP profile must also include Mobile Access Management’s Supervision Identity.

Step 2: Create the backup using iTunes

1. Open iTunes, but do not connect the master device yet.

2. In iTunes open Preferences > Devices and select Prevent iPods, iPhones, and iPads from Syncing automatically.

3. Connect the master device to the computer. If prompted on the device, tap Trust.  If prompted on the computer, allow iTunes to access information on the device. Click Continue.

4. In iTunes, select Set up as a new iPad/iPhone/iPod.

5. In the Backups section, select This computer.

6. Optional: If your MDM requires encryption, or you would like to encrypt your backup, select Encrypt local backup and set a password when prompted. You’ll need to enter this password when the backup is uploaded to Mobile Access Management.

7. Click Back Up Now.

   Click to enlarge

   

Step 3: Locate the Backup folder

On Windows backups are stored in %AppData%\Apple Computer\MobileSync\Backup\. Macs store backups in ~/Library/Application Support/MobileSync/Backup/.

On Mac, an easier way to locate the backup is to open iTunes > Preferences > Devices. Control-click on the backup you want and select Show in Finder.

Continue below to compress the backup files.

DEP

Step 1:

Prepare the DEP profile in your MDM and your Master Device

• You need a Mac to create this process. You’ll need a DEP device running iOS 10.3.3 or greater.

• Your MDM DEP profile must contain two supervision identities: Mobile Access Management‘s and Configurator’s.

To create a supervision identity in Configurator, use Configurator 2.5 or later.

1. Open Configurator’s Preferences.

2. Click on the "Organizations" tab
   

3. Select the organization you want use to export the supervision identity. If you don’t have an Organization setup you can create one by clicking on the + sign to create a new organization. You can skip the Apple ID, and choose Generate a new supervision identity.
   

4. Click on the gear icon and select Export Supervision Identity… give a name and save it in a location you find it later.

   Click to enlarge

   

5. Enter a password to encrypt the private key.

6. Upload both supervision identities (Mobile Access Management and Configurator) into your MDM’s DEP profile by following these instructions.

7. Once that is done, ensure your master device has this DEP profile assigned to it. If already set up, you’ll need to erase your device for the profile to take effect.

8. Finish setting up the master device with your desired settings.

Step 2: Create the backup using Configurator

1. Connect the device to your Mac, and launch Configurator. The device should appear in the main Configurator window. 

   If you see a warning that the device did not attach, you may have not properly exported or uploaded Configurator’s supervision identity in Step 1.

2. Optional: If your MDM requires encryption, or you would like to encrypt your backup, navigate to Actions > Advanced> Enable Encrypted Backups… and set a password when prompted. You’ll need to enter this password when the backup is uploaded to Mobile Access Management.

3. Control-click on the device, and select Back Up from the menu.

Step 3: Locate the Backup folder

The backup will be located in /Users/<YOUR_USERNAME>/Library/Application Support/MobileSync/Backup/. The backup folder is named with the device’s UDID. You can check the timestamp on the folder to find the latest one.

You can also use iTunes to locate the backup file, as both Configurator and iTunes store these files. Open iTunes > Preferences > Devices tab > and you will see your backups there. Select the backup you want to use, right click on it and select Show in finder to open up the folder.

Continue on to Step 4.