Enrolling mobile devices
This section provides information on how employees can enroll their iOS mobile devices for mobile device management in BMC Client Management.
The following BMC Client Management video (2:21 min) provides information about how to enroll mobile devices for mobile device management.
Employees who use their mobile devices to access enterprise data need to enroll their devices. The IT administrator sends the enrollment invitation to employees, who need to enroll their mobile devices, with an enrollment link.
After a mobile device is enrolled, the IT administrator can remotely perform operations to configure and manage the mobile device, such as:
- set up Wi-Fi connection
- set or reset a passcode
- configure email accounts
- install certificates and applications
- lock or wipe (factory reset) the lost mobile device to prevent unauthorized access to the enterprise data
BMC Client Management supports management of the following iOS mobile devices:
- iPod Touch 5th generation and later
- iPhone 4S and later
- iPad 2 and later (including iPad Air, iPad Pro, and iPad Mini series)
This section includes the following topics:
Before you begin
To enroll your mobile device, ensure that the following prerequisites are met:
- You have an active user account with a valid email address in the directory server
- Your mobile device is connected to Internet
- You have received the enrollment link (IT administrators sends out enrollment invitation with the enrollment link)
Note
Contact your system administrator if you have not received the enrollment invitation.
Enrolling mobile device
You can enroll your mobile device by accessing the enrollment link shared by your IT administrator. If you open the enrollment link in the Safari browser from a supported iOS mobile device, the enrollment wizard displays two options - Enroll this mobile device and Enroll another mobile device. If you open the enrollment link from a device other than a supported iOS mobile, only the Enroll another mobile device option is displayed.
If you are enrolling the mobile device for the first time, the enrollment wizard prompts you to first installs the BMC Client Management Certificate Authority (CA) certificate and then enrolls the mobile device. Also, if you are opening the enrollment link from a device other than the iOS mobile device you want to enroll, you should have a QR code scanning application (for example, QR Reader) installed on the mobile device to be enrolled. Alternatively, if you do not have a QR code scanning application, you can select the option to receive the links for adding the CA certificate and enrolling the mobile device in an email.
Note
The links (as an alternative to scanning the QR) to install CA certificate and enroll mobile device are valid for single use only.
To enroll a mobile device by accessing the enrollment link from the enrolling device
- Open the enrollment link in the Safari browser of the iOS mobile device you want to enroll.
The Welcome page displays the following options:- Enroll this mobile device
- Enroll another mobile device
- Click Enroll this mobile device and follow the on-screen instructions to complete the enrollment.
After the mobile device is enrolled successfully, you will receive a confirmation message. If you do not receive a confirmation message, contact your IT administrator.
To enroll a mobile device by accessing the enrollment link from another device
- Open the enrollment link.
If you have opened the enrollment link in the Safari browser of a supported iOS mobile device, the Welcome page displays the following options:- Enroll this mobile device
- Enroll another mobile device
- Click Enroll another mobile device.
- On the Authentication page, specify the email address where you received the enrollment invitation, enter your active directory user account password, and click Next.
- Read and agree to the Terms and Conditions and click Next.
The Enrollment page displays the QR codes that you can scan using a QR code scanning application to install the BMC CA certificate and to enroll the mobile device. From the mobile device that you want enroll, scan the QR code under the Add the certificate authority step.
Notes
- If the mobile device was enrolled previously and you retained the BMC Client Management CA certificate, you can skip this step and directly scan the QR code under the Enroll the mobile device step.
- You can verify the BMC Client Management CA certificate under Settings > General > Profile & Device Management.
- If you do not have a QR code scanner application, you can select the option to receive the links for adding the CA certificate and for enrolling the mobile device in an email. These links can be used once, and you must open them in the Safari browser of the mobile device that you want to enroll.
- After the CA certificate is installed, click Show QR code under the Enroll the mobile device step.
- Scan the QR code from the mobile device.
After the mobile device is enrolled successfully, you will receive a confirmation message. If you do not receive a confirmation message, contact your IT administrator.
Withdrawing device from mobile device management enrollment
You can withdraw an enrolled mobile device from the mobile device management any time by uninstalling the BMC Encrypted Configuration Profile and enroll it again later as per your requirement.
To withdraw device from mobile device management enrollment
- In your managed mobile device, navigate to Settings > General > Profile & Device Management.
The BMC Encrypted Configuration Profile and BMC Client Management Certificate Authority certificates are displayed. These certificates are used for managing your mobile device from BMC Client Management. - Select the BMC Encrypted Configuration Profile certificate and then tap Remove Management.
- Tap Remove to confirm.
The certificate is removed. The mobile device is no longer managed by BMC Client Management. (Optional) To also remove the BMC CA certificate, select BMC Client Management Certificate Authority and remove it.
Note
Even if you retain the BMC Client Management CA certificate after withdrawing the enrollment, the mobile device is not managed by BMC Client Management. This certificate would be useful if you intend to enroll the mobile device again in the future.
Related topics
Viewing information about managed mobile devices
Managing configuration profiles for managed mobile devices
Comments
Log in or register to comment.