BizMobile Go! Instruction Manual. (ios) Checkin, Profile & Template

Transcription

1 (ios) Checkin, Profile & Template

2 Preparing Device Create device information for device management. Create Device information Step 1. Go to CONFIG -> Device -> Create 2. Enter necessary information Input items (* is mandatory field) Device Basic Information OS * Select OS from ios, Android or Windows Identifier * Unique ID for Device Name Nickname for Device Description Description for Device User Select User Template Select Template Device Tag Select Device Tag Device Enrollment and Restriction ios Android Windows Key Y Y Y Auto generated key from Device Identifier and Unit ID. Format is Identifier@Unit ID. Code Y Y Passcode for check- in process. If blank, system generates random code automatically. Registration Y Y 7 only Address for device check-in to BizMobile Go! (Check in is sent every time of creating or updating

3 device by CSV file or input form) UDID Y UDID for Enrollment restriction (ios only) IMEI Y Y IMEI for Enrollment restriction (ios and Android only) MEID Y Y MEID for Enrollment restriction (ios and Android only) Wifi MAC Y Y Wi- Fi MAC Address for Enrollment restriction (ios and Android only) Serial Number Expiration Date Y Hardware serial for Enrollment restriction (Windows only) Y Y Y 1 week as default Application Information ios Android Windows Get Non- Y Y For ios, configure to get app information MDM for Managed (App s distributed Application Information from MDM) only or including Unmanaged apps. For Android, configure to g et app information for apps installed from app catalog at Work Profile only or all apps (Work Profile enabled device only). Enable Displaying and Detection Show Non- MDM app at Device Detail app list, and detected by Banned App list. Enable Detection Only Do not show Non- MDM app at Device Detail app list, but detected by Banned App list. Disable Displaying and Detection

4 Do not show Non-MDM app at Device Detail app list, and not detected by Banned App list. Location Option (Optional service enabled only) ios Android Windows Get Device Location Y Y Turn on to get location information from device Location Information Sharing Y Y Select location information force sharing with device user. 3. Click Save to register information, or Cancel to cancel this registration.

5 Preparing Device Enrollment Confirm Enrollment information (one device) Step 1. Go to CONFIG -> Device, and click Identifier of the device. 2. Confirm Key and Code at Device Enrollment and Restriction area. Please notify this information to device user. Confirm Enrollment information (all devices) Step 1. Go to CONFIG -> Device -> Export

6 2. Click Select Export Type pull down menu and select Device Restrictions, and then press Export. 3. Press OK at Create download job? screen. 4. System shows a new job at the Export history table as status=pending. After a few seconds, press Refresh button on your browser. 5. After refresh, Status is changed to SUCCESS, and ID number is changed to hyperlink. If not, please wait some more seconds and press refresh button on your browser again.

7 6. At the DOWNLOAD window, click Donwload to get CSV file, and then press OK to close this popup. 7. Key and Code information are available at downloaded CSV file as below. Please notify these Key and Code to Device users. Use check in BizMobile Go! supports Check in function. Check in is sent automatically valid Address is entered when new device is created by CSV file or Create New Device Screen. When update device information before check in, this is sent again, too. For Windows device, only Windows 7 device is supported this check in function. In addition to this automated , manual sending is supported as below step. Step 1. Go to CONFIG -> Device, and then click identifier which you want to send .

8 2. Click icon at the Device Enrollment and Restriction area. icon is disabled if address is not entered. 3. Press OK at Invite Successfully screen. Device will retrieve below . Tap hyperlink in body, device opens check in website.

9 Device check-in (for Device users) Device check in information is provided by Device Management Operator. Manual check-in For ios/android/windows 7 device When device user gets information for check in (Key and Code), please enter below URL to access Check-in website by device default browser as below, ios: Safari Android: default browser is different by device; please refer to the device manual. Windows 7: Internet Explorer (Asia Region) (Tokyo Region) Note) Please ask your partner the access URL. For Windows 8.1 device When device user gets information for check in (Key and Code), please follow "Device Check in for Windows 8.1 device" topic at the PDF"Device checkin for Windows device". check-in (ios, Android and Windows 7 device) If you receive check-in on your device, please follow the instruction in the body, and go to step 2 of "Device check-in for ios device" topic at the PDF"(iOS)Checkin, Profile&Template" or "Device checkin for Android Device" topic at the PDF"(Android)Checkin, Profile&Template".

10 (Note) If you use third party browser as a default in the device, check-in process may be failed. In this case, please copy URL in body, and paste it to URL area of the default browser.

11 Device check-in for ios device Screen sample is ios 7 on the iphone 5s. 1. Enter Key and Code at Device Enrollment screen, and then tap Continue 2. Tap Check in 3. At Install Profile screen, tap Install for Remote Management profile

12 4. At Warning screen, tap Install. 5. If you set Passcode on the device, enter passcode. 6. Tap Done at Profile Installed screen.

