Mobile apps that are deployed using Configuration Manager appear in the company portal on mobile devices. You can deploy sideloaded apps or links to application stores to enrolled devices. Use the information in the following sections to help you create and deploy applications to mobile devices.
Steps to Create and Deploy an
App
The following table provides the steps, details, and more information for creating and deploying apps for mobile devices.
| Step | More Information |
|---|---|
|
Step 1: Create a Configuration Manager application that contains the mobile app. |
Use the Create Application Wizard to create an application for the mobile device. |
|
Step 2: Deploy the application. |
Use the Deploy Software Wizard to deploy the application to mobile devices. For more information, see To deploy an application to mobile devices. |
Create an application
You can use the Create Application Wizard to create an application to that you can deploy to mobile devices.
Create an application for
Windows Phone 8 devices
For Windows Phone 8 devices, you can deploy apps or you can deploy links to apps in the Windows Phone Store. To deploy apps to Windows Phone 8, you must select Windows Phone 8 devices when you configure the Windows Intune subscription.
To create an application for
sideloading a line-of-business app for Windows Phone 8
devices
-
In the Configuration Manager console, click Software Library.
-
In the Software Library workspace, expand Application Management, and then click Applications.
-
In the Home tab, in the Create group, click Create Application.
-
On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files.
-
In the Type drop-down list, select Windows Phone app package (*.xap file).
-
Click Browse to select the Windows Phone app package you want to import, and then click Next.
-
On the General Information page of the wizard, enter the descriptive text and category information that you want users to see in the company portal.
-
Complete the wizard.
The new application is displayed in the Applications node of the Software Library workspace.
To create an application containing a
link to the Windows Phone Store for Windows Phone 8
devices
-
In the Configuration Manager console, click Software Library.
-
In the Software Library workspace, expand Application Management, and then click Applications.
-
In the Home tab, in the Create group, click Create Application.
-
On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files.
-
In the Type drop-down, select Windows Phone app package (in the Windows Phone Store)
-
Click Browse to open the Windows Phone Store, select the app you want to include, and then click Next.
-
On the General Information page, enter the descriptive text and category information that you want users to see in the company portal.
-
Complete the wizard.
The new application is displayed in the Applications node of the Software Library workspace.
Create an application for
Windows RT, Windows RT 8.1, or Windows 8.1 devices
For Windows RT or Windows 8.1 devices, you can deploy line-of-business apps or you can deploy links to apps in the Windows Store. For Windows 8.1, the following procedures are for mobile apps and the Windows 8.1 devices do not have the Configuration Manager client installed.
To create an application for
sideloading a line-of-business app for Windows RT, Windows RT
8.1, or Windows 8.1
-
In the Configuration Manager console, click Software Library.
-
In the Software Library workspace, expand Application Management, and then click Applications.
-
In the Home tab, in the Create group, click Create Application.
-
On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files.
-
In the Type drop-down, select Windows app package (*.appx file).
-
Click Browse, select the signed .appx program file that you want to include, and then click Next.
-
On the General Information page, enter the descriptive text and category information that you want users to see in the company portal.
-
Complete the wizard.
The new application is displayed in the Applications node of the Software Library workspace.
Create an application containing a link
to the Windows Store for Windows RT, Windows RT 8.1, or
Windows 8.1 devices
To create a link to the Windows Store for Windows RT, the app must be installed on a Windows 8 computer. You must first configure WinRM for HTTPS on the Windows 8 computer.
Configure WinRM for HTTPS for the
Windows 8 computer that has the app installed
-
Create an HTTPS-based listener by running
winrm qc –Transport:HTTPS. -
Run the command
enable-psremotingto allow PowerShell remoting. -
Run the command
winrm delete winrm/config/Listener?Address=*+Transport=HTTPto remove the HTTP-based listener that was automatically created by the enable-psremoting command. -
Open Windows Firewall and add an inbound rule for port 5986, which is the default HTTPS port for Windows Remote Management (WinRM).
To create an application containing a
link to the Windows Store for Windows RT
-
In the Configuration Manager console, click Software Library.
-
In the Software Library workspace, expand Application Management, and then click Applications.
-
In the Home tab, in the Create group, click Create Application.
-
On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files.
-
In the Type dropdown, select Windows app package (in the Windows Store)
-
Click Browse and then, in the Browse Windows App Packages dialog box, connect to a computer that runs Windows 8 and that has the required app installed, select the app, and then click Next.
-
On the General Information page, enter the descriptive text and category information that you want users to see in the company portal.
-
Complete the wizard.
NoteFor applications containing a link to the Windows Store, you must create a requirement that adds the value Windows RT to the Operating system condition.
The new application is displayed in the Applications node of the Software Library workspace.
