MDM Feature overview - Server Version 5.31 from

Size: px

Start display at page:

Download "MDM Feature overview - Server Version 5.31 from"

Chad Adams
5 years ago
Views:

1 MDM Feature overview - Server Version 5.31 from Features Knox Standard Mobile Operating system Version 7P MDM Client Version Language Inventory data Huawei Mobile Office Solution (15) FR, IT and PT Firmware must Work Profile must support HTCpro (4) be supported HTCpro client SAFE 3 Android < 4.3 (3) SAFE 3 client SAFE 4 Android >= 4.3 (3) FR, IT and PT Android < Android >= 4.0 Android API 25: Android API 23: FR, IT and PT ios >= 5.x = ios >= ios 7 Mac OS >= 10.x Windows 10 Device >= 10 Windows 10 Mobile >= EN, DK and DE IMEI (SIM1) IMSI / ICC IMSI IMSI IMSI IMSI IMSI IMSI IMSI ICC IMSI Previous IMSI / ICC Carrier info Serial Number MAC address Roaming status Battery status GPS location of the device Firmware Information OS Platform OS version OS Update availability >= 9.x () Manufacturer Model Product ID Extended MDM Support information Knox Workspace status Knox API Version Android Work Profile status Android Managed Google Work Account Android Work Profile operation status Active language Available amount of storage on device Available amount of storage on SD Card Installed Software Name/ID/Version/Reseller Service History Page Verified MSISDN SIM Info (MNC and MCC) Network Info (MNC and MCC) Network selected Timezone Current time User Agent MDM status Username (Which User MDM profile is installed on) MDM client version MDM client API version Registration date MDM start date Last MDM-Client connection Last Inventory update Validity/expiration of certificate Validity/expiration of Enrollment Token Find my iphone/ipad function status >= 7.x Supervised status >= 7.x Belongs to DEP status Device Name (from device info field) VPP status Active itunes Account status >= 10.x "Do not disturb" status >= 7.x Personal Hotspot status >= 7.x Allow data status >= 8.x Allow Voice status >= 8.x MDM ID Security Access Gateway status Jailbreak / Rooted status Device encryption status FDE status Storagecard encryption status Autolock time status Bluetooth status FRP (Android) / FMI Activation Lock staus Password compliance status Admin Rights status SIM Card change status Virus found status Visited blacklisted URL GPS Change/Activation status Push Config status (Firebase/GCM/Meteor/SMS) Android ID / UUID ActiveSyncID

2 Special platform features Apple DEP / Samsung KME KME DEP on ios >= 7.x Supervised mode via Apple DEP >= 7.x Android Device Owner Mode Platform specific features Huawei MDM HTCpro/HTCpro2 supported devices SAFE3 KNOX MDM / KME Knox Workspace VPP, VPP2, B2B VPP, DEP DEP, VPP extended security features read export (Encryption, etc.) Security management features KIOSK-Mode >= 7.x supervised Samsung Knox Workspace Activate Android Work Profile Passcode/Password policy Reboot Wipe device 3 Lock/unlock device OTA Update / System Update SIM Card Change Turn on/off of automatic devicelock Restrictions Camera restriction Screenshot Storagecard / Allow external medias USB (various USB settings) () Multiuser mode (via operatingsysten) Add user (Android) Share contacts via Bluetooth AirDrop Modify account Show phonenumber of incoming call on device Share/move/forward data from device to work profile Add user and profile Remove user Configure restrictions Allow user to wipe the device on the device Firmware Recovery Turn off device Allow user to access settings Teethering in various options APN connections VPN connection / Configure Bluetooth Wifi configuration Wifi Allow / deny NFC Certificate management - Trust (root) certificates Certificate management - Identity certificates 7P MDM certificate manager Device encryption 10 Storagecard encryption Deny app installation Deny app uninstallation Deny MDM uninstallation Mobiledata connection while roaming 13 Automatic synchronization while roaming Mobiledata connection Voice calls while roaming GPS status change / Locationmode Google Play, itunes AppStore, Microsoft Store 14 Install from unknown source Install non-market Apps Edit apps in settings and launchers Browser (Native) Add non-msa account Clipboard Voicecalls Send and receive SMS Microphone Backup to Apple icloud Backup to Google Cloud

3 Operations (Conditions) All devices Devices from device list Member of groups (User groups) Not member of groups Android Work Profile status Battery status OS version Ownership Available storage GPS status Belongs to Apple DEP Belongs to Samsung KME Device is Supervised Has a phone number Has a simcard Has a user customer parameter defined Manufacturer is Knox Workspace license status MDM status Model is Not enrolled OS update available / downloaded Platform is SAG status Service-status is Extended MDM features () Waiting for configuration (ios) itunes account is active Is in roaming Configuration is installed Certificate is installed (ios, KNOX) Certificate is not installed (ios, KNOX) Certificate expires Configuration is not installed or modified Installed app from Blacklist Application is installed Application is not installed Application from Whitelist is not installed Applications-status is Newer version vailable (17) Mandatory applications from list are not installed Simcard was changed A blacklisted URL was viewed () () () Device is encrypted Has device admin rights Is Jailbroken / Rooted Password is compliant SD card is encrypted Virus found on device No device connection since No MDM client connection since Wipe failed

