fleet/server/mdm/apple
Magnus Jensen bdb7673259
Add lost mode behaviour for iOS/iPadOS (#33805)
<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #33416

It's been decided to ship the feature and in the guide mention the apple
bug, that we are currently tracking.
[Slack
🧵](https://fleetdm.slack.com/archives/C03C41L5YEL/p1760448150025089?thread_ts=1760433366.092499&cid=C03C41L5YEL)

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.

## Testing

- [x] Added/updated automated tests

- [x] QA'd all new/changed functionality manually

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* New Features
  * Added Lost Mode support to lock iOS and iPadOS devices.
  * Added ability to disable Lost Mode to unlock iOS/iPadOS devices.
* Improvements
* More consistent lock/unlock experience across macOS, iOS/iPadOS,
Windows, and Linux, with clearer status and activity updates.
* iOS/iPadOS now shows pending unlock status while Lost Mode disable is
in progress.
* Tests
* Added comprehensive end-to-end tests covering lock/unlock/wipe across
Apple, Windows, and Linux devices.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
2025-10-14 11:30:05 -03:00
..
appmanifest Additional CA validation (#27169) 2025-03-19 08:27:55 -05:00
gdmf Added Apple Root Cert for gdmf request. (#27483) 2025-03-24 19:26:36 -05:00
itunes fix: report a failure in setup experience if a VPP app installation fails due to lack of licenses (#27163) 2025-03-17 09:43:51 -04:00
mobileconfig Error on signed configuration profiles (#33341) 2025-09-25 14:50:48 +03:00
rootcert Added Apple Root Cert for gdmf request. (#27483) 2025-03-24 19:26:36 -05:00
vpp Bugfix: retry VPP assets API call on Apple timeout, until our own context hits its timeout (#33313) 2025-09-23 10:46:30 -04:00
apple_bm.go Fix bug in ABM token renewal flow (#22988) 2024-10-18 13:16:04 -05:00
apple_mdm.go Bugfix: create past activities when an "activated" VPP app install is cancelled by turning MDM off (#33693) 2025-10-06 09:15:40 -04:00
apple_mdm_external_test.go Mark dep assignments as failed on certain server errors (#31523) 2025-08-06 13:15:43 -04:00
apple_mdm_test.go Remove webview when IdP not enabled. (#29283) 2025-05-20 22:50:48 +03:00
AppleIphoneDeviceCA.cer implement OTA enrollment (#21942) 2024-09-10 16:52:17 -03:00
cert.go Add SCEP endpoint for host identity. (#30589) 2025-07-11 11:44:07 -03:00
commander.go Add lost mode behaviour for iOS/iPadOS (#33805) 2025-10-14 11:30:05 -03:00
commander_test.go Add lost mode behaviour for iOS/iPadOS (#33805) 2025-10-14 11:30:05 -03:00
deviceinfo.go Remove webview when IdP not enabled. (#29283) 2025-05-20 22:50:48 +03:00
profile_matcher.go use only the UUID part of external_host_identifier for Puppet runs (#13176) 2023-08-07 12:41:13 -03:00
profile_matcher_test.go Error on signed configuration profiles (#33341) 2025-09-25 14:50:48 +03:00
profile_verifier.go DCLK: make user-scoped profiles pending immediately (not after user-channel is created) (#30276) 2025-06-30 09:22:34 -04:00
profile_verifier_test.go allow to verify profiles that are pending (#15911) 2024-01-04 18:26:04 -03:00
util.go Add SCEP endpoint for host identity. (#30589) 2025-07-11 11:44:07 -03:00
util_test.go gate DEP enrollment behind SSO when configured (#11309) 2023-04-27 09:43:20 -03:00