Enabling profile encryption

Profile encryption is enabled by default. The administrator has the option to disable this setting. This allows the administrator to control encryption of the backup to iTunes. If profile encryption is enabled, the backup to iTunes is also encrypted. If profile encryption is disabled, the backup to iTunes is not encrypted.

If you disable profile encryption, backup to iTunes continues to be encrypted for devices that are already registered. The backup to iTunes will be unencrypted for devices that registered after the setting change.

Turning off encrypted backups results in compromised certificates on iOS devices, and disabling SCEP. Ivanti EPMM does not recommend turning off encrypted backups, as this compromises system security.

Procedure

1. Go to Settings > System Settings > iOS > MDM.
2. Select or deselect the Enable Profile Encryption setting.
3. Deselecting disables profile encryption, and checking the setting enables profile encryption.
4. Select Save.