Apple
Enterprise IT needs complete visibility and control across iOS, iPadOS, macOS, and tvOS fleets. Iru Endpoint becomes your command center for Apple device management, delivering zero-touch deployment, ongoing compliance, and real-time security across your entire Apple infrastructure—whether your fleet is primarily Apple or a mix with Windows devices.
Zero-Touch Enrollment: Managed from Day One
Apple Business & School Manager Integration
Connect your Apple Business or School Manager account to Iru, and every new device automatically enrolls the moment it's turned on. Automated Device Enrollment (ADE) means users unbox a device to a custom setup experience, the device enrolls without asking for credentials, and your policies and apps apply instantly. IT overhead drops to zero, and your fleet grows at your business's pace.
Continuous Compliance and Threat Detection
Once enrolled, devices are continuously monitored for:
- OS version, patches, disk encryption (FileVault on Mac, hardware encryption on iOS)
- Firewall status, System Integrity Protection, auto-update configuration
- Installed apps, suspicious processes, network connectivity
- Mobile threat signals from integrated EDR
Real-Time Policy Enforcement
When a device falls out of compliance, Iru acts immediately: restrict app access, lock the device, notify IT, or trigger compliance workflows. For regulated environments (HIPAA, PCI DSS, SOC 2), continuous monitoring is critical—compliance is built into every device, every day.
From Endpoint to Enterprise Compliance
Device Posture to Identity
If running Iru Workforce Identity, device context flows to your identity system. Passwordless authentication and conditional access check device compliance status before granting access. A compliant iPad gains access to sensitive resources; a non-compliant device sees restrictions kick in automatically.
Compliance Evidence from Your Fleet
Running Iru Compliance Automation? Your Apple devices contribute to compliance posture. Device encryption, update cadence, security software inventory, and threat detections appear as compliance artifacts. For SOC 2, HIPAA, or industry audits, continuous feeds from your entire fleet are automatically collected and mapped to controls—no manual evidence gathering.
The Result
Iru transforms Apple device management from point-in-time enrollment to continuous, context-aware security. Zero-touch deployment, continuous compliance, real-time threat detection, and unified audit trails—everything enterprises need that point-and-click management can't provide.
Integrations (2)
Apple Business
Connect Apple Business to enable zero-touch Automated Device Enrollment and Apps & Books management.
Apple School Manager
Connect Apple School Manager to automate device enrollment and manage app distribution.
Library Items (46)
iPadOS 17
iPadOS 17 is Apple's tablet operating system with refined widgets, interactive lock screen elements, and optimized handwriting recognition for Apple Pencil.
iOS 18
iOS 18 is Apple's mobile operating system, bringing AI-powered personalization, enhanced privacy features, and a refreshed user interface for better usability.
iPadOS 26
iPadOS 26 introduces new productivity features, enhanced multitasking, and system-level improvements designed to boost performance, security, and usability across enterprise and education environments.
macOS 27 Golden Gate
macOS 27 Golden Gate brings the all-new Siri AI powered by Apple Intelligence and new features for a more responsive, delightful experience.
tvOS 17
tvOS 17 is Apple's operating system for Apple TV, introducing FaceTime support, an updated Control Center, and deeper ecosystem integration.
tvOS 18
tvOS 18 is Apple's operating system for Apple TV, featuring AI-driven content recommendations, enhanced audio experiences, and refined home automation controls.
iOS 17
iOS 17 is Apple's mobile operating system that introduced Live Voicemail, improved AirDrop, and adaptive audio for AirPods, refining the overall user experience.
iPadOS 27
iPadOS 27 brings the all-new Siri AI powered by Apple Intelligence and new features for a more responsive, delightful experience.
iOS 26
iOS 26 introduces new productivity tools, enhanced privacy features, and system optimizations tailored for enterprise environments, empowering users while giving IT greater control over device management.
iTunes
The best way to play your collection of music, movies, TV shows, podcasts, audiobooks, and more.
iOS 27
iOS 27 brings the all-new Siri AI powered by Apple Intelligence and new features for a more responsive, delightful experience.
tvOS 26
tvOS 26 brings performance enhancements, improved device management capabilities, and support for enterprise deployments—making Apple TV a powerful tool for digital signage, conference rooms, and shared environments.
tvOS 27
tvOS 27 brings the all-new Siri AI powered by Apple Intelligence and new features for a more responsive, delightful experience.
iPadOS 18
iPadOS 18 is Apple's tablet operating system, enhancing creative tools, AI-powered app functionalities, and seamless integration with Apple's ecosystem.