13 7. Close this webpage on you r browser. 8. (Optional) If Device Management Operator configured App Installation, App Installation screen will pop up, tap Install.

14 Profile for ios There are two ways to register profile setting for ios. Create and register ios profile on BizMobile Go! screen Register ios profile resource which is created by Apple Configurator 2 or iphone Configuration Utility. Create and register ios profile on BizMobile Go! screen You can create and register below ios profile settings on the screen. Passcode policy This setting can configure passcode policy which applies to the device Restrictions This setting can configure restriction setting of Apps, device functions or media contents on the device Global HTTP proxy This setting can configure proxy server which all of HTTP traffic is passing Content filter Certificates This setting is available only on the device which is in Supervised mode. T his setting can configure accessible URL on safari browser of the device. You can also configure banned URL. This setting is available only on the device which is in Supervised mode. This setting can configure certificates which is required for authentication of accessing network, such as VPN and other purposes. Only PKCS1 format or PKCS12 format certificates supports to register for this setting. Step 1. Go to Config > Profile > Create

15 2. Enter necessary information. Input items (* is mandatory field) OS* Select ios Distribution Select Template or Non-Template. Basically Profile is distributed with Template, but if you want to distribute profile per device, select Non-Template Type Select Static Template (Only for Template distribution) Select Template(s) to apply this Profile. You can register this profile from Template create screen later. Device (Only for Non-Template distribution) Select Device(s) to apply this Profile. You can register this profile from Device Edit screen later. 3. Configure profile setting. Click and open General menu. Enter general information for the profile setting. Input items (* is mandatory field) Name * Set name of the profile. The name will be displayed on the device. Untitled is set as default name for the profile. Identifier Static value which is randomly generated by system. Operator cannot change the value.

16 Organization Set name of organization. The name will be displayed on the device. Description Enter description of this profile. Consent Message Enter consent message which is displayed when installing the profile manually. The message will be displayed during profile installation. Security Specify if device user can delete the profile on the device manually or not. Below are options you can specify. Always: Device user can delete the profile manually anytime With Authorization: Device user can delete the profile manually only in case they enter specific password Never: Deleting the profile manually by device user will be prohibited. Normally, use this option. Authorization Password* Set password for deleting the profile manually. (Only for With Authorization in Security ) A utomatically Specify timing when the profile which is installed on the remove profile device is deleted automatically. Below are options you can specify. On Date: Profile will be deleted on the device after specified date ends. After Interval: Profile will be deleted on the device after specified day and time elapses. Never: Profile will not be deleted. Normally, use this option. Remove date * (Only for On Date in Automatically remove profile ) Specify due date of keeping the profile on the device. After the date ends, the profile will be deleted automatically from the device. Time interval (Only for After Interval in Automatically remove profile ) (for removal profile) Specify interval day and time of keeping the profile on the * device. After the interval elapses, the profile will be deleted automatically from the device. Configure profile menu. Click each of profile menu and click [Configure] button.

17 Setting menu will be displayed. 4. Click Save to register information, or Cancel to cancel this registration. Register ios profile resource which is created by Apple Configurator 2 or iphone Configuration Utility Configuration Profiles are used to change ios device settings such as passcode policy, device restrictions. Apple Configurator 2 or iphone Configuration Utility supports to create and edit Configuration Profiles. Only Apple Configurator 2 supports new configurations for ios7 and Later. Applications to create Configuration Profile OS Apple Configurator Mac OS only 2 iphone Configuration Utility and Later Mac OS and Windows Not available for ios 7 functions Please refer to the application help for detail.

18 For ios, register Configuration Profile which is created by Apple Configurator 2 or iphone Configuration Utility. Below is steps to register Configuration Profiles which is created by Apple Configurator 2 or iphone Configuration Utility. Step 1. Go to CONFIG -> Profile -> Create 2. Enter necessary information Input items for ios (* is mandatory field) OS * Select ios Description Free text description Distribution Select Template or Non-Template. Basically Profile is distributed with Template, but if you want to distribute profile per device, select Non-Template Type Select Static (Configuration) or Custom. To register Configuration Profile created by Apple Configurator 2 or iphone Configuration Utility, select Static (Configuration). To register Custo m Profile with Custom CSV file (including Certificate distribution if necessary), select Custom. Please refer to the Create Custom Profile and Distribute Certificates. Tick to enable uploading Tick this checkbox file File Select Configuration Profile from a local computer. Custom/Certificate (s) (Only for Custom Profile) Data* Select CSV file for custom configuration (including Certificate distribution if necessary) from a local computer. Please refer to the Create Customized Profile and Distribute Certificates.

