ios_418

Using OS X Lion as a Home Server (Part 9 – Profile Manager and iOS Devices)

Download the Using Apple OS X Lion Server at Home eBook Now

If you’ve been enjoying our Using Apple OS X Lion Server as a Home Server series, then make sure you pick up a copy of the accompanying eBook. You’ll find additional chapters and information on using OS X Lion Server to power your digital home that won’t be available here on the site, and with all of our walkthroughs available in one convenient document (ePub or PDF), it’s far easier to install and configure your server without having to click backward and forwards to the website.

Buy Using OS X Lion Server at Home – £14.99

 

If you read Part 8 of our series, then you’ll now be comfortable using the Profile Manager to remotely configure various user and device settings on your Mac clients. One of the great new features in OS X Lion Server, however, is the extension of the Profile Manager to support remote configuration of iOS devices as well – iPads, iPhones and iPod Touches. Obviously, there’s an increase of these devices (certainly the first two) in business, so it makes sense for Apple to include management support in their server platform, but it’s also a great addition for those thinking about Lion Server in the home.

As we’ll see, managing iOS devices is very similar to how we manage Macs, but some of the configuration settings are more tailored to highly mobile devices like the iPhone and iPad. If your home, like mine, is slowly becoming littered with these touch-capable devices, then you’ll definitely want to check out what you can do to secure and manage them.

1. Enroll Your iOS Devices

Just like we did with our Macs last time, we’ll need to enrol our iOS devices too – we can do so in a similar way too. Take you iPad, iPod Touch or iPhone and visit your server’s device enrollment page at http://yourserver/mydevices. (The shots below are from a first generation iPad)

Photo 08 09 2011 11 23 21 300x225 Using OS X Lion as a Home Server (Part 9   Profile Manager and iOS Devices)

As before, you’ll be asked to login with your server admin credentials, following which you’ll be taken to the now familiar My Devices enrolment page.

Photo 08 09 2011 11 24 351 300x225 Using OS X Lion as a Home Server (Part 9   Profile Manager and iOS Devices)

 

Again, we see the two tabs – one for your devices, and a second for installing profiles manually, if for some reason you don’t want them delivered over the air. Hit the blue Enroll button to proceed, and a screen will pop up with the Device Enrollment profile.

 

Photo 08 09 2011 11 24 541 300x225 Using OS X Lion as a Home Server (Part 9   Profile Manager and iOS Devices)

 

Go ahead and click install to, well, install it. You’ll receive a warning that installing the profile will change the settings on your device (which is the point, so that’s fine).

Photo 10 09 2011 18 47 59 300x225 Using OS X Lion as a Home Server (Part 9   Profile Manager and iOS Devices)

My experience was that initially, despite us running with an authorised SSL certificate, signed by a third party, you’ll still receive a warning that the authenticity of the profile cannot be verified. That’s not such a concern as obviously, you know it’s you that is installing the profile from your server, but it does mean that we’ll need to install a trust profile from the server to verify its identity shortly. As with enrolling your OS X devices, again you’ll be advised that the server administrator has full access to the data on the device. Okay, hit the Install button at the top of the panel to proceed.

Photo 10 09 2011 18 48 09 300x225 Using OS X Lion as a Home Server (Part 9   Profile Manager and iOS Devices)

That’s the profile installed, and the device enrolled – but you’ll see the red “Not Verified” message there, which means it’s time to install the Trust Profile. Click Done to go back to the Enrollment screen, where you’ll see your device is now listed.

Photo 10 09 2011 18 48 55 300x225 Using OS X Lion as a Home Server (Part 9   Profile Manager and iOS Devices)

Click the Profiles Tab, and you should see a Trust Profile listed which can be downloaded and installed on your device. Install it, and you’ll see that the original Remote Management profile has switched from a red Not Verified message, to a green Verified. That’s a job done!

Photo 10 09 2011 19 41 29 300x225 Using OS X Lion as a Home Server (Part 9   Profile Manager and iOS Devices)

Whether you’re enrolling an iPod Touch, iPhone or iPad, the experience and the steps to enrol are exactly the same – albeit with slightly different screen dimensions. I’ll spare you a second walkthrough, and we’ll head straight to the Profile Manager on the server to take a look at configuration options.


Enjoyed this post? Share it.

If you enjoyed reading this post, then why not share it with your friends and followers?

