Tabernus Enterprise Erase Mobile Tuesday, March 3, 2015 Summary This document describes the use of the Tabernus Enterprise Erase Mobile, including the Erasure and Logging of Assets. TDR Tabernus Nov 2014 Vers: 1:20
COPYRIGHT The copyright in this User Guide is owned by Tabernus LLC and Tabernus Europe Ltd. contact details as stated below: No part of this manual, in whole or in part, may be reproduced, transferred, copied, published, photocopied or translated without the prior agreement and explicit written permission of: Tabernus LLC, 11130 Jollyville Rd, Suite 203, Austin, TX 78759 or Tabernus Europe Ltd., 8 Waterside Court, Albany Street, Newport, NP20 5NT All brand or product names mentioned herein are trademarks or registered trademarks of their respective holders. Tabernus LLC and Tabernus Europe Ltd. retain the right to make alterations to the content of this User Guide without the obligation to inform third parties. Use of Tabernus Enterprise Erase is subject to the terms and conditions entered into between Tabernus LLC or Tabernus Europe Ltd and their users Access to this User Guide is strictly limited to those organizations and their duly authorized employees who have been granted written access to this User Guide. If you are not duly authorized by Tabernus LLC or Tabernus Europe Ltd. through your employer to access this User Guide, kindly advise support@tabernus.com. Page 2 of 40
Table of Contents Contents Why would you use Enterprise Erase Mobile?... 4 Product Features... 4 How Enterprise Erase Mobile Works... 4 System Requirements (Minimum)... 5 Setting up Enterprise Erase Mobile... 6 Download Software... 6 New Software Installation... 6 Initial Software Start Up... 7 Request Licenses... 7 Generate Response Key via Customer Portal... 9 Enterprise Erase Mobile Console Interface... 11 Main Window: Information Parameters... 11 Colour Coding of Device Status... 12 Advanced Device Details... 13 Main Window: Device Status... 15 Main Window: Drop Down Menus... 16 How to Erase an ios Device... 17 How to Erase an Android Device... 19 How to Erase a BlackBerry Device... 22 Web-Based Report Generation Tool... 24 View Mobiles... 24 Certificate... 25 Report... 25 View Filters... 27 Filtering by date range has been enabled.... 28 Service and Support... 29 Appendix 1 Step by Step Installation Guide... 30 Appendix 2 Labeling Ports... 32 Use of the Port Labeling Wizard to assign port names.... 32 Appendix 3 Using Custom Fields... 35 Appendix 4 How To Enable USB Debugging... 37 Page 3 of 40
Why would you use Enterprise Erase Mobile? Product Features Enterprise Erase Mobile (EEMobile) supports the simultaneous erasure of up to 48 mobile devices, to facilitate high volume throughput. Tabernus enables the erasure of mixed mobile devices, so that ios and Android data can be safely deleted, without any reduction in erasure time. The application runs as a server, so that new devices can be hot swapped rather than as a batch process. This allows operators to add new devices as needed. In addition, the ability to mix different types of device from a single set of hubs, which allows the system to automate the erasure with maximum flexibility. Whatever the device, the system will complete the erasure with minimal operator interaction. Tabernus have automated full logging and reporting facilities within a web based reports generation tool. This provides a full audit trial of the erasure, date, time and serial number of the device alongside confirmation of a successful erasure. How Enterprise Erase Mobile Works EEMobile allows continuous erasure, with the ability to hot swap in order to increase productivity. Figure 1 - How EEMobile Works Page 4 of 40
System Requirements (Minimum) System Requirements CPU RAM HDD DVD Misc. IBM-compatible PC with a 64 Bit Intel or AMD processor (Quad Core) Minimum 4 GB RAM Minimum 120GB SSD DVD Drive Network Interface Card, Display, Keyboard, Mouse System Requirements Note: Due to the high I/O requirements on the storage media an SSD is required for ios device processing. It is recommended that a rotational hard drive is not used for processing in excess of 10 ios devices at a time. Enterprise Erase Mobile Software Features Intuitive operator interface Visual Pass/Fail Notification Asset Management Logging Capability Device Serial Number IMEI Number Model Manufacturer Memory Capacity Custom fields for reporting extra information Page 5 of 40
