MDM On Premises Workflow

• Architecture

• Set up and Enroll mobile devices

Architecture

ManageEngine Mobile Device Manager Plus can be used to deploy configuration settings, security commands and retrieve asset data over-the-air (OTA).

                                                                     *

Fig : Mobile Device Manager Plus- Architecture

All Communications from Mobile Device Manager Plus to the mobile device will be routed through intermediate services such as APNs for iOS devices and FCM for android devices. A live TCP connection is maintained for intermediate service.  APNs, FCM and WNS acts an intermediate wake up service to wake up the device whenever an action is triggered to be performed from the Mobile Device Manager Plus. But WNS is used only for devices running Windows 8.1 and is not available for mobile devices running Window 8 OS. Managed mobile device communicates with Mobile Device Manager Plus to receive the instructions and report back the status and data. For the above setup to work, the following should be done.

Assuming users' mobility, Mobile Device Manager Plus Server should be reachable via public IP address. If you are installing Mobile Device Manager Plus Server in the LAN, add an entry in your external router to route the requests to your public IP to the internal IP of the computer where Mobile Device Manager Plus Server is installed. If all the devices managed are within the LAN, this requirement is not needed.

Refer the following to know about the list of Ports used and Domains accessed by MDM for enrolling and managing devices: Ports used by MDM Domains accessed by MDM Click here to know the steps to verify the reachability of required domains.

Setting up and Enrolling the mobile devices:

• Device Authentication

• Self Enrollment

• Customize ME MDM App

iOS devices

• Creating APNs Certificate
• Enroll iOS devices
• Enroll iOS devices using Apple Configurator
• Enroll iOS devices using Device Enrollment Program(DEP)

Android devices

• Enroll Android devices
• Enroll Android devices using Near Field Communication(NFC)
• Enroll Android devices using QR code

Setting up Knox devices

• Prerequisites for Knox Management
• Enrolling Knox Devices

Setting Up Windows devices

• Enroll Windows Devices
• Enroll Windows Devices using Imaging and Configuration Designer(ICD)