About Terry Walsh

Terry Walsh is the founding editor and owner of We Got Served. Since February 2007, the site has provided detailed coverage and analysis of the emerging home server category, and has subsequently grown into a trusted outlet for digital home news and reviews.

Sign Up for WGS Daily News

If you don't want to miss out on the latest news from We Got Served, why not subscribe to our daily digest? You'll get the day's headlines and a short summary of each news item delivered straight to your inbox each morning.

, , , , , , , , , ,

  • LarryJ

    So.. does anybody else find it interesting that the write-up to get WHS1 up in running – including a full hardware build – can be done in 5 parts and here you are on part 9 of the OSX Lion write-up and you haven't even touched on actually using the server yet.

    • http://www.wegotserved.com Terry Walsh

      WHS is definitely quicker and easer to get up and running, for sure – Apple have a way to go to automate elements of the setup for the average home user – and the more technical user for that matter, if they want to drive higher volume adoption.

    • Craig Givant

      In a few years (probably sooner) when WHS is no longer supported you will be glad to have this write-up even if it's 20 parts in length. I am NOT an Apple "fan boy" but I have thoroughly enjoyed following this series while setting up my own Lion server and will end up with a system that is much more robust than any WHS I have ever had. That by the way is three. If you don't need the additional features (albeit those requiring a couple pages of configuration steps), that's cool, but please don't make it sound like WHS is a better option.

      • LarryJ

        Well… for the home user WHS is a better option. As Terry mentioned in the post above this is complicated even for a technical user. iPhones are popular for a reason – they are simple enough for 95% of the population to use them. These type of people cannot setup something like this (even WHS is too complicated for most of them).

        • Terry Walsh

          What I would say is that with a stronger OOBE, OSX Server could make for a very compelling home server proposition for Mac households – particularly if they dropped the software into a large capacity Time Capsule.

          • Craig Givant

            I can't say that I disagree with the "complexity" argument and that this solution is not for the average home user, but "95% of the population" isn't visiting this forum either. That said I was somewhat "irritated" by your initial comment considering the time that Terry has invested in this series. He doesn't seem to put-off by it, so I'm probably making something out of nothing, but I don't see what that post accomplished. If you have followed along with the series Terry himself has already mentioned (more than once) that this is NOT the "server for everyone" as Apple bills it. It just happens to fit my current needs quite well and Terry's hard work has made it that much easier.

            Terry…. Interesting idea about packaging it better and perhaps including it in a stand alone product. Only time will tell if Apple has the "Home Server" market in mind…. I kinda doubt it.

    • ZDMAN

      I recently had a hard drive crash. Once I installed a new drive and had it up and running I went over to my WHS (media smart) to restore my files. I spent the next two days trying to get files back. The media smart backup database seemed to be running fine and I had no backup errors . I tried everything over this two day period before totally giving up. The backups ware all corrupted with nothing to mention there was a problem. After two days, I ordered a monitor/keyboard adapter for my media smart. I installed OSx on it in way less time than I had spent working on the crappy backup system. Now I have a very stable system that is faster and more stable.

  • Tyler

    I think LarryJ is also forgetting that Terry is configuring this Lion server to do a lot more than what WHS is capable of OTB.

    Don’t get me wrong, I love my WHS, but I like the client and personal cloud aspect offered through the Lion solution. The thing that Lion lacks is an elegant built-in drive pooling solution. Aside from redundant backups of personal data, we primarily use the machine for media streaming – to htpcs and our mobile devices. An iTunes server would enable us to get the most out of apple tv, they make an air video server for Mac, and plex works much better/more reliably than wmc7 and xbmc. Win, win, win. However, like I said, the easy drive redundancy is an issue. Not to mention that I love my add-ins (grid junction, squeezebox and disk management to name a few) and easy remote access.

    Thanks to Terry, looking forward, I am going to experiment with 2 scenarios:
    1) run Lion server in a VM on my WHS homebrew to get the features I like
    2) build a hackintosh Lion server and play with disk utility’s software raid options

    Thoughts?

