How to migrate devices from one MDM service to Mobile Device Manager Plus?

Note: We have now improved the process to migrate devices. You can also migrate from other versions of Mobile Device Manager Plus, ie, from MDM Cloud to MDM On Premises, Endpoint Central to MDM, etc. We now support a standalone 'Migration Tool' which makes migrating devices a whole lot easier. Refer to this document for updated steps to migrate devices.

Description

One of the main reasons why organizations hesitate to change their existing MDM solution is that the devices need to be factory reset to remove the devices from management. This means that all the corporate data will be wiped from the device and all the provisioning steps need to be performed again on the devices. This is a tedious process for a mobile-first organization with a large number of managed devices.

Mobile Device Manager Plus automates the process of migrating Samsung and Apple devices without factory resetting from other MDM solutions to Mobile Device Manager Plus. This method allows organizations to migrate devices with minimal user and admin intervention. You can contact MDM support to enable automated MDM migration.

Points to be noted:

  • The devices can be migrated only if your current MDM vendor provides the required APIs.
  • If the device was Supervised, the Supervision will be retained even after moving the device into MDM.
  • Even if the device was enrolled using Apple Business Manager, the MDM profile will be removable from the device after migration. You need to re-enroll devices using ABM to ensure mandatory mandatory management.
  • Distribute the migration profile to a test device and verify if the test device is succesfully migrated before distributing the profile to devices in your production environment.
  • MDM supports migration from the following vendors:
    • Cisco Meraki
    • IBM MaaS360
    • VMWare AirWatch

Prerequisites

  1. Set up MDM Server
  2. Integrate your directory services to sync users and groups

Steps

MDM Migration will be hidden by default, contact MDM support to enable the migration profile. You can choose a migration method that will suit your requirements from the methods given below:

Device Owner - Corporate devices

Samsung devices

Without factory resetting

Only Samsung devices can be migrated from another MDM tool without factory resetting by following the steps given below:

  1. Distribute ME MDM app to the devices to be migrated using your current MDM solution.
  2. Once the app is installed, open the app and follow the on-screen instructions to enroll the device with MDM.
  3. Verify if all the devices are available in Mobile Device Manager Plus server and remove the devices from your existing MDM solution. Assign users to the devices and continue managing devices using the MDM server.

Note:

  1. When Samsung devices are enrolled using the above method, location tracking can not be set to high accuracy.
  2. In devices running Android 7.0 or below, Play Store apps can not be silently installed.

With factory resetting

If you want to provision the corporate Samsung devices as Device Owner and you are willing to factory reset the devices, you can use the enrollment method given below

Knox Mobile Enrollment

Purchased from resellers

For devices purchased from authorised sellers or resellers and enrolled using Knox enrollment, follow the steps given below

  1. Login to Knox Portal and create a new MDM Profile. Select ManageEngine as your MDM.
  2. Open MDM console and go to Enrollment -> Knox Mobile Enrollment -> Copy the JSON file. Paste the JSON file in the MDM profile created on Knox Portal.
  3. Apply the newly created profile to the devices to be migrated.
  4. Factory reset the devices. Upon activation, the devices will be automatically enrolled with MDM.

Not purchased from resellers

If the devices are not purchased from authorised resellers, follow the steps given

  1. Download the Knox Deployment app in an admin device.
  2. Login to the app and choose the profile configured using the above mentioned steps.
  3. Choose the deployment mode, and distribute ME MDM app to the devices to be migrated.

Non-Samsung devices

If you want to provision the corporate devices as Device Owner and you are willing to factory reset the devices, you can enroll the compatible devices using any of the enrollment methods given below

Zero Touch Enrollment

For devices enrolled in Zero Touch portal,

  1. Login to Zero Touch portal and create a new MDM configuration.
  2. Open MDM Console and click on Enrollment -> Zero Touch Enrollment -> Copy the JSON file.
  3. Apply the newly created configuration to the devices to be migrated.
  4. Factory reset the devices. Upon activation, the devices will be automatically enrolled in to MDM.

Other enrollment methods

For Device Owner devices enrolled using methods other than ZTE and Knox Enrollment, factory reset the device and enroll them using any of the enrollment methods given below

Profile Owner devices

You can enroll the Android devices provisioned as Profile Owner using Enrollment via invites or Self Enrollment method without erasing the device data. While creating the Work Profile on the device, the users will be prompted to remove the existing Work Profile created by your current MDM. After the existing profile is removed, MDM will create a new Work Profile on the devices and the devices will be enrolled into MDM.

Apple Devices

  1. In your MDM console, navigate to Profiles > Migration Profile. Under "Steps to migrate iOS devices" you'll find a URL that allows you to create a custom web shortcut for migration.
  2. Use your existing MDM solution to deploy the custom web shortcut to the devices you intend to migrate.
  3. Ensure that "Stolen Device Protection" is disabled on the devices before initiating migration. On the device to be migrated, go to Settings > Passcode and turn off Stolen Device Protection.
  4. On the device, open the web shortcut you received. Click "Start Migration" to begin the process.
  5. migration1

  6. The migration process will start by dissociating the device from its current MDM server.
  7. The Mobile Device Manager Plus migration profile then needs to be downloaded on the device. Navigate to Settings > General > VPN & Device Management > MDM Profile on the device, and install the downloaded profile.
  8. Grant permission to install the profile and enter your device password to complete the installation.
  9. migration3

    migration4

  10. Once these steps are completed, the MDM profile will be installed, and your device will be successfully migrated to Mobile Device Manager Plus.