Managing configuration profiles for managed mobile devices
Using configuration profiles, the IT administrators can remotely configure managed iOS mobile devices.
The following BMC Client Management video (3:34 min) provides information about managing profiles:
A configuration profile is a group of settings, which are known as payloads. For example, a Wi-Fi payload is a group of settings required to configure a Wi-Fi connection. Similarly, the Mail payload is a group of settings required to configure an email account on a managed mobile device.
In one configuration profile, you can configure multiple payloads including passcode, restrictions, Wi-Fi, and so on. The Passcode and Restrictions payloads can have only one instance each; however, all other payloads can have multiple instances. For example, in one configuration profile, you can configure two instances of Wi-Fi to set two separate Wi-Fi connections.
One payload can be consumed by another payload. For example, the signing certificate configured in the Certificates payload can be used in the Mails payload.
BMC Client Management supports the following payloads:
|Passcode||Configure passcode on device.|
|Restrictions||Configure restrictions on device in terms of using applications, mobile device functionality and media content.|
|Wi-Fi||Configure Wi-fi access with necessary authentication information.|
|Configure mails on device and define settings for POP and IMAP email accounts.|
|Certificates||Configure multiple certificates on device.|
|SCEP||Configure SCEP and define settings to obtain certificates from SCEP servers.|
|LDAP||Configure LDAP parameters.|
|Web Clips||Configure web clips.|
The configuration profiles are installed to target mobile devices using mobile commands. Using different commands, you can install one configuration profile on different target mobile devices. For example, you can create a security configuration profile with restrictions. You can then create and assign two separate mobile commands to install the security configuration profile on the mobile devices used by the development team and by the quality team.
The following screenshot shows the list of configuration profiles, payloads, the number of instances of a payload, and configuration parameters for the restriction payload:
(Click the screenshot to view it in higher resolution)
To create and configure a configuration profile
- In the left pane, select Mobile Device Management.
Right-click Profiles, and select Create Mobile Profile.
You can create multiple folders under Profiles to organize your mobile profiles.
In the Properties dialog box, specify the configuration profile name and other details, and click OK.
(Optional) You can specify the date and time to automatically remove a profile by entering values in Date to automatically remove the profile.
- In the left pane, select the newly created profile.
In the right pane, under the Configuration tab, configure the payloads.
The number next to a payload indicates the number of instances of that particular payload.
Click Savein the toolbar to save the profile.
Next, you can assign the profile to the target mobile devices. For more information, see To install a configuration profile on the target mobile devices.
To install a configuration profile on the target mobile devices
You can assign commands to push a mobile configuration profile to target devices, device groups, users, or user groups.
- In the left pane, select Mobile Device Management > Profiles.
- Right-click profileName and select Create Mobile Command
The Command Wizard is displayed. .
- In the Command page, enter the details as required and click Next.
By default, the profile name, command type (Install Configuration profile ), and priority (Medium) are populated.
- In the Command Options page, click Next.
The profile name is selected by default.
In the Command Assignment page, assign the command to either devices, device groups, users, or user groups and click Finish.
The command is assigned to the target mobile devices. When the command is executed, the configurations are set in the target mobile devices. You can view all the commands created for a profile in the Commands tab. For more information on commands, see Performing remote operations on managed mobile devices.