Cloud Services MDM. ios User Guide

Transcription

1 Cloud Services MDM ios User Guide 10/24/2014

2 CONTENTS Overview... 3 Supported Devices... 3 System Capabilities... 3 Enrollment and Activation... 4 Download the Agent... 4 Enroll Your Device Using the Agent... 5 Using the Agent... 6 My Device... 6 Message Center... 7 Support... 8 Settings... 8 Using the Shared Device Feature... 9 Checking Out Your Device... 9 Navigating the Menu Checking In Your Device Using the App Catalog App Catalog Navigation Internal Purchased Web Categories Using the Self- Service Portal Accessing the Self- Service Portal Selecting a Device in the Self- Service Portal Device Details Menus Remote Actions Menu Device Information Menu Viewing Device Information Security Compliance Profiles

3 Apps GPS Event Log Support Performing Remote Actions Managing Personal Content with the Secure Content Locker Using the Browser Logging In Restrictions Navigating the Browser Using the Secure Content Locker Authentication Navigating the Secure Content Locker Downloading and Viewing Content Additional Tools Exploring Content Integrating Personal Content Keep in Mind

4 OVERVIEW Mobile Device Manager (MDM) provides complete mobility management solutions for Apple ios enterprise deployments. This user guide describes these features from the perspective of the mobile ios device user and covers the following topics: Enrolling your ios device using agent or agentless methods How to use the agent Downloading enterprise and public apps into your device Administrating your device(s) using the Self- Service Portal Using the browser Using the Secure Content Locker SUPPORTED DEVICES MDM supports ios 4 and 5 operating systems on the following devices: ipad iphone ipod Touch SYSTEM CAPABILITIES As soon as your device completes the enrollment process, MDM enables your device with: Enterprise settings, policies, and restrictions through over- the- air configuration profiles. o Allows your device to instantly connect to corporate Wi- Fi and VPN networks. Additional device security to protect your device and ensure compliance with corporate security policies. Enterprise application access to internally developed, bulk purchased, or recommended public, or applications. Secure mail, calendar, and contacts to provide you with mail, and administrator with a layer of visibility and control on top of the enterprise s existing infrastructure. Secure corporate content access to iwork, Microsoft Office, Picture, and other media types. Personal Device Management to allow end- users to manage and monitor their own devices from a browser or other devices. 3

5 However, in addition to these new capabilities, your device will now begin to periodically report the following information back to the Web Console: Asset Information such as platform, model, operating system, Serial, IMEI, UDID Security Compliance Information such as compromised status, encryption status, passcode and restrictions settings Network / Telecom Information such as data usage, Wi- Fi, Cellular, Bluetooth, and roaming status Additional Information such as GPS location, applications, profiles, and certificates ENROLLMENT AND ACTIVATION Before you can enroll your device in MDM, you must have the following information: Enrollment URL: This URL brings you to the enrollment screen. It is specific to your organization s enrollment environment (e.g., mdm.acme.com ). Group ID: Your administrator determines your Group ID, which associates your device with your corporate role. User Credentials: This Username and Password can be the same as your network directory services credentials, or your administrator may define new credentials for you. Your administrator should have sent you this information via an or an SMS message to your device. If you have not received this information, contact your administrator. DOWNLOAD THE AGENT On your device, open the App Store and search for "MDM Agent." Select the agent from the search results screen and install it onto your device. 4

6 ENROLL YOUR DEVICE USING THE AGENT Open the agent on your ios device and, when prompted, allow push notifications to be sent to your device. Next, enter your enrollment URL and click [Save]. Accept all prompts. When asked, input your Group ID and click [Next]. On the next screen, enter your User Name and Password (provided by your administrator) and tap [Next]. If asked, select whether the device is owned by you or your organization. Finally, [Accept] the Terms of Use when prompted. Your device will begin to enroll under MDM. Read through all prompts and notifications, and accept to complete the enrollment process. NOTE: It also possible to enroll your ios device without the agent. To do so: open Safari on your device and navigate to the enrollment URL, or click the link in the enrollment or text message. However, it is recommended that you either enroll your device using the agent or install the agent on your device after enrollment. Congratulations! Your device is now secured, configured, and managed by MDM! 5