  • ZDMAN

    This is a great series to read. After reading parts 1 and 2 and getting totally fed up when I found out the hard way my backups to my EX485, although saying successful, really were not; I decided to take a cheap approach. I used a retail version of Snow Leopard – not the server version (legal purchased copy for $30) and a VGA/keyboard adapter ($80) to build my own Mac OS server. I used iboot and multibeast to install (you will find another good thread on another home server site about doing this headless but I could not get it to work) snow leopard onto my EX484 mediasmart. I used the first drive for the OS, then the next two drives using soft raid to store my key documents, music, photos, etc, then used the fourth drive as a backup store. I back the server and my mac to the fourth drive using time machine. I also have an old xp machine that backs up to the fourth drive as well. I am still working on getting my wifes Windows 7 to backup, as it is the home version and does not support network backups. I have all my music, movies and photos shared to all PCs. Everything works great (just dont update snow beyond 10.6.3 – I tried numerous times wihtout successs). I also have the server working as an FTP server for my network cameras. I have not updated my EX485, it is still the stock CPU and memory but runs great. The install was simple and basic but you do need a usb dvd drive (got one at Frys for $16). I have streamed two movies at a time to XBMC (an old xbox and a pc) and it works flawlessly. The only thing i miss is the software that automatically translates my ripped DVDs to mpg files, but I only use this to put movies on my ipad when I travel. I need to find another solution. I have found an app to adde UPNP/DLNA but dont really use that so have not messed with it.
    I can post details in the forums if anyone wants to hear about it.

    Again, great series and good to see people looking at other options now that Microsoft crippled the latest WHS software.

    • Tyler

      I’d like more details on this “soft raid” you mentioned, as that is one of the things I’d like to explore. Did you just use disk utility to mirror the drives or did you use another piece of software? Cool setup you got there by the way.

      • Craig Givant

        http://www.softraid.com/index.html

        In my research this software was highly recommended but its not exactly cheap. Around $130. If you have a Mac Pro like me it certainly beats $800 for an "apple" hardware card but ultimately I went with an eSata Raid card and an external eSata enclosure.

    • Craig Givant

      Try handbrake to "encode" those ripped movies to portable format. Should work great!

      • http://www.wegotserved.com Terry Walsh

        Agreed – Handbrake rocks!

  • nik

    Would be interesting to see a WHS11 vs OSX Lion Server comparison (and also a guide to setting up WHS11).

    I'm a PC and Mac user (with a HP Proliant Microserver)

    Many thanks

  • drew

    Am I caught up to this point??? This has been about THE best tutorial for setting up a server I’ve ever read. I don’t think it could be any better. I’m just wondering if part 10 is out yet.

    • Terry Walsh

      Thanks Drew – yes, you’re up to date. We had a baby last week, so the next part is coming, but a little slowly !

      Best
      Terry

  • drew

    WOW, had a baby?! Congrats. Is this your first? Our firstborn is 6 months now and we love being parents. Well get your priorities straight and get this thing finished! just kidding :)

    • http://www.wegotserved.com Terry Walsh

      This is number 2, so we’ve got out work cut out for sure! :)

  • John

    Hi Terry, cant wait for the rest of this guide!

    Quick question…have you come across any issues with lion server so far?

    Some days mine will be fine others when I try to connect to /mydevices or profile manager I get dns lookup errors. But not all the time.

    Also, I’ve paired up my MacBook but when I try to do it with my iPhone I get an invalid certificate error…even after I’ve installed the trust profile…..any ideas :) ?

    • http://www.wegotserved.com Terry Walsh

      Hi John

      Yes, I've encountered a number of bugs and issues in writing the series – connection to Profile Manager does appear to be more than a little inconsistent. I'm hoping that a big update is on the way from Apple to make Lion Server more robust.

      Terry

      • Rmunozarancibia

        Terry, one question, if i have a mac mini with lion server, and two ipads, may i be acceding simultaneously in sessions of remote access to server  from ipads with diferent user (my wife and me)?.  In windows that is possible in terminal server.

  • drew

    This question is more for a home business so I don’t know if you’ll want to answer it, but… I want my address book (with all my clients) to be accessible to all my employees. But I don’t want them to be able to modify the addressbook. That is LDAP, right? Not cardDAV… If it is LDAP, will you be explaining how to set that up?

    • http://www.wegotserved.com Terry Walsh

      Yep, shared address book setup will be covered soon.

  • Dav

    Congratulations Terry, enjoy the time with your family. Excellent guide, but like all things, good things come to those who wait.

  • Dpkform

    Terry…. as another recent switcher of all household products from PCs / Windows Mobile to Macs / iOS  I am finding this series very useful.  May I suggest adding a full index at the bottom of every page to every article in the series? It is very awkward to locate other articles in the series right now.