4 Operations (Actions) to user Send SMS to user Send SMS Send pushmessage Enrol ( /SMS or SMS/ ) Turn off GPS (KNOX Standard) Turn on GPS (KNOX Standard) File commands Set device as configured (only ios with DEP enrolment) Deactivate KNOX Workspace Re-actrivate KNOX Activate MDM client Deactivate MDM client Reboot Schedule OS update Backup Restore Apply configuration Remove configuration Enrol SCEP certificate () () Uninstall certificate () Install certificate () Uninstall application Activate app in Deactivate app in Activate application () () Deactivate application () () () Start application Remove applicationlist Remove restrictionlist Lock Unlock SAG: Unblock SAG: Block Lock Unlock Allow deactivation of Device admin Install Ikarus antivirus license (Android) () () Files2Go: Activate () () Remove media Install media Delay (Android) () SecurePIM activation

5 Application management Application installation Remote start/stop applications Remote hide applications Silent installation of applications 6 Client AppStorage / Company hub Google Play for Work / Play Editor Applicationlist Notification alerts on application policies Mandatory applicationlist Application blacklist Application whitelist Application-Stores (de)activation Google Play Google Play work Google Play Google Play itunes AppStore Microsoft Store ActiveSync/Corporate Exchange settings ActiveSync/Corporate Exchange delete account SecurePIM IMAP / POP3 settings Configuration management Bookmarks Data Roaming Import of Apple Configurator profiles Folder management Create/modify or delete folders Device actions Activate/deactivate Hotspot on device >= 7.x Apple DEP: Add / remove DEP profile and Remove DEP device ownership Enforce Samsung Knox change(s) / wipe 8 8 Internet accesspoint GPRS/3G/4G settings 5 VPN settings Per App VPN >= 7.x Bluetooth and WLAN scan settings WLAN SSID Blacklist WLAN SSID Whitelist WLAN settings Backup and Restore Enduser triggered backup or restore Contacts SMS Calendar >= 7.1 SSP - Self Registration Portal Enroll via SMS Enroll via Enroll via QR-Code Enroll on screen Re-enroll Export reports Inventory Infrastructure Monitoring Various 7P components./. Version >= 7.x KIOSK Program 7p-kiosk-android p-clr-kiosk-android p-kiosk-settingsandroid SecurePIM see app store see app store se app store see app store see app store Company Hub Client Bomgar Remote Support () () () () CostGuard Client MAM / MCM (9) Anti Virus support Files2Go App Wrapping

6 Notes: 1 = Only WPA settings 2 = only lock 3 = In Android the Wipe button is replaced with Delete, which only wipes all data inside work profile, data in personal profile is untouched 4 = manual installation of the app(s) is required. Update of app in backgroup is possible. For the MDM integrated Apptorage feature, the app Company Hub App must be used and signed accordingly. The Installations tab in Inventory shows only application details from apps that have been installed via Company Hiub and/ or as MDM install command.. 5 = Only GPRS APN on Android 2.X, Samsung SAFE/KNOX and Huawei MDM api supported devices 6 = ios7 >= Only on ios devices from ios7 in supervised mode can the apps be installed in background. App Installations from itunes AppStore requires a local AppleID on the device, unless the device runs ios >= 9.x and server uses VPP / VPP2 or B2B VPP 7 = In Android mode the feature only applies to the lock feature of access to the data inside. 8 = Nur Samsung Knox kompatible Geräte: ( ) 9 = MAM (Mobile Application Managment), MCM (Mobile Content Management) 10 = Native Endgeräteverschlüsselung vom Hersteller 11 = Only HTCpro client, Samsung SAFE/KNOX client and Android GALE client devices 12 = macosx >= required and only from AppStore 13 = Knox restriction 14 = Google Play for Work Editor 15 = Device and device firmware must support Huawei MDM API, and only from EMUI Version >= 5.1 and higher and on business segment devices (P9, P9 Lite mini, P10, P10 Lite, Mate 9, Mate 9 Pro, Mate 10, Mate 10 Lite, Mate 10 Pro) and only with 7P or Telenor branded client from version and higher. 16 = Not all configuration types can be requested from device inventory on inventory reporting from device to server 17 = Newer version available work on the MDM client, MDM components, Cmpany Hub, Google Play/iTunes AppStore apps and only when the script for Appversions update in schedule is activated. Is by default not enabled. Properties of the server console Multitenancy Role concept Cost Guard Contract management Multi language support Individual view and Dashboard view LDAP/CSV Import Option Branding Secure Gateway (Radware, TMG, etc.) Device "Pool" Management Silent Push Messaging Technology - For Android, Windows and ios Platformen White-labeling

MDM Server 5.26 Release Highlights. 7P Mobile Device Management. Rel: 1.0 /

MDM Server 5.26 Release Highlights 7P Mobile Device Management Rel: 1.0 /2017-10-08 Doc.Nr.: RB.52600.V1.0EN Content 1 GENERAL... 3 1 General The following sections provide a brief overview of all new