Co-authored by @Akshay Bharadwaj

Introduction

When an organization opens an AppleCare ticket for an iPhone or iPad to address an Apple-related issue, Apple Support may require enhanced diagnostic logs to investigate the issue on the device. Currently, collecting these logs may require physical access to the device, user assistance, or a lengthy process. This can take even more time when the user is located in a different location. 

Apple’s new Trigger Enhanced Log Collection via MaaS360 device view action provides a more streamlined approach. An authorized AppleCare token can be sent to a supervised device through an IBM MaaS360 “Trigger Enhanced Logs” action. The device then initiates an enhanced log collection session, with the exact user interaction determined by the token and the device’s state.

The resulting logs are uploaded to Apple as part of the AppleCare support workflow, helping organizations collect the required diagnostic information more efficiently and reducing the need for physical access or extensive user involvement.

What Is Enhanced Log Collection?

Enhanced Log Collection is an Apple Device Management command designed specifically for AppleCare troubleshooting. The device view action is named “Trigger enhanced logs” and is sent through the standard Apple MDM command channel.

·      The action requires an AppleCare token supplied by AppleCare/Apple Support.

·      The command initiates an enhanced diagnostic logging session on the managed device.

·      The device can run the session interactively or non-interactively, depending on the AppleCare token & device conditions such as passcode is set on the device or any accounts logged in on the device, For example, iCloud, App Store, mail, calendar, or contacts accounts.

·      Interactive or non-interactive mode will be determined by AppleCare Support and the admin (AppleCare, in conjunction with IT support, determines the mode).

·      The collected logs are uploaded to Apple for use with the corresponding AppleCare support case.

·      A separate “Cancel enhanced logs” action can terminate an active session.

How it helps MaaS360 Administrators

For MaaS360 administrators, the key benefit is remote execution. When a device is geographically distributed or the end user is unable to perform manual diagnostics, the MaaS360 MDM action - “Trigger enhanced logs” will helps to upload the diagnostic logs directly to Apple care support.

·      Reduces dependence on physical device access.

·      Makes AppleCare troubleshooting easier for remote and distributed users.

·      Provides a repeatable MDM-based workflow for support teams.

·      Allows the organization to track the action with real-time enhanced-logging action status.

Supported Apple Platforms and Prerequisites:

How Enhanced Log Collection works in MaaS360

Let us assume MaaS360 admin identify the issue with the MaaS360 enrolled device. MaaS360 Admin opens or works with an AppleCare support case. AppleCare provides an AppleCare token and determines the appropriate logging mode.

Step 1: Login to MaaS360 portal > Goto device summary > Click on “More”

Step 2: Chose device view action – “Trigger enhanced logs”

Step 3: Provide the AppleCare token shared by Apple, Select “Requires Network Tethering” (Select only if the device needs to be network-tethered to trigger the action), Provide Comment (optional) and Continue

Step 4: MaaS360 prepares the Trigger Enhanced Log Collection MDM command for the affected supervised device

Step 5: The device validates the token and starts the enhanced logging session

Step 7: Depending on the session mode, the user may be asked to consent, or collection may run in the background

Step 8: User needs to provide consent, accept T&C, proceed in case of interactive mode.

Note: In interactive mode, the user can cancel the log collection process on the device at any point during the log collection session.

Step 9: Log collection real time status can be tracked in device action history.

Step 10: The device uploads the collected logs to Apple.

Canceling Enhanced Log Collection

If an enhanced logging session needs to be stopped, MaaS360 provides a separate action called – “Cancel Enhanced Logs” to cancel the active session. MaaS360 Admin can use this action when there is an active session for enhanced log collection.

Conclusion

MaaS360 MDM action - “Trigger enhanced logs” action brings AppleCare-oriented enhanced diagnostics into the standard MDM management model. For IBM MaaS360 environments, the capability can become an important support tool for remotely initiating Apple-authorized diagnostic collection on supervised Apple devices.

The most important implementation principle is to treat MaaS360 as the orchestration layer while AppleCare remains the source of authorization and the destination for the collected diagnostic data. A successful deployment should combine secure token handling, clear administrator permissions, accurate command/status tracking, device eligibility validation, and comprehensive QA coverage across interactive and non-interactive scenarios.

Apple References

·      Trigger Enhanced Log Collection: https://developer.apple.com/documentation/devicemanagement/trigger-enhanced-log-collection-command

·      Cancel Trigger Enhanced Log Collection: https://developer.apple.com/documentation/devicemanagement/cancel-enhanced-log-collection-command