Setting up Enterprise Erase Mobile Download Software 1. Download Software ISO image for this location: Enterprise Erase Mobile URL: http://www.tabernusuk.co.uk/index.php?page=download 2. Burn ISO image to DVD media. 3. Insert DVD and boot DVD on Server or Host System. 4. Next the Live CD desktop, with software and installation icons will start. New Software Installation 1. Insert the DVD and change the boot sequence of the computer to boot the DVD. 2. Once the desktop appears, double-click on the Install Enterprise Erase to Hard Drive icon. Figure 2 - Install Tabernus Net Icon 3. An installation wizard will start; follow Appendix 1 for detailed instructions to install to the hard drive. 4. After installation, the user will be prompted to reboot. Please reboot to use software. Page 6 of 40
Initial Software Start Up After installation the system will boot directly to the Desktop. Double-click EEMobile icon to run software. Note: When the EEMobile application opens, a terminal window will also open on the desktop. Do not close this terminal window. If the terminal window is closed, the GUI application will also close. Figure 3 - EEMobile Desktop Request Licenses Should the software be started without licenses, any devices connected prior to adding more licenses will fail to erase. Follow this procedure to add licenses to the software. 1. Boot to the Enterprise Erase Mobile Desktop. 2. Start the EEMobile Application 3. Start the License Wizard Figure 4 - EEMobile Desktop Page 7 of 40
4. A License Dialog box will appear asking for the number of licenses needed. Enter the number required. Press Next button. Figure 5 - Tabernus License Wizard 5. After which you will be provided with a Request Key. A response key will be provided from the Tabernus customer portal. Figure 6 - Enter number of licenses required Note: Do not close the Tabernus License Wizard until you have entered the Response Key. Page 8 of 40
Figure 7 - Enter Response Key to validate your licenses 6. Enter the response key you have generated from the Customer Portal (see below) Figure 8 - Successful addition of licenses Generate Response Key via Customer Portal 1. Using a computer that has access to the internet launch a web browser and enter the URL http://customer.tabernus.com/ 2. Login to your customer portal 3. See your manager for the login credentials 4. Select Add License Request by Key 5. Enter the Request Key from the software into the License Request of the portal. 6. Select A software Revision from the pull down window. 7. Click Request 8. If the key codes are paired correctly, you should receive the Success message below. Page 9 of 40
9. Enter the Returned Key below, circled in red, and type it into the Response Key in the License Wizard on the Tabernus server and select Finish. 10. If successful you will receive a Congratulations response. Figure 9 - Congratulations Response with returned key 11. The Enterprise Erase will update with the requested licenses. Verify license count by checking the counter located at the bottom with the software s action buttons. Figure 10 - Licences remaining are updated Page 10 of 40
Enterprise Erase Mobile Console Interface Main Window: Information Parameters Figure 11 - EEMobile Main Menu The Main Window confirms the status of each mobile, alongside the status of the erasure. Field USB Port Status OS Identifier Manufacturer Model Notification Description Uniquely identifies the Port to which the device is connected The Status codes include Complete, Failed This identifies the mobile OS e.g. ios or Android This may read as an ECID or SN (Serial Number) of the mobile This displays the manufacturer e.g. Apple This identifies the model number of the mobile This delivers notices to the operator e.g. Safe to remove, when the erasure has finished Main EEMobile Fields Page 11 of 40
Colour Coding of Device Status Each mobile is colour coded to assist the operator with the status of each mobile erasure. Status Colour Green Amber Red White Description Successful Erasure Notifications for the Operator Failed Erasure Device is active Status of Erasure Colour Coding Green A Green device status reveals a successfully completed erasure. Figure 12 - Status Colour Coding - Green means successful erase Amber An Amber device status reveals an issue that might need operator attention (e.g. Downloading Firmware) Figure 13 - Status Colour Coding - Amber means operator attention may be needed Page 12 of 40
Red A Red device status reveals a failed erasure. Double click on the device to access the error log. Figure 14 - Status Colour Coding - Red means the erasure has failed Advanced Device Details Double click on a device, to access the device details. The log includes full serial numbers in addition to any errors generated. Figure 15 - Double click on mobile to access device information Page 13 of 40
Clicking on custom fields in this window will open a list of all the custom values that are set on the device. Please refer to Appendix 3 for instructions on using custom fields in the software. Figure 16 - Double click on mobile to access device information Page 14 of 40