7 USING THE AGENT The Agent provides access agent settings regarding device management information. Settings provides the option to view and edit server, data gathering frequency, data reporting frequency, GPS, and host information (admin passcode required). NOTE: If enabled by your administrator, the agent may also provide access to the App Catalog and the Secure Content Locker. MY DEVICE When you first enroll and open the agent, it defaults to the My Device tab. This tab provides a centralized resource for viewing useful information about your device, such as battery and memory information, in addition to providing you with details regarding your MDM status. The Device Details menu enables you to view further device information, such as: Location to view GPS coordinates for your device for the current and previous time periods. Network to view Cellular and Wi- Fi information, in addition to any additional network interfaces. Telecom to view telecom activity, including data usage. Advanced to see additional device details. 6

8 The Information section (for "Demo iphone" in the image above) enables you to view system resources such as battery and memory usage, as well as device enrollment status, compliance, and connectivity. With these self- service diagnostic options, you are able to: View overall compliance status and specific policies in violation View user account status View connectivity status for internet, APNs, and the server Initiate query to update device information for compliance MESSAGE CENTER The message center contains important notifications from your administrator and from the agent. You will receive notifications in the message center to complete a required compliance check to ensure that your administrator can successfully monitor and secure your device. When a compliance check is required, simply tap the compliance notification to launch the agent. After checking in with the agent, the compliance check is complete and no further action is required. 7

9 SUPPORT Tap the Support tab to the Support contact for your organization. SETTINGS A passcode is required to view the Settings tab. This section provides you with access to the following configurations: Connection Server View the URL of the server in which your ios device is connected to by tapping the Server field. You can connect to a different server by changing the URL in the Server field and then tapping on the [Done] button. Advanced Heartbeat allows you to view and edit the following information: o Frequency (min): How often your ios device checks in with the console and provides basic data, such as GPS. o Location Enabled: When enabled, it displays Force GPS Update and Backgrounding, and gives you the option of turning these features On or Off. o Location Force GPS Update: When enabled, it allows your ios device to be tracked by the administrator. o Location Backgrounding: When enabled, it allows GPS tracking to run in the background. Data Sampling allows you to view the following information: o Host Port: The port your ios device uses to communicate with the console. o Intervals Sampling (min) and Intervals Transmission: The interval in which the agent samples data from your ios device and stores it for scheduled transmission to the console. 8

10 USING THE SHARED DEVICE FEATURE The Shared Device feature can seamlessly suit a single managed device with settings and features specific to multiple, predefined user roles. For example, a teacher can check out a device to a single student with material that's unique to the student. The student can do classwork with their unique material and even save work when the period is over. The student can then check in the device, simultaneously saving their classwork for another day and setting the device back to a blank, unassigned state. NOTE: Administrators provision a device with the Shared Device settings before providing the device to an end- user. CHECKING OUT YOUR DEVICE Check out your assigned device by launching the agent from the app menu. *When opening the agent, you're presented with the Login screen before accessing your personal content, settings, and features. Enter the Group information provided by your administrator, along with your unique Username and Password to successfully check out the device. *NOTE: If your device doesn't already have the agent, download the app by searching "MDM Agent" in the itunes App Store. 9

11 NAVIGATING THE MENU Now that you've checked out the device, you're presented with the device's details along with menu options, including: My Device View additional device details and check in the device once your session is complete. Messages View messages from your administrator. Support Access help topics and additional support information. Settings Configure Shared Device settings. CHECKING IN YOUR DEVICE When your session is over and you're done with your device, navigate to the My Device screen and tap the [Check In] button. Select [Yes] from the notification window. Once checked in, the device will revert back to the settings and resources available to the original enrollment user. 10

12 USING THE APP CATALOG MDM enables enterprises to securely deploy public and internal applications to users of managed devices via a Custom Enterprise App Catalog. The App Catalog enables you to quickly access recommended public applications and internally deployed applications from a single centralized location. The App Catalog is where you'll go to do the following: View the details of public, internal, purchased, or web applications. Install recommended public, internal, purchased, or web applications. Browse and filter apps by type and category. View applications that your organization has blacklisted. Search applications by name. Receive notifications on application updates for both managed and unmanaged applications. Install application updates for managed applications. Search for a managed application. Authenticating into App Catalog using user name and password. Add ratings and comments for public, internal, or purchased applications. View overall rating for the applications based on ratings provided by other users and view specific comments provided by other users. View application status whether an application is Not Installed, Installed, Needs Update, or is Blocked. NOTE: In certain situations, your administrator might choose to push some applications directly to your device. You will be prompted to accept the installation of these applications and may be asked to input your itunes credentials. It always recommended that you accept and install pushed applications, as your IT administrator may have put in place compliance policies that require these apps to be installed. The App Catalog can be opened from the agent, or (if your organization has deployed it) by tapping the App Catalog icon directly from your ios home screen. APP CATALOG NAVIGATION Once opened, you can use the icons in the screen to navigate to the different sections of the App Catalog. You can browse an application by: Type Public These are the apps available for download from the Apple itunes App Store. The enterprise or administrator has made these apps available because they offer benefits to you and are considered recommended apps. From the recommended page, you can perform the following actions: If there is an [Install] button next to the app, tap the button to install the app on your device. If the application is installed, tap on the app icon to open the app. To uninstall a deployed app, tap [Uninstall]. 11

