Absolute Manage MDM. John Wu Systems Engineer

Transcription

1 Absolute Manage MDM John Wu Systems Engineer

2 Saving Time and Money Comprehensive IT Automation Patch Management Software Distribution Software License Management Power Management Asset Inventory OS Image Deployment Remote Client Management ios 4 MDM 2

3 Feature Overview Leverages all available features in Apple MDM client Device hardware and software inventory Device purchase and warranty info Configuration profile enforcement For security reasons For corporate compliance In-house app deployment End-user messaging

4 Over-the-Air Management with ios 4 iphones ipads ipod Touches Data or Wi-Fi 4

5 The Absolute Manage Difference Cross-platform installation Competitive pricing Ease of installation Easy-to-build custom reports 5

6 Architecture Absolute Manage Server MDM Server Apple Push Notification Gateway 1. Apple Push Notification Service certificate 2. SSL certificate for MDM server 3. Push Services certificate for in-house app deployment

7 What Makes Absolute Manage MDM Secure Enrollment profile for each device has a unique certificate embedded to identify that device All communication with device is validated against unique device certificate installed as part of enrollment If certificate doesn't match, MDM server discards traffic from device No need for a separate SCEP server Only the MDM Server needs to be exposed to the internet. Absolute Manage server doesn't need to be exposed.

8 Device Security Features Enforce security configurations Mandatory passcode and autolock timer to minimize chances of data loss Remote lock Prevent access from strangers in case of accidental loss with possibility of recovery Remote wipe all data Factory default device to destroy all data if there is no chance of recovery Clear password For end-user that forgets password. Be sure to enforce mandatory passcode.

9 Device Inventory Inventory and group devices automatically by over 30 different hardware data points Group devices by device type, model, and ios version Find out which devices haven t reported in recently Determine which devices are network roaming Inventory and group devices automatically by 5 different installed software information items Check to see how many and which devices have a particular app installed Find out which devices are missing a mandatory app Quickly and easily build custom reports with drag and drop

10 Inventory Items Name Model Model Number OS Version OS Build Number Serial Number Phone Number Last Contact IMEI Capacity Bluetooth MAC Address WiFi MAC Address Production/Purchase Date Warranty End IPv4 Address Passcode Compliant/Present (Data) Roaming Current Carrier Network Current Mobile Country/Network Code SIM ICC Identifier App Name App Version App Bundle Name App Size App Data Size

11 Enforce Configuration Profiles Build configuration profiles with the iphone Configuration Utility Manually deploy these configuration profiles with Install Configuration Profile command Deploy configuration profiles automatically with standard or smart policies Smart policies take effect automatically on new devices without intervention If the configuration profile is removed by end-user it is reapplied at next contact with a smart policy

12 Some Possible Configuration Profiles Disable all apps except for built-in and in-house apps Disable camera and FaceTime Block itunes app store Block itunes Music store Block movies, TV shows, and music Block YouTube and Safari Configure server (including Exchange) Configure VPN connection Configure Wi-fi connection Configure LDAP, CalDAV, CardDAV connections Create webclips - link to websites or online docs (PDFs) Install certificates to access corporate resources

13 Deploy In-House Apps AbsoluteApps in-house app store Assign apps to standard/smart device groups via policy Redeploy apps as needed Provisioning profile for app deployed separately (not embedded) Allows you to revoke provisioning profile for app to disable launching (requires device reboot) Prevents copying of application to another device

14 End-User Messaging Send message to end-users via AbsoluteApps Launch it once to accept notifications Works just like SMS but with NO FEES Send messages longer than 160 characters Message shows up on device even if it's asleep or at lock screen