Automated Device Enrollment
Streamline device provisioning and deliver a consistent, branded onboarding experience by customizing Setup Assistant screens for Apple devices enrolled through Automated Device Enrollment (ADE). This configuration enables IT administrators to skip unnecessary setup steps, pre-configure essential settings, and reduce time-to-productivity for new employees while maintaining security and compliance standards. This enrollment configuration is essential for organizations implementing zero-touch deployment strategies, particularly for remote employees or large-scale device rollouts where consistent configuration and rapid deployment are critical to operational efficiency.
Custom Printers
Configure Custom Printers settings to automate printer deployment and driver installation across Mac endpoints, ensuring users have immediate access to network printers, department-specific devices, and specialized print equipment without manual configuration. This profile enables IT administrators to define printer queues with specific PPD files, deploy manufacturer drivers, set default printer preferences, and control deployment methods including continuous enforcement for mandatory printers, one-time installation for initial setup, or optional availability through Self Service for user-selected devices. Custom Printers eliminates printing support tickets by standardizing printer configurations, maintaining driver consistency across the organization, and providing seamless print infrastructure access from the moment devices are deployed.
AirPlay Security
Control and secure AirPlay connections across your Apple TV with granular network and authentication requirements. This profile enables IT administrators to enforce network proximity rules and passcode protection for AirPlay sessions, preventing unauthorized screen mirroring and media streaming to Apple TV devices. This profile is essential for organizations concerned about visual data security, especially in environments with confidential information or compliance requirements around data protection.
AirPrint
Streamline printer discovery and simplify the printing experience across your Apple devices by pre-configuring approved AirPrint printers. This profile enables IT administrators to populate users' printer lists with authorized network printers, eliminating manual search and configuration while maintaining control over which printing resources are accessible.
App Lock
Configure application access restrictions and security policies for Apple devices using AppLock profiles. Control which applications users can launch, enforce application whitelists or blacklists, and manage app permissions to protect sensitive data and maintain compliance. Deploy this profile to prevent unauthorized software execution, restrict access to system utilities, or enforce approved application usage across managed devices. Ideal for organizations requiring strict application control in regulated environments or shared device scenarios.
App Store
Configure App Store settings for Apple devices, including automatic app updates, app installation restrictions, and in-app purchase controls. Manage user access to the App Store, enforce organizational policies for app downloads, and control whether users can install apps from sources outside the AppStore. Deploy this profile to standardize app management policies, enhance security by preventing unauthorized software installations, and ensure compliance with organizational software standards across your devices.
Apple Restrictions
Control device behavior and security with granular configuration policies across your Apple devices. Apply comprehensive restrictions to manage functionality, security settings, and user experience—from app limitations and content filters to hardware features and network controls. Supervision-required options unlock advanced restrictions for iPhone, iPad, Apple TV, and Vision Pro devices, enabling deeper organizational control.
Certificate
Configure digital certificates for authentication, encryption, and secure communications across devices and services. Deploy trusted root certificates, intermediate CA certificates, user identity certificates, or device certificates to enable secure network access, VPN connections, email signing and encryption, or application authentication. Manage certificate trust settings, specify allowed uses, and ensure proper certificate chain validation to maintain security standards across your organization.
Conference Room Display
Transform Apple TV devices into dedicated AirPlay receivers for seamless wireless presentations. Conference Room Display mode locks devices to an always-on screen saver with persistent AirPlay connection instructions, creating a professional meeting room experience. This kiosk-like configuration prevents standard Apple TV functionality, ensuring devices remain purpose-built for screen sharing and eliminating distractions from apps, Home Screen, or unwanted content.
Device Name
Standardize device identification across your Apple devices with automated naming conventions. Configure consistent, meaningful device names for Apple endpoints that reflect your organizational structure—whether by department, location, user, or asset ID. Eliminate manual naming inconsistencies and ensure devices are instantly identifiable in your management console, network logs, and inventory systems for streamlined asset tracking and support workflows.
Energy Saver
Configure power management and energy-saving settings for Mac devices to optimize battery life and reduce energy consumption. Control sleep timers, display sleep intervals, hard disk sleep behavior, and wake-on-network settings for both battery and AC power states. Deploy this profile to enforce consistent power policies across your devices, extend battery longevity on portable devices, or ensure devices remain available for remote management tasks. Ideal for organizations seeking to balance energy efficiency with operational requirements or comply with sustainability initiatives.