Create an application for iOS
devices
For devices that run iOS, you can deploy line-of-business apps or you can deploy links to apps on the App store.
To create an application for
sideloading a line-of-business app for iOS devices
-
In the Configuration Manager console, click Software Library.
-
In the Software Library workspace, expand Application Management, and then click Applications.
-
In the Home tab, select Create group, and then click Create Application.
-
On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files.
-
In the Type drop-down list, select App Package for iOS (*.ipa file).
-
Click Browse, select the signed application (*.ipa) file that you want to include, and then click Next.
-
On the General Information page, enter the descriptive text and category information that you want users to see in the company portal.
-
Complete the wizard.
The new application is displayed in the Applications node of the Software Library workspace.
To create an application containing a
link to the App Store for iOS devices
-
In the Configuration Manager console, click Software Library.
-
In the Software Library workspace, expand Application Management, and then click Applications.
-
In the Home tab, in the Create group, click Create Application.
-
On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files.
-
In the Type dropdown, select App Package for iOS from App Store.
-
Click Browse, select the app you want to include, and then click Next.
-
On the General Information page, enter the descriptive text and category information that you want users to see in the company portal.
-
Complete the wizard.
The new application is displayed in the Applications node of the Software Library workspace.
Create an application for Android
devices
For Android devices, you can deploy apps or you can deploy links to Google Play by using the company portal.
To create an application for
sideloading a line-of-business app for Android devices
-
In the Configuration Manager console, click Software Library.
-
In the Software Library workspace, expand Application Management, and then click Applications.
-
In the Home tab, in the Create group, click Create Application.
-
On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files.
-
In the Type drop-down, select App Package for Android (*.apk file).
-
Click Browse, select the .apk program file you want to include, and then click Next.
-
On the General Information page, enter the descriptive text and category information that you want users to see in the company portal.
NoteIf you create more than one deployment type for the same app, only the deployment type with the highest priority will be displayed in the company portal. -
Complete the wizard.
The new application is displayed in the Applications node of the Software Library workspace.
To create an application
containing a link to Google Play
-
In the Configuration Manager console, click Software Library.
-
In the Software Library workspace, expand Application Management, and then click Applications.
-
In the Home tab, in the Create group, click Create Application.
-
On the General page of the Create Application Wizard, select Automatically detect information about this application from installation files.
-
In the Type drop-down, select App Package for Android in Google Play.
-
Click Browse, select the app you want to include, and then click Next.
-
On the General Information page, enter the descriptive text and category information that you want users to see in the company portal.
-
Complete the wizard.
The new application is displayed in the Applications node of the Software Library workspace.
Deploying an Application to Mobile
Devices
Use the information in the following section to deploy applications to mobile devices. After you deploy the application, the app is not automatically installed on devices. Users must download the app from the company portal.
To deploy an application to mobile
devices
-
In the Configuration Manager console, click Software Library.
-
In the Software Library workspace, expand Application Management, and then click Applications.
-
In the Applications list, select the application that you want to deploy, on the Home tab, in the Deployment group, click Deploy.
-
On the General page of the Deploy Software Wizard, specify the following information:
-
Software – To display the applications that you want to deploy. You can click Browse to select a different application to deploy.
-
Collection – Click Browse and select the collection that you selected for enablement in the Windows Intune Subscription Wizard.
ImportantSelecting the device collection All Mobile Devices will not deploy apps to iOS, Android, Windows Phone 8, or Windows RT. You must select the same user collection or a subset of the user collection that you selected in the Windows Intune Subscription Wizard.
-
-
Click Next.
-
On the Content page of the wizard, select Manage.Microsoft.com as your distribution point. Click Next.
-
On the Deployment Settings page of the Deploy Software Wizard, specify the following information:
-
Action – From the drop-down list, select Install to install the application.
-
Purpose – From the drop-down list, select the purpose. For personal-owned devices you can choose Available, for your options for company-owned devices, see Company-owned Devices.
-
-
Complete the wizard by specifying your preferred setting for the alerts and scheduling pages. The User Experience page is not relevant to mobile devices.
Company-owned Devices
You can configure enrolled devices as company-owned or personal-owned. Company-owned allows you to get software inventory on all mobile devices. You can configure devices as personal-owned or company-owned by using the Change ownership action. Change ownership is only available for devices that are not domain-joined and do not have the Configuration Manager client installed. The following table lists the behavior of the deployment type for devices that are company-owned.
|
Deployment scenario |
Windows 8.1 |
Windows Phone 8 |
Windows RT |
iOS |
Android |
|
Available Install deployed to users |
Yes |
Yes |
Yes |
Yes |
Yes |
|
Required Install deployed to users and devices |
Automatically installed |
Not available |
Automatically Installed |
User is prompted and must consent before app is installed |
User is prompted and must consent before app is installed |
|
Remote Uninstall deployed to users and devices |
Automatically uninstalled |
Not available |
Automatically uninstalled |
Yes |
User is prompted and must consent before app is uninstalled |
To Change Ownership for a
device
-
In the Configuration Manager console, click Assets and Compliance.
