JAMF Software just recently released Casper Suite 8.7 along with their new education-aimed tool Casper Focus. I had a chance to play around with it and test it out the past two days, so you can decide if this is something worth pursuing for yourselves.
What does it do?
To put it simply, Casper Focus allows a teacher to force specific supervised devices to all lock into a specific app. The teacher can select any app that’s in the Mobile App Catalog (even if it isn’t installed on the teacher’s iPad, or the specific student iPads, or wasn’t deployed via JSS / Self-service). The teacher can enable / disable this lock to a specific app with the push of a button (or two), and it’s a very simple interface.
There’s also the ability to clear the passcodes if the student puts on a passcode lock and forgets it, but that’s probably not the main feature people care about.
What does it look like?
When first launched, the Casper Focus app will ask you to put in the URL of the JSS. JAMFNation’s knowledge base helpfully provides some information about how to configure this automatically using DNS-SD or Bonjour, so check out this article here for details. Whether or not you’ve got it set up automatically, this really only has to happen the first time (unless your JSS URL changes for some reason). As long as Casper Focus is on a network that can contact the JSS, you’ll never have to worry about it again.
Next, the user must enter in a name and password to authenticate as a teacher. More on that below.
Once logged in to Casper Focus, the teacher will be able to see a grid of all available iPads listed in the Class, with two buttons on the bottom – Focus Class on App and Clear Passcodes.
You need CasperSuite 8.7 for iOS, you need iOS 5.1.1 or newer devices that are managed by the JSS, and they also need to be supervised by Apple Configurator in order for the Focus feature to work. The “teacher” iPad has to download the free Casper Focus app from the App Store.
Setting Up Classes To Accommodate Casper Focus
In CasperSuite 8.7, there’s a new feature under the Management tab called Classes:
Entering the rabbit hole will allow you to set up the new feature of a Class, in which you specify a Class Name, the usernames of the accounts of teachers (more on that later) authorized to exert control via the Casper Focus app, and a group (either Static or Smart) you’ve created that lists all the devices belonging to that class.
The meeting times are actually somewhat important, as the Casper Focus feature that locks users into a specific app automatically expires at the end of the meeting time. This way, you can basically recreate your school schedule into Casper and allow teachers only to apply focus management during the times it would actually be relevant – you don’t want teachers going home at 5 pm and then trolling students by randomly activating Casper Focus.
Adding Teachers as Users
While JAMF recommends you hook up the JSS to an LDAP, you can also simply add teachers as separate users by creating new accounts. Under the Settings -> Accounts, you can create a new account and grant it no privileges. They don’t need to be able to access anything in the JSS, so you don’t need to worry about potentially letting users muck around with things. The only thing you need to do is add them to the Class as a Teacher, and it works. This is great for testing, or creating unique accounts you want to use just for Focus.
Casper Focus users only have to log in to the app once, and it will save your user between launches. For shared devices, you can always log out of Casper Focus and let another user have it.
Preparing the Clients
Once the teacher and Class aspects are set up, the devices must also meet certain requirements. As mentioned above, they must be managed by the JSS, running iOS 5.1.1 or newer, and they must be Supervised by Apple Configurator to function. The last bit is worthy of some discussion at the end, as Supervision makes for a significant impact on various deployment models used for iOS. Suffice to say, without Supervision, Casper Focus doesn’t really do much (except clear passcodes), so it’s most certainly a one-trick pony.
The impact of Supervision means that users can’t plug the devices into their own computers, which does limit the take-home aspects or personalization aspects of the devices to a significant degree. This is particularly significant when working with any kind of media, such as iMovie projects, or large amounts of photos. Neither of those can be easily shared in bulk via tools like Dropbox (movies tend to be large and it takes time to upload and download them, and there aren’t any bulk-picture-upload features to mitigate photo sharing), so the decision to adopt Supervision should be made in accordance with your expected workflows for students.
Supervision with Apple Configurator doesn’t require you to use it as your app deployment mechanism, nor does it mean that all devices are inherently locked down. It just restricts the device’s functionality for USB tethering. If you don’t expect your students to need to plug devices into computers, then this won’t impact you significantly. Keep in mind, however, that applying Supervision requires erasing the iPad first, so to all iOS admins out there, make sure you fully understand the workflow that you’ll need to adopt to deploy this feature.
Once the teacher is logged into Casper Focus and has a list of devices available to focus during the correct meeting time, the last step is to simply apply the desired focus. The teacher will be presented with a list of all apps in the JSS’s Mobile App Catalog. As I mentioned before, the teacher’s device does not need to have these apps installed, nor do the clients. The apps don’t even need to have VPP spreadsheets, or any kind of scope, or even be managed by JSS deployment. They just have to be in the catalog.
The teacher simply taps the “Focus Class on App” button (or selects an individual iPad to apply this to) and then chooses an app out of the list (or chooses “No App Focus” to allow free usage). All class iPads are then forced to launch the app if it’s installed. While this lock is activated, the Home button is disabled, and the users are unable to hold down the Power button to turn off the iPad. The power button will still turn off the screen, but you cannot exit the app or otherwise get out of it until the Class meeting time ends (and the lock expires), or the teacher releases the lock.
What Actually Happens?
Casper Focus is leveraged using a specific restriction called “Guided Access” combined with the APNS (Apple Push Notification Service). When the teacher uses Casper Focus to focus the iPads, it sends an immediate profile called “App Lock” (signed by the JSS) via APNS to the devices that enforces guided access. The profile cannot be removed manually. If the app isn’t installed, there will be a message overlaid on the screen that cannot be dismissed telling the class device to contact the administrator (and Casper Focus itself will report that the app may not be installed on the target device). This message persists until the App Lock profile expires or is removed.
Casper Focus basically applies on-demand app locking profiles. Many people use this restriction to create erstwhile kiosks (Apple uses this for demo iPads in its stores). Casper Focus now lets you make on-the-fly changes to what app is being locked into the kiosk mode. Note that you still can’t control what happens inside the app – making sure students are actually getting work done still requires the same teacher discipline and classroom skills that we’ve used for thousands of years.
Casper Focus has a very specific use – forcing students with Supervised iPads being managed by the JSS to use a specific app. It doesn’t add any magic powers that we weren’t already aware of, and doesn’t take advantage of any hidden loopholes that nobody knew about. It just leverages built in functionality with timing to allow for on-demand app locking. In addition, students who lock themselves (or others) out can be rescued with the tap of a button.
It’s obviously aimed at education and it seems like it would apply more to younger ones. The requirement for Supervision may give pause to iOS deployment models that revolve around user agency being paramount rather than administrative control. We’ll most likely see this happen in Kindergarten – 4th grade classrooms, and not at all amongst the upper grades where we don’t apply Supervision. Given that the tool is free and requires very little setup, though, there’s no reason not to test it out among teachers who may benefit from it and see what useful advances come of it.