Ethernet
Configure Ethernet network interface settings for Mac devices to control wired network connectivity and behavior. Define parameters such as network protocols, proxy configurations, DNS settings, and 802.1X authentication for secure network access. Deploy this profile to standardize Ethernet configurations across managed Macs, enforce network security policies, or ensure consistent connectivity in enterprise environments. Essential for organizations managing wired network infrastructure and requiring centralized control over network interface settings on macOS systems.
FileVault
Enable full-disk encryption on Mac devices using Apple's FileVault technology to protect data at rest with XTS-AES-128 encryption. Configure FileVault to require user authentication at startup, manage recovery key escrow options, and enforce encryption policies across your devices. Deploy this profile to ensure compliance with data protection regulations, safeguard sensitive information on lost or stolen devices, and maintain centralized control over encryption settings. Supports both institutional recovery keys and personal recovery keys for flexible key management strategies.
Firewall
Configure firewall rules and network security policies for Mac devices to control inbound and outbound network traffic. Define application-specific firewall rules, enable stealth mode to prevent network discovery, block all incoming connections, or allow signed applications automatically. Deploy this profile to enforce consistent network security policies across managed devices, protect endpoints from unauthorized access, and ensure compliance with organizational security requirements. Essential for securing devices in enterprise, education, and remote work environments.
Gatekeeper
Gatekeeper enforces code signing and notarization requirements to protect Mac devices from malicious software. Configure policies to allow applications from the App Store only, identified developers, or custom trust settings. Manage security assessments for downloaded files, control Gatekeeper bypass permissions, and enforce application execution policies across your Apple devices. Essential for organizations maintaining security compliance while balancing user productivity needs and managing software deployment workflows.
Home Screen Layout
Deliver a consistent, organized user experience by controlling app placement and folder structure on iPhone and iPad Home Screen. Define exactly which apps appear, their precise locations, and how they're grouped across pages and the dock—ensuring employees have immediate access to business-critical tools while maintaining a professional, standardized interface. Eliminate user customization variability and reduce support calls by presenting a curated, role-specific app layout from day one.
Kernel Extension
Deploy and manage kernel extensions (kexts) on Mac devices to enable low-level system functionality and hardware support. Control which kernel extensions are allowed to load, configure system extension policies, and manage user approval workflows for third-party extensions. Essential for organizations deploying specialized hardware drivers, security tools, or system utilities that require kernel-level access. Supports macOS 10.13 and later, with compatibility considerations for System Integrity Protection and secure boot requirements on Apple silicon and Intel-based Macs.
Login and Background Items
Prevent a user from disabling background items for apps. Background items can perform tasks when an app isn't open such as checking for software updates and syncing data.
Login Window
Configure login window behavior and authentication options for Mac devices, including automatic login settings, user list display, password hints, and login screen messages. Control access security by managing guest account access, fast user switching, and restart/shutdown button availability. Deploy this profile to standardize authentication workflows, enhance security posture by restricting login options, or display custom messages for compliance and user guidance. Settings apply to the Mac login window interface and affect all user accounts on managed devices.
Managed Data Flow
Configure and control the movement of data between systems, applications, and services within your infrastructure. Define data routing rules, transformation pipelines, and transfer protocols to ensure secure and efficient information exchange. Implement validation checks, error handling, and logging mechanisms to maintain data integrity throughout the flow process. Support for scheduled transfers, real-time streaming, and batch processing enables flexible deployment across diverse operational requirements.
Privacy
Configure privacy and security settings for Mac devices, including location services, analytics data collection, camera and microphone access permissions, and diagnostic reporting preferences. Control system-level privacy features such as advertising tracking, Siri data usage, and app-specific permissions to protect sensitive information and ensure compliance with organizational privacy policies. Deploy this profile to enforce consistent privacy standards across Mac devices, meet regulatory requirements, or restrict data sharing with Apple and third-party services.
Safari Extensions
Manage Safari browser extensions on iPadOS and iPhone devices by controlling which extensions users can install, run, or access. Configure allowed or blocked extension lists, set permissions for specific extensions, and enforce security policies to prevent unauthorized browser modifications. Deploy this profile to standardize Safari extension usage across your organization, reduce security risks from untrusted extensions, and ensure compliance with corporate browsing policies while maintaining user productivity.