-
In the Assets and Compliance workspace, click Devices or open any collection that displays devices.
-
Click the computer that you want to change ownership on and then, in the Home tab, in the Devices group, click Change Ownership.
-
Choose Personal or Company.
Supersedence
Supersedence works the same for mobile apps as it does for other apps with the exception of the Windows Phone 8 company portal app.
For more information about superseding applications, see How to Use Application Supersedence in Configuration Manager.
Steps to Deploy the latest Windows
Phone 8 Company Portal App with Supersedence
The following table provides the steps, details, and more information for creating and deploying the latest Windows Phone 8 company portal app.
| Step | More Information | ||
|---|---|---|---|
|
Step 1: Get the latest company portal app. |
Download the Windows Phone 8 company portal app. |
||
|
Step 2: Sign the company portal app with your Symantec certificate. |
For information on how to sign the company portal app, see Prerequisites for Enrolling Windows Phone 8 Devices. |
||
|
Step 3: Create a new application with the latest version of the company portal app and specify a supersedence relationship. |
For more information, see Create an application for Windows Phone 8 devices and How to Use Application Supersedence in Configuration Manager. |
||
|
Step 4: Add the application to the Windows Intune Subscription Wizard. |
Add the application Windows Phone 8 page of the Windows Intune Subscription Wizard. For more information, see Configuring the Windows Intune Subscription. |
||
|
Step 5: Delete the deployment that is automatically created when you added the company portal app to the Windows Intune Subscription Wizard. |
The Windows Intune subscription has created an automatic deployment of this app, as this deployment will not support supersedence. |
||
|
Step 6: Create a new deployment of the application and check Automatically upgrade any superceded versions of this application on the Deployment Settings page of the Deploy Software Wizard. |
Create a new deployment with supersedence using the application you created with the supersedence relationship. |
||
|
Step 7 (Optional): The superseding apps would install on devices after 7 days by default. To deploy the company portal app sooner to previously enrolled devices, you can change the schedule re-evaluation for deployments setting to a lower value.
|
For more information, see Software Deployment. |
Approval for Apps
Users can request approval to download an app from their devices. The following table contains information on how to request approval in order to download an app.
| Platform | Users can request approval to download an app from the company portal. |
|---|---|
|
Windows Phone 8 |
Yes |
|
Windows RT or Windows RT 8.1 |
A user can only request approval to download an app from a Windows-based computer or a Windows RT device. If you deploy an app that requires approval from an administrative user, the user must request approval from the Application Catalog on a Windows-based computer. As soon as the user requests approval, the app appears in the company portal. |
|
Windows 8.1 |
Yes |
|
iOS company portal app |
Not available |
|
Android company portal app |
Not available |
Requirement Rules
Requirements rules specify conditions that must be met before a deployment type can be installed on a client device. The requirements that are specific to mobile devices are listed in the following table:
| Platform | Requirements available | ||
|---|---|---|---|
|
Windows Phone 8 |
Not available |
||
|
Windows RT, Windows RT 8.1, Windows 8.1, Windows 8.1 Pro |
Operating system version, device ownership, and language requirements are supported.
|
||
|
iOS |
iOS operating system, device ownership, language requirements, and chassis (iPad or iPhone) are supported. |
||
|
Android |
Not available |
For more information about requirements, see the Step 6: Specify Requirements for the Deployment Type section in the How to Create Deployment Types in Configuration Manager topic.
Expired Certificates for Mobile Device
Apps
On iOS, Windows Phone 8, and Windows RT, if the certificate that is used to sign apps expires, apps are no longer available for users to download.
| Platform | Expired certificate consequences | Resolution |
|---|---|---|
|
iOS |
Users can no longer install apps |
Renew the APNs certificate and locate the Windows Intune Subscription iOS page to upload the new certificate. The new certificate must be created by using the same ID as the original certificate or devices have to be enrolled again. |
|
Windows Phone 8 |
Users can no longer install apps |
Renew the code signing certificate and go the Windows Intune Subscription page to upload the certificate. All apps signed with the previous certificate and the new certificate will run. |
|
Windows RT |
Users can no longer install apps |
Renew the code signing certificate and open the Windows Intune Subscription Wizard Windows RT page to upload the new certificate. |
For additional information, see Information and Support for Configuration Manager.
To contact the documentation team, email SMSdocs@microsoft.com.