Main Window: Device Status The Status field provides feedback on the device status, including: Status Codes Discovered Initializing Erasing Verifying Complete Failed Description The device has been discovered by EEMobile Server is collecting mobile device asset information Erasure has started Device has restarted and connected to the server, which verifies the erasure Erasure has completed successfully Erasure has failed. Status codes The Notification field provides feedback to the operator. Notifications include: Notification Code Safe to Remove Downloading Firmware USB Debugging Enabled App Permissions Accepted Description The mobile is safe to remove at the end of an erasure The server is downloading and caching the appropriate firmware for the mobile device Android device connected, but unable to communicate because USB debugging has not been enabled on the device. Put the device in USB debugging mode The Android helper app is installed, and the user must grant permission to erase the device. Notification Codes Page 15 of 40
Main Window: Drop Down Menus The Title Bar Menu includes drop down menus. Figure 17 Title Bar Menu License Wizard - Opens license wizard to add more erasure licenses to the EEMobile server. Port Labeling Wizard Opens the Port Labeling wizard to map individual USB ports with intuitive names. See Appendix 2 for instructions View Reports - Opens a web browser to the database report generation tool to view logs and certified erasures. Manage Custom Fields Opens the Custom Field dialog. Create fields to be filled in by an operator during the erasure. See Appendix 3 for instructions on use of custom fields. Page 16 of 40
How to Erase an ios Device Step 1 Connect the device Note: It is useful to label the ports, so that multiple devices can be easily identified. Follow the guide in Appendix 2 for custom port labelling instructions. Step 2- Downloading Firmware Figure 18 Connecting ios Device (White) When an ios device is connected to the software, EEMobile will verify with Apple the latest firmware for the device. If this firmware has not been downloaded, the system will download the firmware. Note: If multiples of the same device are attached before the firmware for that device has downloaded, the download may be initiated multiple times. This will slow the progress of devices. During the download EEMobile will notify the user with an amber highlight. Figure 19 Downloading Firmware (Amber) Step 3 Erasing the Device The status of the device will read Erasing ; the white background notifies the operator that EEMobile is erasing the data for the connected device and performing a factory reset. During the erasure it is possible to enter any custom fields for the device, refer to Appendix 3 for instructions. Figure 20 - Erasing the Data Notification (White) The device will reboot during erasure for the first factory reset Step 4 Verification at the end of the Erasure EEMobile will verify the erasure at the final stage when the device reboots; the white background notifies the operator that this is still part of the erasure process. Page 17 of 40
Figure 21 - Verifying at the end of the erasure (White) Step 5 Completion of Erasure Where the notification reads Safe to remove, the green background notifies the operator of a successful and completed erasure. Figure 22 - Safe to remove (Green) Where the notification reads Safe to remove, the red background notifies the operator of a failed and completed erasure. Individual logs can be accessed regarding a failed erasure, by double clicking on the device. Figure 23 - Safe to remove (Red) Step 6 Reports of the Erasure The operator can double-click the device to access the erasure log of a single device, or access the web based reporting generation tool for full reporting and filtering of results; please see Web Based Report Generation Tool. Page 18 of 40
How to Erase an Android Device Step 1 Connect the device, in USB Debugging mode Note: It is useful to label the ports, so that multiple devices can be easily identified. Follow the guide in Appendix 2 for custom port labeling instructions. The android device needs to be placed in USB Debugging mode BEFORE connecting, otherwise it will not be discovered by the software. Please refer to Appendix 4 on USB Debugging for detailed information. Step 2- Administrator permissions first factory reset The Android device will be discovered by the software, and EEMobile will install an app to the device. The application requires administrative rights in order to perform the first factory reset. Enable Activate Device Administrator on the handset. Figure 24 - Android permissions Page 19 of 40
