Distributing the Lookout for Work iOS App
In order to provide the best security possible, Lookout distributes its Lookout for Work iOS app outside of the iOS App Store. Before you can distribute the Lookout for Work iOS app to your employees, you must set-up iOS support.
Setting Up iOS Device Support
Click on the iOS tab within the Systems module to view the iOS Device Support screen. When you visit this screen for the first time, it will indicate that support for iOS devices is not yet configured.
In order to configure support for iOS, you must download the Lookout for Work iOS app, re-sign it with a valid iOS Enterprise Distribution Certificate, and upload it back to Lookout for distribution to end-users.
Step 1 - Download the Lookout for Work iOS app file
Click on the “Download .IPA” button to download the latest version of the Lookout for Work iOS app file (the “.ipa”). The button will indicate which version of the app is available for download.
Step 2 - Resign the iOS app file
Next, in order to distribute the iOS app to your employees outside of the App Store, you will need to re-sign the .ipa file with your iOS Enterprise Developer Certificate. This process is described in detail in the document app iOS App Resigning Process.
Step 3 - Upload the re-signed iOS app file
Once you have re-signed the .ipa file, click on the “Upload signed .ipa” button to upload the re-signed application file to Lookout. As part of this process, Lookout will verify that you have completed the re-signing process correctly, and will alert if there are any errors.
Once you successfully complete the re-signing and upload process, the iOS Device Support screen will change to indicate the support for iOS devices is configured and working correctly.
Once support for iOS device is configured, end-users who open the invite email on an iOS device will see the following page on their mobile browser after they click the “Install Lookout for Work” button:
After the user clicks the “Install Lookout Security for Work” button, the Lookout for Work iOS app will download directly from Lookout’s service and will be installed on the user’s device.
Step 4 (Optional) - Select Deployment Method for Managed Devices
If you are using a Mobile Device Management platform to enroll end-user devices (see Configuring the MobileIron MDM Connector ), you have the option of directing these users to your corporate app store instead of having them download the Lookout for Work app directly from Lookout.
On the iOS tab, select the option “Through your corporate app store” under the “Deployment Method” section and click on Save Changes.
If you select this option, end-users who are enrolled via an MDM Connector and who open the invite email on an iOS device will see the following page (the “[company name]” string will be replaced with the name of your organization):
Note: The option above only applies to devices enrolled via an MDM Connector. End-users who are invited via the Enroll tab in the Devices section will always be asked to download the iOS app from Lookout’s hosted location.
iOS Support Not Configured
If you have not completed the re-signing and upload process described above, end-users who open the invite email on an iOS device will see the following page on their mobile browser:
Updating to a new version of the Lookout for Work iOS app
When a new version of the Lookout for Work app is available for download, the iOS Device Support screen will change to indicate that you are no longer distributing the latest version. To distribute the latest version to your end-users, repeat steps 1-3 above.