13 INTERNAL Tapping on Internal shows all the Enterprise Internal applications developed specifically for users within your organization. Since these apps were designed for the enterprise and are proprietary, the apps cannot be used by anyone outside of the enterprise. You may perform the following: If the application is installed, tap on the app icon to open the app. If there is an [Install] button next to the app, tap the button to install the app on your device. To uninstall an app, tap [Uninstall]. PURCHASED Apple offers a Volume Purchase Program (VPP) in which an organization can pre- purchase licenses to various public applications. Once your organization purchases an application, it becomes available to your administrator for distribution. The administrator received the licenses and then defines through the console which user or user group needs to receive a license for the application. After the administrator assigns who needs a license, the application is pushed to that user/device and then that app appears in the Purchased tab. You may perform the following: If the application is installed, tap on the app icon to open the app. If there is an [Install] button next to the app, tap the button to install the app on your device. To uninstall an app, tap [Uninstall]. 12

14 WEB Tapping on Web shows all the on- demand web applications in the App Catalog. You may perform the following: If the application is installed, tap on the app icon to open the app. If there is an [Install] button next to the app, tap the button to install the app on your device. To reinstall an app, tap [Reinstall]. To uninstall an app, tap [Uninstall]. CATEGORIES The Categories page provides a categorized list (as determined by your administrator) of applications in the App Catalog (if no apps appear on this page, then your administrator has not created any app categories). Click Category to view, open, and install applications in the defined category. Detailed Information: There few other details that you can get before installing the applications on the list they are: Tap the application to view: o App Name Shows the application name o App Categories Shows the application category o App type Displays the application type public or internal or purchased o Description Briefly describes the application o Version Displays application version o App rating Shows the application rating given by users o Reviews Displays comments on application provided by both administrator and the other users NOTE: You can add your ratings and comments on your device for approved internal, public, and purchased applications from the Application Catalog. To install the application, tap the [Install] button next to the app, tap the button to install the app on your device. You can search the App Catalog to quickly locate a specific app. o To search for an app in the App Catalog, enter the Name of the app in the search field. 13

15 Blacklisted apps are prohibited applications, as determined by your enterprise or administrator that should not be installed on your device. o Click to view the number of blacklisted apps are detected on your device. NOTE: Your administrator may take action, such as removing corporate access or un- enrolling your device. Application status indicators helps to identify whether an application is Not Installed, Installed, Needs Update, or is Blocked. Not Installed No version of the Application is currently installed on the device. Installed The latest assigned version is currently installed on the device. Needs Update The latest version of the application is installed, but a previous version of the application is installed. Blocked The application is blocked due to compliance. 14

16 USING THE SELF-SERVICE PORTAL MDM offers the ability for you to administer your managed device (or devices) through the Self- Service Portal (SSP). ACCESSING THE SELF-SERVICE PORTAL There are two possible ways to access the Self- Service Portal: You can login through a browser and manage your devices remotely. Navigate to the Self- Service Portal website using the URL provided to you by your administrator. Alternatively, you can access it from your device by opening the Self- Service Portal Web- Clip. Your administrator must have first pushed the web- clip to your device in order for this option to work. NOTE: The administrator must enable the appropriate settings in order for you to access the Self- Service Portal. Once you've opened the Self- Service Portal, you will need to log in using the same credentials (Group ID, Username, and Password) you used to enroll in MDM. 15

17 SELECTING A DEVICE IN THE SELF-SERVICE PORTAL Upon successful login to the Self- Service Portal, the Select a Device homepage appears and displays all the devices enrolled under your user account. Click the device you want to manage: Multiple Device Users: To show all devices enrolled under your user account, click the [All Devices] button. The Device Details screen displays. The default screen is the Security tab: 16

18 DEVICE DETAILS MENUS There are two menus on the Device Details screen you can use to manage devices enrolled under your user account. Remote Actions Menu This menu is located on the left side of the screen and allows you to perform actions to all devices enrolled under your user account. Device Information Menu This menu is located on the right side of the screen and allows you to view details about each device enrolled under your user account. For example, you could view the GPS location of a particular device by clicking the GPS tab. 17

