title: iOS MDM with automatic updates of Enterprise Apps
body: <p>We are a small IT team that needs to purchase between 20-100 iOS devices (iPhones) to hand out to external partners. These devices will be setup once, and then leave the premises to pretty much never ever come back physically.</p>
  
  <p>The devices needs to be fully locked to our application. We won't allow surfing, emailing, phonecalls, text messages etc.</p>
  
  <p>I need to set this up as easy as possible. Then I need to install our application (developed in-house) and once I create an update for this app <strong>all</strong> devices needs to be updated OTA. Updates to the iOS firmware should only be available if I say so. I don't want the user to be prompted to update iOS in case our application is not compatible yet.</p>
  
  <p>From my understanding, I know I need some kind of MDM solution (Preferably Apple Configurator or the MDM server built into OS X Server in Yosemite) as well as an Apple Enterprise Developer account.</p>
  
  <p>I'm looking for step by step instructions on how to set this up to be failproof. If any certificate is messed up, or expired at a later stage and the devices would end up "useless" it is nearly <strong>impossible</strong> for me to get to the devices physically.</p>
  
  <p>Thank you for any responses, I'm in charge of quite a important part of the business, and I have no previous experience of this (I don't want to f' up)</p>