SCEP
Automate secure certificate distribution across your Apple and Windows devices using industry-standard Simple Certificate Enrollment Protocol (SCEP). Seamlessly provision digital certificates from your Certificate Authority to devices for authentication, encryption, and network access, eliminating manual certificate deployment while maintaining enterprise-grade security. Enable secure 802.1x network authentication, VPN connections, email signing, Wi-Fi access, and application-level authentication with centrally managed, automatically renewed certificates that scale across your entire organization.
Screen Saver
Enforce consistent screen saver policies across Mac devices to balance security, energy efficiency, and professional appearance. Configure automated activation intervals and select specific screen saver modules for both active user sessions and login windows—protecting sensitive information during idle periods while maintaining a polished, branded display. Define precise timing for when screen savers engage, choose from system modules or custom displays, and ensure compliance with security policies that require automatic session locking after periods of inactivity.
Setup Assistant
The Setup Assistant profile configures the Setup Assistant experience for new or freshly-installed Apple devices, controlling which panes and prompts users encounter during initial system setup. Customize screens such as Apple ID sign-in, Touch ID enrollment, Siri configuration, analytics consent, and iCloud settings to streamline onboarding and enforce organizational policies. Deploy this profile to standardize the out-of-box experience, reduce setup time for end users, skip unnecessary configuration steps, or ensure compliance with privacy and security requirements during device provisioning.
Single Sign-On Extension
Configure Single Sign-On (SSO) authentication for Apple devices using Kerberos or certificate-based methods to streamline user access to network resources and enterprise applications. Define authentication realms, certificate mappings, and URL patterns that trigger SSO behavior. Deploy this extension to eliminate repetitive login prompts, improve user experience when accessing internal web services, and enforce centralized authentication policies. Supports integration with Active Directory, identity providers, and custom authentication infrastructures to maintain secure, seamless access across managed Mac devices.
Software Update
Maintain stability and security with granular control over Apple software update behavior. Orchestrate when and how devices receive OS updates by configuring automatic installation preferences, defining deferral periods for testing and validation, and managing access to beta releases, ensuring your organization stays protected without disrupting productivity. Balance the need for timely security patches against operational stability by implementing phased rollout strategies that let you test updates with pilot groups before broad deployment across your entire Apple ecosystem.
System Extension
Enable deployment and management of Mac System Extensions that provide essential low-level functionality including network filtering, endpoint security monitoring, and hardware driver support. Configure allowed team identifiers and bundle identifiers to authorize specific extensions, control user approval requirements, and manage extension types such as Network Extensions, Endpoint Security Extensions, and DriverKit extensions. Deploy this profile to ensure critical security tools, VPN clients, and system utilities function properly while maintaining control over which extensions can load on managed devices.
System Preferences Panes
Lock down Mac system configuration by restricting end-user access to specific System Preferences panes. Prevent unauthorized modifications to critical settings like network configurations, security policies, sharing options, and user accounts—ensuring devices remain compliant with IT standards while reducing support overhead from accidental misconfigurations. Selectively hide or disable individual preference panes to create controlled user environments that balance self-service flexibility with administrative oversight, protecting your infrastructure from well-intentioned but problematic changes.
VPN
Configure Virtual Private Network connections for Apple devices to enable secure remote access to organizational resources. Define VPN protocols (IKEv2, IPSec, L2TP, Cisco AnyConnect), authentication methods, server endpoints, and connection parameters. Deploy this profile to establish encrypted tunnels for remote workers, protect data transmission over untrusted networks, and enforce always-on VPN policies. Supports split-tunnel configurations, on-demand connection rules, and per-app VPN assignments for granular access control.
Wallpaper
Configure desktop wallpaper settings for iPhone and iPad devices to standardize visual appearance across your organization. Control wallpaper image selection, positioning, scaling behavior, and whether users can modify desktop backgrounds. Deploy this profile to enforce corporate branding, maintain consistent desktop environments, or prevent unauthorized customization. Supports both static images and dynamic wallpapers, with separate configurations for login windows and user desktops. Ideal for organizations requiring visual consistency or compliance with corporate identity standards.
Wi-Fi
Configure Wi-Fi network settings for Apple and Windows, including SSID, security type, authentication credentials, proxy settings, and auto-join behavior. Deploy Wi-Fi profiles to automatically connect devices to corporate, guest, or secure networks without manual configuration. Control network priority, enable captive portal bypass, and configure certificate-based authentication for enterprise WPA2/WPA3 networks. Essential for ensuring seamless connectivity across managed devices while maintaining security standards and reducing help desk tickets related to network access.