19 Certificate(s) Template(s) Device(s) (Only for Custom Profile) To distribute Certificate file(s) to the device, select ZIPed certificate file. Please refer to the Distribute Certificates for detail. (Only for Template distribution) Select Template(s) to apply this Profile. You can register this profile from Template create screen later. (Only for Non-Template distribution) Select Device (s) to apply this Profile. You can register this profile from Device Edit screen later. 3. Click Save to register information, or Cancel to cancel this registration. Create Customized Profile BizMobile Go! supports customized profile to set device by device based settings such as Wifi access point. For example, to apply access point A to device 1, and access point B to device 2. There are two ways to create and register customized profile. Create ios profile on BizMobile Go! screen to put keyword into the field you want to customize, and create CSV file to fill customized value and register them. Use Apple Configurator 2 or iphone Configuration Utility to put keyword into the field you want to customize, and create CSV file to fill customized value. Example Set Wifi access point SSID = ABCDEF, and password passworda for Device A Set Wifi access point SSID = GHIJKL, and password passwordb for Device B Create Customized profile on BizMobile Go! screen Step 1. Go to Config > Profile > Create

20 2. Enter necessary information. Input items (* is mandatory field) OS* Select ios Distribution Select Template. Type Select Custom Template Select Template(s) to apply this Profile. You can register this profile from Template create screen later. 3. Configure profile menu. Click each of profile menu and click [Configure] button. Setting menu will be displayed. Put keyword into the field which you want to set customized value with {{ and }}. In this example, set keyword {{SSID}} for SSID field, and keyword {{PASSWORD}} for password field.

21 4. Create CSV file with customized value. Set keyword as CSV header, and put customized value from second row. (Note) The first column of CSV header is always device_identifier to specify the device. Sample device_identifier,ssid,password DeviceA,ABCDEF,passwordA DeviceB, GHIJKL,passwordB 5. Select CSV file which is created at step 4 on [Custom/Certificate(s) Data] field. 6. Click Save to register information, or Cancel to cancel this registration.

22 Register customized profile resource which is created by Apple Configurator 2 or iphone Configuration Utility Step 1. Put keyword into the field which you want to set customized value with {{ and }}. In this example, set keyword {{SSID}} for SSID field, and keyword {{PASSWORD}} for password field. 2. Create CSV file with customized value. Set keyword as CSV header, and put customized value from second row. (Note) The first column of CSV header is always device_identifier to specify the device. CSV file sample device_identifier,ssid,password DeviceA,ABCDEF,passwordA DeviceB, GHIJKL,passwordB 3. At the profile create screen, select configuration profile file and CSV file.

23 4. Click Save to register information, or Cancel to cancel this registration. Distribute Certificates BizMobile Go! supports certificate distribution with/without Custom Profile. In this case, ZIPed certificate file is required. Distribute Certificate with Customized Profile Below sample shows how to distribute VPN setting and certificate files using Cisco AnyConnect application. Please use Apple Configurator 2 to create Configuration Profile at Step 1 and 2. Step 1. Create Configuration Profile including Root certificate payload and VPN setting payload.

24 2. Click Ignore Errors and Save. This is displayed due to missing certificate file to certify user.

25 3. Create ZIP file for certificate file(s) which you want to distribute. Please do not create any folders in the ZIP file. Create ZIP directly from certificate file(s). 4. Create CSV file with distribution information. Set keyword as CSV header, and put customized value from second row. (Note) The first column of CSV header is always device_identifier to specify the device. device_identifier Device identifier vpn[n].certfile File name of certificate vpn[n].certpass Password of certificate (Note) [N] is started from 0(zero), and increment if you set multiple certificate such as [0], [1], [2]. CSV file sample device_identifier,vpn[0].certfile,vpn [0].certpass device01,user1.p12,1111 device02,user2.p12,1111 device03,user3.p12, At the profile create screen, select configuration profile file, CSV file and ZIP file. 6. Click Save to register information, or Cancel to cancel this registration.

26 (Note) CSV header for other certificate distribution Use below CSV header for Wifi and Exchange certificate distribution. This header is able to use custom header created at Create Customized Profile in the same CSV file. VPN (used above sample case) vpn[n].certfile File name of certificate vpn[n].certpass Password of certificate Wifi wifi[n].certfile wifi[n].certpass File name of certificate Password of certificate Exchange exchange file exchange tpass [N].cert- File name of certificate [N].cer- Password of certificate (Note) [N] is started from 0(zero), and increment if you set multiple certificate such as [0], [1], [2]. Distribute Certificate without Customized Profile BizMobile Go! also supports certificate distribution without Custom Profile. CSV file and Certificate ZIP file is required. (Note) For ios device, certificate is distributed through Configuration Profile. To meet this requirement, BizMobile Go! generates necessary Configuration Profile for this case. Step 1. Create ZIP file for certificate file(s) which you want to distribute. Please do not create any folders in the ZIP file. Create ZIP directly from certificate file(s).

