Enrolling mobile devices

This section provides information on how employees can enroll their iOS mobile devices for mobile device management in BMC Client Management.

The following BMC Client Management video (2:21 min) provides information about how to enroll mobile devices for mobile device management.

https://youtu.be/aRtCbYB9IV8

Employees who use their mobile devices to access enterprise data need to enroll their devices. The IT administrator sends the enrollment invitation to employees, who need to enroll their mobile devices, with an enrollment link.

After a mobile device is enrolled, the IT administrator can remotely perform operations to configure and manage the mobile device, such as:

set up Wi-Fi connection
set or reset a passcode
configure email accounts
install certificates and applications
lock or wipe (factory reset) the lost mobile device to prevent unauthorized access to the enterprise data

BMC Client Management supports management of the following iOS mobile devices:

iPod Touch 5th generation and later
iPhone 4S and later
iPad 2 and later (including iPad Air, iPad Pro, and iPad Mini series)

This section includes the following topics:

Before you begin

To enroll your mobile device, ensure that the following prerequisites are met:

You have an active user account with a valid email address in the directory server
Your mobile device is connected to Internet
You have received the enrollment link (IT administrators sends out enrollment invitation with the enrollment link)

Note

Contact your system administrator if you have not received the enrollment invitation.

Enrolling mobile device

You can enroll your mobile device by accessing the enrollment link shared by your IT administrator. If you open the enrollment link in the Safari browser from a supported iOS mobile device, the enrollment wizard displays two options - Enroll this mobile device and Enroll another mobile device. If you open the enrollment link from a device other than a supported iOS mobile, only the Enroll another mobile device option is displayed.

If you are enrolling the mobile device for the first time, the enrollment wizard prompts you to first installs the BMC Client Management Certificate Authority (CA) certificate and then enrolls the mobile device. Also, if you are opening the enrollment link from a device other than the iOS mobile device you want to enroll, you should have a QR code scanning application (for example, QR Reader) installed on the mobile device to be enrolled. Alternatively, if you do not have a QR code scanning application, you can select the option to receive the links for adding the CA certificate and enrolling the mobile device in an email.

Note

The links (as an alternative to scanning the QR) to install CA certificate and enroll mobile device are valid for single use only.

To enroll a mobile device by accessing the enrollment link from the enrolling device

Open the enrollment link in the Safari browser of the iOS mobile device you want to enroll.
The Welcome page displays the following options:
- Enroll this mobile device
- Enroll another mobile device
Click Enroll this mobile device and follow the on-screen instructions to complete the enrollment.
After the mobile device is enrolled successfully, you will receive a confirmation message. If you do not receive a confirmation message, contact your IT administrator.

To enroll a mobile device by accessing the enrollment link from another device

Open the enrollment link.
If you have opened the enrollment link in the Safari browser of a supported iOS mobile device, the Welcome page displays the following options:
- Enroll this mobile device
- Enroll another mobile device
If you have opened the enrollment link in any other browser, only the Enroll another mobile device option is displayed.
Click Enroll another mobile device.
On the Authentication page, specify the email address where you received the enrollment invitation, enter your active directory user account password, and click Next.
Read and agree to the Terms and Conditions and click Next.
The Enrollment page displays the QR codes that you can scan using a QR code scanning application to install the BMC CA certificate and to enroll the mobile device.
From the mobile device that you want enroll, scan the QR code under the Add the certificate authority step.
Notes
- If the mobile device was enrolled previously and you retained the BMC Client Management CA certificate, you can skip this step and directly scan the QR code under the Enroll the mobile device step.
- You can verify the BMC Client Management CA certificate under Settings > General > Profile & Device Management.
- If you do not have a QR code scanner application, you can select the option to receive the links for adding the CA certificate and for enrolling the mobile device in an email. These links can be used once, and you must open them in the Safari browser of the mobile device that you want to enroll.
After the CA certificate is installed, click Show QR code under the Enroll the mobile device step.
Scan the QR code from the mobile device.
After the mobile device is enrolled successfully, you will receive a confirmation message. If you do not receive a confirmation message, contact your IT administrator.

Withdrawing device from mobile device management enrollment

You can withdraw an enrolled mobile device from the mobile device management any time by uninstalling the BMC Encrypted Configuration Profile and enroll it again later as per your requirement.

To withdraw device from mobile device management enrollment

In your managed mobile device, navigate to Settings > General > Profile & Device Management.
The BMC Encrypted Configuration Profile and BMC Client Management Certificate Authority certificates are displayed. These certificates are used for managing your mobile device from BMC Client Management.
Select the BMC Encrypted Configuration Profile certificate and then tap Remove Management.
Tap Remove to confirm.
The certificate is removed. The mobile device is no longer managed by BMC Client Management.
(Optional) To also remove the BMC CA certificate, select BMC Client Management Certificate Authority and remove it.
Note

Even if you retain the BMC Client Management CA certificate after withdrawing the enrollment, the mobile device is not managed by BMC Client Management. This certificate would be useful if you intend to enroll the mobile device again in the future.