{"id":803,"date":"2010-07-20T11:20:28","date_gmt":"2010-07-20T11:20:28","guid":{"rendered":"http:\/\/refraction.co.uk\/blog\/?p=803"},"modified":"2010-10-20T21:02:05","modified_gmt":"2010-10-20T21:02:05","slug":"device-encryption-on-apple-iphones","status":"publish","type":"post","link":"https:\/\/refraction.co.uk\/blog\/2010\/07\/20\/device-encryption-on-apple-iphones\/","title":{"rendered":"Device Encryption on Apple iPhones"},"content":{"rendered":"<p>Following up from my <a title=\"Refraction.co.uk - Android and iPhone Exchange ActiveSync Policies\" href=\"https:\/\/refraction.co.uk\/blog\/2010\/07\/19\/android-and-iphone-exchange-activesync-policies\/\" target=\"_blank\">last post<\/a> on enforcing security policies devices such as iPhones, I thought it might be worth clarifying how iPhones deal with encryption.<\/p>\n<p>Essentially iPhones from the 3GS onwards are encrypted by default, this isn\u2019t something the end user or administrator can control.\u00a0 Earlier devices such as the iPhone and iPhone 3G do not support encryption at all, they\u2019re simply not powerful enough apparently (Apple told me this!).<\/p>\n<p>So if you use Exchange and wish to set the encryption security policies onto iPhones the \u2018Require Encryption on the Device\u2019 doesn\u2019t actually do much in of itself \u2013 the device is either already encrypted or just can\u2019t be.<\/p>\n<p>Where it is useful is if you wish to block access to devices that cannot be encrypted.\u00a0 In this case you simply set the \u2018Require Encryption on the Device\u2019 policy and uncheck the \u2018Allow Non-Provisional Devices\u2019 policy.\u00a0 The iPhones will report back their support for encryption and Exchange uses this to evaluate whether they should be allowed on not.\u00a0 So iPhone\u2019s and 3G\u2019s will be blocked.<\/p>\n<p>Further info on iPhone support for Exchange ActiveSync Policies can be found <a href=\"https:\/\/refraction.co.uk\/blog\/2010\/07\/19\/android-and-iphone-exchange-activesync-policies\/\" target=\"_blank\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Apple iPhones are encrypted by default so Microsoft Exchange ActiveSync Policies behave slightly differently<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[31,425,423,121,13,427,141],"class_list":["post-803","post","type-post","status-publish","format-standard","hentry","category-tech","tag-apple","tag-encryption","tag-exchange-activesync","tag-iphone","tag-microsoft","tag-policies","tag-security","entry"],"_links":{"self":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts\/803","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/comments?post=803"}],"version-history":[{"count":3,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts\/803\/revisions"}],"predecessor-version":[{"id":805,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/posts\/803\/revisions\/805"}],"wp:attachment":[{"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/media?parent=803"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/categories?post=803"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/refraction.co.uk\/blog\/wp-json\/wp\/v2\/tags?post=803"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}