19 VIEWING DEVICE INFORMATION Device Details allows you to view categorized information about all devices enrolled under your user account. The ability to view all information in the Device Details, in addition to the ability to perform any actions in the Profiles and Apps screens are subject to the permissions established by your administrator. Security The Security screen shows the following general security information about a particular device enrolled under your user account: Hardware: Whether or not the device has been compromised. Encryption: Level of encryption for the device. Network: Status of the SIM card, if the device is roaming, and if roaming is enabled. Profiles: Whether or not the device has a profile and if it has been installed. MDM: Whether or not the device is enrolled in MDM. Passcode: Whether or not a passcode is present and if it meets the passcode requirements. Certificates: If certificates are installed, how many, and number of days remaining until certificate(s) expire. Applications: The total number of apps currently installed on the device. 18

20 Compliance The Compliance view shows the compliance status of the device, including the name and level of all compliance policies that apply to the device. Since the administrator can perform certain actions to the device if the device registers as non- compliant, it is important to make a note of the policies in effect to ensure that your device remains compliant. The primary fields to note: Status Lists whether or not the device is compliant with the compliance policies (listed in the next column). Policy Name Lists all compliance policies in effect for the device. Reason If the device is non- compliant, this field lists the specific reason for non- compliance. Action Lists the action taken if the device is not compliant with the specified policy. Next Level Lists the next action that will be taken if the device continues to be non- compliant. 19

21 Profiles The Profiles section displays all of the MDM profiles sent to the devices enrolled under your user account and the status of each profile: Status: Shows the profile installation status: o o o o o o o Installed Pending install Not installed Pending removal Removed Blocked (by a Compliance Policy) Failed for latest version (installed profile is out of date) Type: Shows the profile type, which can be set to automatic or optional. Name: Shows the name of the profile. Description: Shows the description of the profile. Location Group: Shows the location group to which the profile is assigned. Actions: Provides the ability to remotely install or remove the profile. NOTE: To refresh the Device Details Profiles data at any time, click [Refresh Data]. 20

22 Apps The Apps screen displays all applications that have been installed on the selected device, in addition to providing basic application information. NOTE: Information displayed is dependent on the permissions determined by your administrator; therefore, you may not be able to see all information displayed on the screen above. Status: Shows the application installation status: o Installed o Pending install o Not installed o Pending removal o Removed o Blocked (by a Compliance Policy) Type: Shows whether it is an internal or public application. Name: Shows the name of the internal or public application. Version: Shows the version of the internal or public application. 21

23 NOTE: To refresh the Device Details Profiles data at any time, click [Refresh Data]. GPS The GPS screen displays the coordinates of the selected device. NOTE: GPS information displayed is dependent on many factors, such as permissions determined by your administrator, GPS availability, signal, etc.; therefore, you may not be able to locate selected devices as shown below. 22

24 Event Log The Event Log contains a comprehensive log of all interactions between the Web Console and the device. Important fields to note in the Event Log, include the following: Severity Ranks the event severity level based on the event definition. Source Shows the source of the event (for example, "server"). Event Categorizes the event. Examples of events might include: o MDM Enrollment Complete o Install Profile Requested o Security Information Refused NOTE: To refresh the Event Log data at any time, click [Refresh Data]. Support The Support section contains the following: Contact information for your organization s support representative(s). Detailed device information (for example, the serial number) that will be helpful in resolving any support incidents. 23

25 PERFORMING REMOTE ACTIONS The Remote Actions menu is located on the left side of the screen and allows you to perform remote actions over- the- air to the selected device. See below for detailed information about each remote action: NOTE: All remote action permissions are determined by your administrator and therefore you may not be able to perform all listed actions. Device Query Manually requests the device to send a comprehensive set of MDM information to the server. Send Message Sends an , text message, or Push Notification over- the- air to the selected device. Lock Device Locks the selected device so that an unauthorized user cannot access it. This feature is useful if the device is lost or stolen (in this case, you may also want to use the GPS feature to locate the device). Clear Passcode Clears the passcode on the selected device and will prompt for a new passcode. This is useful if you forget your device passcode and are locked out of your device. Device Wipe Wipes all data from the selected device, including all data, , profiles, and MDM capabilities and returns the device to factory default settings. Enterprise Wipe Wipes all corporate data from the selected device and removes the device from MDM. All of the enterprise data contained on the device is removed, including MDM profiles, policies and internal applications. The device will return to the state it was in prior to the MDM installation. 24