27 2. Create CSV file with distribution information. Set keyword as CSV header, and put customized value from second row. (Note) The first column of CSV header is always device_identifier to specify the device. device_identifier Device identifier cert[n].certfile File name of certificate cert[n].certpass Password of certificate (Note) [N] is started from 0(zero), and increment if you set multiple certificate such as [0], [1], [2]. CSV file sample device_ identifier, cert [0].certfile,cert[0].certpass device01,user1.p12,1111 device02,user2.p12,1111 device03,user3.p12, At the profile create screen, select CSV file and ZIP file. 4. Click Save to register information, or Cancel to cancel this registration. Distribute Provisioning Profile Provisioning profile is a group of profile which bundles certificate, device information and application id to authenticate in-house application (application which

28 is developed in the company for their business usage) for ios. If the application cannot authenticate on the device, device user cannot use the application. Provisioning profile bundles with in-house application for ios and normally distributes to devices by registering the application on BizMobile Go! Provisioning profile expired 1 year after generated it. If provisioning profile expires, in-house application which is using it will be not available and you need to update provisioning profile. There are 2 ways to update it. Version up the in-house application and distribute it (See "Preparing Application information" topic at the PDF"Getting Started" to confirm how to distribute in-house application) Renew the provisioning profile and distribute it Provisioning profile is mobileprovision format file and it bundles certificate, device information, application ID and etc. BizMobile Go! supports bulk distribution of provisioning profile which is common on each device by register mobileprovision file as profile information. Below is the instruction how to register renewed provisioning profile. Step 1. Go to Config > Profile > Create 2. Enter necessary information Input items for ios (* is mandatory field) OS * Select ios Description Free text description Distribution Select Template. Type Select Static (Provisioning). File * Select mobileprovision file from a local computer.

29 Template(s) Select Template(s) to apply this provisioning profile. You can register this profile from Template create screen later. 3. Click Save to register information, or Cancel to cancel this registration. BizMobile Go! raises alarm in below timings. Please refer to the "Alarm list" topic at the PDF"Appendix" to confirm description and required actions for these alarms. 30 days before the provisioning profile expires 7 days before the provisioning profile expires The day when the provisioning profile expires Please update the provisioning profile when you confirm these alarms.

30 Preparing Template What is a Template? Template is the set of device configuration on BizMobile Go! and it supports easy kitting. Template is created for each ios, Android and Windows separately. Operator can assign devices to template based on the variety of templates including configurations and applications for flexible device setting for management policy in the unit. For ios Template, one Template can include multiple configuration profiles, applications and books. One device can have one template, and operator can assign or reassign template as necessary. For Android template, one Template has one profile including password policy, device setting and multiple applications. For Windows Template, one template has one profile including password policy, device setting and multiple applications. Profile App & Banned Book App list ios Y Y Y Android Y Y Windows Y App only Create Template Step 1. Go to CONFIG -> Template -> Create 2. Enter necessary information

31 Input items (* is mandatory field) ios Android Windows OS * Y Y Y Select ios, Android or Windows Name * Y Y Y Template Name Description Y Y Y Free text description Application (s) Y Y Y Select Application(s) to register into this Template. You can apply Template from Application create screen later. (For Android only) Operator can set Install Option for each application at assigning template. Mandatory If device users do not install this application, sync status of this device is to be Not Synchronized Recommended Not impact to device sync status. Just a recommendation for application installation. Profile(s) Y Y Y Select Profile (s) to register into this Template. You can apply Template from Profile create screen later. Device(s) Y Y Y Select Device (s) to register into this Template. You can apply Template from Device create screen later. Book(s) Y (ios only) Select Book(s) to register into this Template. You can apply Template from Book create screen later. Banned Type White/Black List(s) *Mandatory if Banned Type is selected Y Y Select banned type from Black List or White List. If this field is None, White/Black List(s) field is not displayed. Y Y Select Black list or White List. Note) Cannot select Black List including application which is assigned this template.

32 Bulk Enrollment Provisioning Package(s) Y Select Provisioning Package(s) to apply this template to the devices which enroll by using the.ppkg file. 3. Click Save to register information, or Cancel to cancel this registration. Create Template by Copying Existing Template You can create template by copying existing template. Step 1. Go to CONFIG > Template and click template name you would like to copy. 2. Click Copy. 3. Create template screen opens. Settings including original template take over and you can edit it. However, devices which is assigned on original template does not take over and you need to specify devices.

33