Step 3 Erasing the Device The status of the device will read Erasing ; the white background notifies the operator that EEMobile is erasing the data for the connected device. During the erasure it is possible to enter any custom fields for the device, refer to Appendix 3 for instructions. Figure 25 - Erasing the Data Notification (White) The device will reboot during erasure for the first factory reset Step 4 Overwriting Device After the first factory reset, the device will reconnect to the EEMobile software. At this point, the device must be placed back into USB Debugging mode, as in step 2. Another app is deployed to the device, which will perform an overwrite of all space on the device. This will require administrative permissions to factory reset upon completion, as in step 2. During the overwrite, the device and EEMobile software will show the percentage completion and time remaining of the current overwrite step Figure 26 - Overwriting the Data Notification (Amber) Step 5 Verification at the end of the Erasure EEMobile will verify the erasure at the final stage when the device reboots; the white background notifies the operator that this is still part of the erasure process. Figure 27 - Verifying at the end of the erasure (White) Step 6 Completion of Erasure Where the notification reads Safe to remove, the green background notifies the operator of a successful and completed erasure. Page 20 of 40
Figure 28 - Safe to remove (Green) Where the notification reads Safe to remove, the red background notifies the operator of a failed and completed erasure. Individual logs can be accessed regarding a failed erasure, by double clicking on the device. Figure 29 - Safe to remove (Red) Step 7 Reports of the Erasure The operator can double-click the device to access the erasure log of a single device, or access the web based reporting generation tool for full reporting and filtering of results; please see Web Based Report Generation Tool. Page 21 of 40
How to Erase a BlackBerry Device Step 1 Connect the device Note: It is useful to label the ports, so that multiple devices can be easily identified. Follow the guide in Appendix 2 for custom port labelling instructions. Figure 30 Connecting BlackBerry Device (White) Step 2- Confirm App Security Permissions on Handset The Android device will be discovered by the software, and EEMobile will install an app to the device. The application requires administrative rights in order to perform resets and overwrite the device. Enable Activate Device Administrator on the handset. Figure 31 - Blackberry permissions Figure 32 - Blackberry permissions Page 22 of 40
Step 3 Erasing the Device The status of the device will read Erasing ; the white background notifies the operator that EEMobile is erasing the data for the connected device and performing a factory reset. During the erasure it is possible to enter any custom fields for the device, refer to Appendix 3 for instructions. The device will reboot during erasure. Figure 33 - Erasing the Data Notification (White) Step 4 Completion of Erasure Where the notification reads Safe to remove, the green background notifies the operator of a successful and completed erasure. Figure 34 - Safe to remove (Green) Where the notification reads Safe to remove, the red background notifies the operator of a failed and completed erasure. Individual logs can be accessed regarding a failed erasure, by double clicking on the device. Step 6 Reports of the Erasure The operator can double-click the device to access the erasure log of a single device, or access the web based reporting generation tool for full reporting and filtering of results; please see Web Based Report Generation Tool. Page 23 of 40
Web-Based Report Generation Tool From the EEMobile Console, choose File -> View Reports to open the Web-Based Report Generation Tool Figure 35 - View Reports Options View Mobiles The browser provides both a Certificate and a Report for every device. Page 24 of 40
Certificate The certificate provides full erasure details. Figure 36 - Certificate Report Screen Report Figure 37 - Erasure Certificate An erasure report details specific information regarding the device. Page 25 of 40
Figure 38 - Erasure Report Page 26 of 40
View Filters Keyword searching allows searching by serial number, manufacturer and wildcard. Figure 39 - Filter icon allows the operator to filter results Wildcard filtering is enabled; use the % at the end of the keyboard, eg ECN 123% to locate the serial number. Page 27 of 40
Filtering by date range has been enabled. The date range filters automatically launch a calendar. Figure 40 - Date range filter To obtain the results, click on the View Mobiles tab, to locate devices that match the query. Figure 41 - Results for matching phones Page 28 of 40