    Thanks for the article on setting up users. I would also like to go one step further and learn how to set up  mobile users.  Basic network users are useless for a laptop, because once off the home network, a basic network user can’t even log into their laptop.

    One thing I am finding very problematic is setting up Lion server as NAT to replace my router.  It seems broken.  Have tried the few suggestions I was able to google, but the general consensus on the web is that Lion Server NAT is severely broken. 

    I would strongly disagree that Macs are less trouble than Windows PCs, and I have been using both for over 20 years.  Lion Server is a shockingly broken product. It seems like a pre-alpha release from a bunch of amateurs. The documentation is practically non-existent.  Yes, it has more capabilities than WHS, but it is MUCH MUCH harder to use, both because of its more complex interface, and the fact that so much stuff is still broken. Apple hardware is amazing – I have purchased nearly $10,000 worth of it for our home in the last year, but their software? OS X Lion is decent – IMO not better than WIndows 7 – in many ways less capable, but also nicer in some ways. One has to wonder why the person responsible for releasing Lion server still has a job?  Same debacle with Final Cut Pro.  Apple also has a nasty habit of deprecating products and features on a whim, with no regards to how reliant their users are on those products and features.  Apple is a very good company overall, but also a very arrogant company, that believes its customers are always wrong and Apple is always right.  Often, that is true and is why Apple has been so successful.  But like deja-vu, it may once again be the cause of Apple’s downfall, because sometimes the customer is right and Apple is wrong.  When that happens it is a disaster for their customers.

    Of course Microsoft still has its failing as well, and when it comes to hardware, no PC manufacturer seems able to even come close to the same level of engineering and manufacturing perfection. PC makers still have not figured out how to make a decent touchpad.

    Hmm – sorry – this turned into a tangent.  I have a love hate relationship – will ALL brands of computers – LOL.  No Fanboy of ANY company here :)

    • http://craiggivant.com Craig Givant

      Very, VERY nice comment! The Apple hardware is fantastic and the mere fact that it holds its resale value so well is a tribute to it. No fanboy here either, just stating the facts.

      I have not stood idle while waiting for the next part of the series. I actually started from scratch and finally have what I believe is close to a smooth, well configured, decent functioning system. It was NOT without plenty of headaches.

      Since I didn’t play around with Lion on its own, I have to wonder if the issues I have seen are related to it, or the Server software. As you said, the developers of this package should be out of a job.

      In over a week of “dinking” with it, I am fully convinced of two major flaws:

      1. Permission settings and propagation issues abound. This alone make using this as a home server for “dummies” impossible. While I was never a permissions expert, I feel I have enough knowledge to understand them and it took several iterations of trial and error to finally get a clean permissions tree. Bottom line in this regard….DON”T use the server app to attempt configuring and propagating. I recommend an app called BatChmod coupled with a better “finder” called Path Finder. The first app is free, the second gives you a fully functioning 30 day trial. I found Path Finder only necessary to establish ownership permissions for users that were for some reason not available as a “choice” in BatChmod. Once ownership was properly established, BatChmod can do the rest. I like a GUI in-lieu of the Terminal but if you are more comfortable there, than all this stuff can be done with no additional downloads. 

      2. SMB file sharing is crippled (and that is putting it mildly). For those of you that can’t seem to have your windows boxes connect to your mac, I have finally made progress in that area. The key is to insure you have a LOCAL user setup with the same username and password as the windows machine. Then under System preferences >> Sharing you MUST make sure that this user is added to the list that becomes available when clicking OPTIONS. In that dialog insure that SMB is checked and that the local user is listed in the box below. Once this is accomplished you can add that user (again, the Local one) to any groups or grant that user permissions to a specific share. Oh, and when it stops working (typically after a re-boot of the server), go back to that area, un-check the SMB option, wait a few seconds and then re-check it. In my experience this restart of the SMB service is enough to get things going again. Of course your mileage may vary.

      • Dpkform

        Your story is all too familiar after searching the web.  Bottom line is that Lion server is a broken disaster of a product.

        The great irony in all of this is that Terry justified his move by stating he now needs computers that “just” work.  As a family man now he has less time to fiddle.

        I could agree that Mac Clients can be slightly easier to work with, but Lion server?

        Terry if you need a server that “just works” you should have stuck with Windows Home Server.  Much simpler.  Much more RELIABLE.