26 MANAGING PERSONAL CONTENT WITH THE SECURE CONTENT LOCKER The Self- Service Portal also provides a centralized space to access, upload, and manage personal content to and from a device via the Secure Content Locker. You can access personal content by navigating to the Manage Content tab in the top left menu bar. Once in the personal content space, manage the current files with the following actions: View and sort current files along with details, such as size, type, and date last modified. Download available files to your computer by clicking the down arrow icon ( ) under the Actions menu. Search all personal files by entering a keyword in the Filter Grid field at the top right. Delete files from the managed content space by clicking the "x" icon on the right side of a file or by checking a file and clicking the [Delete] button in the top menu. Group files into folders for optimized organization. Upload a single file or files in bulk by clicking the [Files Upload] button in the top menu. Reorganize a single file or multiple files at a time by checking the file(s) and clicking the [Move] button in the top menu. NOTE: Your administrator applies default settings for security, assignment, and deployment at a folder level, depending on your unique privileges. 25

27 USING THE BROWSER You may have found that upon enrollment, the Safari web browser application has been removed from your device and that the browser application has been installed as a replacement. The browser provides a secure alternative to open internet browsing. If it's not already installed on your device, you can download the browser app from the itunes App Store by searching for "browser." NOTE: Upon first opening the browser, you may be prompted to authenticate the app with your corporate MDM environment. If so, enter in the URL and Group ID that were used to enroll your device in the fields provided and click [Next]. Your IT administrator will be able to provide this information if you need it. LOGGING IN You can log in to the browser using the username and password that were used to enroll your device in MDM. RESTRICTIONS The administrator can enable one of three modes for the browser. These modes can affect both the functionality of the browser and your access to certain content on the web. Kiosk Mode restricts the browser to a specific home page. In addition, the navigation is disabled, so you can only navigate using links on the home page. If your browser is operating in Kiosk mode, the browser may redirect to the home page after a certain period of inactivity. Restricted Mode employs either blacklisting or whitelisting to block certain websites or only allow certain websites. Proxy Mode allows the enterprise to determine rules similar to those defined in Restricted mode. NOTE: It is not made specifically apparent which mode your browser app will be operating in. Please contact your administrator for further details. Regardless of the browsing mode, your administrator may disable or configure general security settings in the browser, such as: Disabling copy and paste Disabling printing Configuring the browser to always accept cookies or to never accept cookies Configuring settings related to browser history 26

28 NAVIGATING THE BROWSER 1. The Navigation Bar (present in both Restricted mode and Proxy mode in most cases) lets you enter either a web address or a search term into the field provided. 2. The Navigation Arrows can be used to navigate to recently visited webpages or websites. The left arrow navigates backward and right arrow navigates forward. 3. The [Refresh] button reloads the current webpage. This button can be used to: Add the current webpage as a bookmark. the current webpage as a link. For this to work properly, you need to have an account associated to the browser. Print the current webpage. This setting must be enabled by your administrator. 4. The [Menu] button can be used to view several additional options. For more on these, see Using the Browser. Using the Advanced Menu Options History View your browsing history. Home Return to the browser's homepage. Allowed Sites View a list of all allowed sites. Settings View account info and configure other advanced settings. Full Screen Hide the browser navigation from view. Info View information on using browser gestures. 27

29 USING THE SECURE CONTENT LOCKER MDM provides enterprise- level Mobile Content Management (MCM) for ios devices through the Secure Content Locker application. The Secure Content Locker gives your organization the ability to host and manage encrypted electronic files at your fingertips, as you need them. If it's not already installed on your device, you can download the Secure Content Locker app from the itunes App Store by searching for "Secure Content Locker." AUTHENTICATION Upon first opening the Secure Content Locker, you will be prompted to authenticate the app with your corporate MDM environment. Follow these steps: Enter the URL and Group ID that were used to enroll your device in the fields provided and click [Next]. Accept the application's terms of service Confirm the use of location service and then click [Done]. On the Login screen, enter the Username and Password that were used during enrollment and tap [Login]. NOTE: Alternatively, you may have been provided with a QR code you can use to authenticate the Secure Content Locker. In this case, tap the [QR Config] button and scan the provided QR code. 28