Service and Support For service or support issues, please contact support@tabernus.com or by phone 0845 689 1350. Email: support@tabernus.com Online Support: http://support.tabernus.com Country Contact US 888.700.8560, Option 2 UK 01639 505 731, Option 2 Europe (UK Support) +44 (0) 1639 505 731, Option 2 Page 29 of 40
Appendix 1 Step by Step Installation Guide Start the installation from the installation icon on the desktop Figure 1 - Installation Icon Figure 2 - Select Operating System Language Figure 3 - Select Location Page 30 of 40
Figure 4 - Reboot System. Eject Disk and Reboot to Desktop Page 31 of 40
Appendix 2 Labeling Ports Use of the Port Labeling Wizard to assign port names. By default the EEMobile system uses USB port locations, which can be long and confusing strings (e.g. 2-1.3.5 or 1-2.4.8.1) making identification of a specific device harder than it needs to be for larger numbers of drives. The port labeling wizard allows the user to label the ports with intuitive names that correspond to the device location. Follow the steps below to label your ports 1. Open the Port Labeling Wizard Figure 1 Open Port Labeling Wizard 2. Remove any mobile devices, and arrange the USB hubs that you intend to use. Note that the hubs cannot be rearranged after the ports have been labelled without re-running the Port Labeling Wizard. Figure 2 Remove all mobile devices, and arrange hubs Page 32 of 40
3. Select Create a new port label scheme to start labelling ports. At any point it is possible to reopen the port labeling wizard and edit the assigned port names. Figure 3 Enter the Layout 4. Press continue, and set the number of columns and rows in the device layout. If a grid layout is not being used, just be sure that that columns x rows give enough devices for the number of ports you wish to use. Connect a USB drive to the first port that you wish to label, the first port will become active and the label text can be edited to be any alphanumeric string. Remove the USB stick, and repeat with all the ports you wish to label. Figure 4 Port Labeling Page 33 of 40
5. All labels must be unique, and not left blank (if you have entered a USB key in the port). Any duplicates or empty fields will be highlighted in red, and must be renamed and highlighted in green before continuing. Figure 5 Invalid Port Labels 6. Once all ports have been given a label, press continue and confirm to save the port labels. Now, each time a mobile device is plugged in, the Port in the EEMobile software will use the custom labels that you have set up. Page 34 of 40
Appendix 3 Using Custom Fields Step 1 Setting up Custom Fields 1. To add new custom fields to the system, which will be available for any devices added subsequently, you have to open the Manage Custom Fields dialog. Figure 1 Manage Custom Fields 2. New custom fields can be added with the Add button, they can then be set with or without a default Values. Figure 2 Editing available custom fields and default values Page 35 of 40
Step 2 Editing Custom Fields on Each Device 1. While a device is attached to the EEMobile system, double click on its entry in the GUI. Navigate to the Custom Field tab to view all the available custom fields. Figure 3 Custom fields for selected device 2. To edit a custom field, double click on its value to open up the data entry dialog. OK to save changes, cancel to exit. Figure 4 Edit a specific custom field for a device Page 36 of 40
Appendix 4 How To Enable USB Debugging How to Enable USB Debugging on Android 4.4 For Android 4.4, the sequence to access Developer mode is: Apps > Settings> Developer Options > USB Debugging (checked) Allow debugging? > OK 1. Select Apps 2. Select Settings Figure 1 - Android 4.4 - Select Apps Figure 2 - Android 4.4 - Select "Settings" Page 37 of 40
3. Select Developer Options 4. Tick the option for USB debugging: Figure 3 - Android 4.3 Select Developer Options Figure 4 - Android 4.4 - Tick USB debugging Page 38 of 40
5. Confirm OK Figure 5 - Android 4.4 Confirm OK For earlier versions of Android, this checklist may assist: Sequence Android 4.2 or 4.3 1 Select Apps 2 Go to Settings 3 Select More > About Device 4 Scroll to Build Number 5 Tap 7 times on Build Number 6 Select More > Developer Options 7 Check USB debugging 8 Select OK to allow USB debugging 9 Check USB debugging How to enable developer mode and USB debugging (Samsung Galaxy S4) Page 39 of 40
How to Enable USB Debugging Android 2.3 1. Navigate to Settings. 2. Tap on Applications 3. Then go to Development 4. Now check USB debugging Figure 6 - Android 2.3 > Settings > Applications > Development > USB Debugging Page 40 of 40