ZetTrust Arbiter

ZetTrust Arbiter is the device management agent for organizations that use the ZetTrust Unified Endpoint Management (UEM) platform. Once your IT administrator enrolls the device, Arbiter works in the background to keep it compliant with your organization's security policies. WHAT IT DOES Arbiter connects your iPhone or iPad to your organization's management console so IT can apply security baselines, deliver configuration, and confirm the device meets policy. KEY CAPABILITIES - Device Enrollment: Scan the QR code provided by your IT admin to enroll the device in seconds. - Security Compliance: Continuously checks that the device meets your organization's requirements, such as OS version, passcode strength, and encryption status. - Policy Enforcement: Applies VPN profiles, Wi-Fi configuration, and access restrictions set by your IT team. - Site-Based Policies: Where your organization uses them, adjusts policy when the device arrives at or leaves a work site. Requires location permission, which you can review at any time in iOS Settings. - Secure Communication: Traffic between Arbiter and your organization's server is authenticated with mutual TLS (mTLS) certificates. - Hardware Attestation: Uses Apple's DeviceCheck and App Attest frameworks to verify device integrity at enrollment. WHAT YOUR ORGANIZATION CAN AND CANNOT SEE Arbiter reports what IT needs to secure the device: model and OS version, security posture such as passcode and encryption status, network configuration, installed applications, and - only where site-based policies are in use - the device's location. It does not read your messages, email, photos, personal files, or browsing history. iOS does not grant management software access to that content. REQUIREMENTS - Your organization must be a ZetTrust UEM customer. - Enrollment requires a QR code or token provided by your IT administrator. - iOS 15.0 or later. For support, contact your organization's IT helpdesk or visit zettrust.com.