30 NAVIGATING THE SECURE CONTENT LOCKER Once you have completed authentication and logged in, you will have access to the corporate content stored within the Secure Content Locker. Content Groupings The initial menu provides you with the following content groupings: Views A standard set of filters for viewing content. o All Content View a comprehensive list of all content in all categories. o New Content See the latest documents made available by administrators. o Recent Activity Revisit your most recently viewed and updated documents. o Favorite Content View content you added to your favorites for quick access (see Exploring Content). Categories The categories you see within the Secure Content Locker have been custom created by your organization as a way of grouping content. Much like with folders, subcategories may exist, allowing for several layers organization. Repositories There are two main types of repositories listed in this section. o External Repository An external repository is file location (like a SharePoint server) that the Secure Content Locker can connect to in order to retrieve content. o Personal Repository This is your personal location for storing files of your choosing. When saving a personal attachment from s or downloading files from the Internet, you will now have the option to save these files in personal repository within the Secure Content Locker. Once saved, you can even choose to rename the files. NOTE on External Repositories: When connecting to an external repository, you may be asked to provide additional credentials. For instance, you may need to provide your Active Directory credentials in order to connect to a SharePoint server repository. 29

31 DOWNLOADING AND VIEWING CONTENT Once end- users locate content within the Secure Content Locker, they must download the file to their device to view it. Tap a document to download it. A confirmation prompt displays. Tap [Accept] and the download starts. Once installed, the document will be decrypted and ready for viewing. 1. This icon indicates that the document is ready to upload. 2. This icon appears while the document is installing. 3. This icon lets you know the document has been installed and is ready to view. 4. This icon indicates files are available for download. NOTE: Due to security requirements established by your administrator, content may only be available for download while the device is connected to Wi- Fi. 30

32 ADDITIONAL TOOLS The diagram below details the functions of the various navigation tools found in Secure Content Locker. 1. Edit Tap the [Edit] button to delete downloaded files. Deleting a file only deletes it from your device; the file will still be viewable as an un- downloaded file. 2. Filters While viewing content, you are given the option to further filter by tapping All, Installed, or Not Installed at the top of the screen. 3. Content The [Content] button returns you to the initial screen, where you can select a view, category, or repository. 4. Downloads By tapping Downloads, you can view all installed content in one place, regardless of categorization. 5. Search This feature allows you to find documents by using a search phrase. This feature enables enhanced searching with text parsing and grouped results by hits per page. 6. Updates When a newer version of a document you've installed is made available, a badge displays over the [Updates] button. Tap this button to download the latest version of the document. 7. Messages Messages to and from your administrator are managed in the Messages tab. 8. Settings Manage access, content and connection settings in the Settings tab. NOTE: To refresh the content listing, tap and hold on any of the items and drag down. 31

33 EXPLORING CONTENT Once you have opened a document, the Secure Content Locker, the tools on the document sidebar provide several options for viewing and exploring the content: Switch to Outline view for a high- level view of the document. Search for keywords within a document. Search results are displayed in grouped and sortable lists. Create and view Bookmarks to easily locate significant sections within a document. View document Info provided by your administrator Add the document to your Favorites with one tap. View existing document annotations, including links, text, notes, and arrows. Add new document annotations from the device. INTEGRATING PERSONAL CONTENT The Secure Content Locker also streamlines the way users interact with and manage content from their device by allowing the user to: "Open Into" Secure Content Locker from other ios apps on device. Automatically upload content back to Personal Content area in Self- Service Portal. While viewing a document on your device either as a standalone file or in a third- party viewer, import the file to your Secure Content Locker by selecting [Open In] from the save options. Opening the file into the Secure Content Locker automatically saves the file to your personal content area and uploads the file to the Self Service Portal. 32

34 KEEP IN MIND The Secure Content Locker also contains several additional features for added MDM functionality. Depending on how your organization has configured its settings, your access to certain documents may be restricted. GPS Tracking and Geofencing With location services enabled, your organization will have the ability to grant you access to certain documents based on the physical location of your device (geofencing). For example, if you are within 10 miles of a specific location, you may have access to a particular document; however, once you travel outside the 10- mile radius, your access to that doc may be revoked. Compromised Device Detection The Secure Content Locker has the ability to detect compromised devices and communicate this information back to the corporate MDM server. In the event that your device becomes compromised, you may lose access to some or all of the documents in the Secure Content Locker. Open in Third- Party Applications Administrators can decide whether distributed content is able to be stored locally and accessed in third party applications. If permitted, end- users will be able to download and view a local copy of the documents. If permitted by your administrator, you can also export the content through the following actions: o a document Must be permitted by your administrator and correctly configured. o Print a document To an appropriately compatible printer. o Open a document Into third- party applications. 33