        The only reason I can see for moving to Lion Server, which is my excuse, is that I like playing with all the extra features.  It is also the most capable match given that all our hardware is now Apple.

        • http://www.facebook.com/cgivant Craig Givant

          The jury is still out as to whether WHS is more “reliable”. Simpler, yes, but I’ve had my share of issues with it as well. 

          I do agree that it has been “fun” learning and playing with OS X Server and I hope in the long run… worthwhile. 

          What will be interesting to see is the next Lion Server update. I’m giving the product the benefit of the doubt for now and will closely monitor Apple’s support. In my mind this will make clearer the intentions they have for this product line.

  • Phil

    Hi Terry, congrats to the wife and yourself on the baby.

    This is a really interesting read. I’ve been looking for some time on the best way to set up a home server using Lion Server as I’ve been controlling my own server since the days of WebStar server.

    We are a mixed PC/Mac household with a large number of iOS devices and hence my interest in the Profile Manager. I’m also in charge of the schools I.T. infrastructure, again running PCs, Macs, and a plathoria of iOS devices, mostly iPads.

    At home and in work we have a split PC/Mac server solution. Allowing the PC side of things to handle user credentials and network storage done on the Mac. The PC handles policies for the PC side of things and the Mac for Macs and iOS. We currently use Active Directory and SMB to cross talk between the two systems, but since playing with Lion Server a whole host of issues have arisen. Even to the point of the DNS removing the Mac Servers entry when it tries to connect with Active Directory.

    I was just wondering if you’ve tried a cross network system for homes and/or small businesses and your thoughts on it.

    Philip

    • http://www.wegotserved.com Terry Walsh

      Hi Philip – thanks!

      No, haven’t ventured into cross talk with AD for this series, as the full Windows Server infrastructure is out of scope for a home server solution with WHS on the market. However, reading around previously, I’ve seen a lot written about integration difficulties with Lion Server – that may well be due to the new version of the SMB protocol in Lion. 

      I think Apple are going to need a pretty sizeable update to fix a number of serious bugs in the platform.

      Terry

  • Snowmanbob

    Hello Terry,
    Firstly, I would like to send you congratulations on the birth of the new member of your family! I have 5 children and 2 grandchildren and one more due soon. Babies are wonderful!

    Secondly, many thanks for this wonderful tutorial! I purchased Lion Server and tried setting up using the apple users guide. After a few days I had given up believing that I could get it functional. Finding your tutorial has brought back hope, and my Lion server becomes more  functional with every page I read.

    One thing I’m still a little confused about is the host name. I have a dedicated IP and I set all the Cname settings at my domain regitar to forward to the IP.  I have read through your instructions a few times and you seem to state; add the name you registered. My question is, when changing the hostname in lion do I just put the domain name (blabla.com)? Or, do I add “.private” to the beginning or end? like “private.blabla.com” or blabla.com.private”?

    Thank you again and I look forward to the next tutorial.

    • http://www.wegotserved.com Terry Walsh

      Hi Snowmanbob

      Thanks! Kids are hard work, but well worth it! :-)

      With regard to your question, it looks like you’ve purchased a domain to use for your server. So, you should use the fully qualified domain name (FQDN) as your hostname – i.e. mygreatnewserver.com 

      The .private extensions are used where a domain name is not being used, but a user still wants remote access via a VPN link. You’ll be using your domain name in a web browser to access the server remotely.

      Hope that helps!Terry

    • http://craiggivant.com Craig Givant

      Be careful “changing” your Host name once it is set initially. Check back through the comments in the first part of this series (I don’t recall the exact article) to review issues that a certain user experienced. I as well commented about my problems (again, I don’t recall where exactly) and personally ended up starting from scratch with a fresh install. In the end it was worth doing so from my perspective.

      Of course while doing so I followed this guide to a tee and am very happy to have done so.

      Good Luck!

  • Rmunozarancibia

    Terry, one question, if i have a mac mini with lion server, and two ipads, may i be acceding simultaneously in sessions of remote access to server  from ipads with diferent user (my wife and me)?.  In windows that is possible in terminal server.

  • Rmunozarancibia

    Terry, one question, if i have a mac mini with lion server, and two ipads, may i be acceding simultaneously in sessions of remote access to server  from ipads with diferent user (my wife and me)?.  In windows that is possible in terminal server.