Device Management

5/24/2018 Device Management

1/21

Afaria 7

Device Management

April 2012


2/21

2012 SAP AG. All rights reserved. 2

At the end of this module, you will be able to:

Manage devices with groups and policies

Understand Provisioning and Configuration Policies

Understand Application Policies

Understand the basic working of Sessions and Channels

Objectives


3/21


Agenda

Afaria Device Management

Devices, Groups & Policies

Application Policies

Enrollment Policies

Configuration Policies

Session Manager Policies


4/21


Device Policy

ApplicationiOS & Android Apps

ConfigurationiOS, Android, BlackBerry, Windows, WM

EnrollmentEnrollment Codes & SSP

SessionChannel & Sets

Group

StaticAdministrative Group

DynamicInventory Group

UserGroup of AD Users

CompositeGroup of Groups

Afaria 7 Device Management Overview


5/21


Afaria 7 Dynamic Groups

Create Views

based on

database

entries

Use criteria to

generate

compliant

device groups

Device Group


6/21


Enrollment Policies

Enrollment policies automate enrolling a device in management withinitial settings.

Based on device type, an enrollment policy can define items such as a

device's connection address, device ID, and whether the device uses

Afaria Access Control for Email. It can prompt the user to collect user

information, and it adds a device to groups for additional and ongoing

management.

Enrollment policies are always in a published state. As an alternativeto unpublishing an enrollment policy, edit the policy and disable or

delete its enrollment codes.

Policy






7/21


Enrollment Policies Overview

Policy

Android

Summary: Enrollment Codes

General: Connection, C2DM,

Naming

Group Settings

Variable Prompting

iOS

Summary: Enrollment Codes

General: Access Control,

Naming, SSP

Group Settings

Variable Prompting

BlackBerry

Summary: Enrollment

Codes, File Type

General: Connection,

Naming Prompt,

Configuration Change

Windows

General: Server Address &

Naming

Group Settings

Advanced: Connections,

Installation Path, User Context

SSL Certificate

Windows Mobile Standard and Professional, Windows CE

Summary: Enrollment Codes,

CAB Configuration, processor

type

General: Server Address,

Client Naming

Group Settings

Advanced: Client ConnectionOptions

SSL Certificate


8/21


Configuration Policies

Configuration policies collect inventory and set device settings

without engaging users.

Inventory is collected for hardware, software, or both.

Configuration policy settings vary by device type, but may

include settings such as for passwords, Wi-Fi, roaming, and

VPN.

Policy






9/21


Configuration Policies Overview

Policy

Android

Schedule

Basic Android Configuration

Nitro Desk Configuration

Motorola and Samsung API

iOS

Configuration policies

parallel to iPhoneConfiguration Utility

BlackBerry

Schedule to run sessions

Windows

Schedule to run sessions

Windows Mobile Standard and Professional

Schedule

Connections Device Settings

Formatting

Device Configuration CSP

Network CSP


10/21


Configuration Policy Android

Basic Configuration Policies

Android Basic Configuration Policies can be set for all Android devices and include passwords, Afaria

configuration settings, and connection settings.

NitroDesk Policies

NitroDesk Policies are used to configure the NitroDesk Touchdown Email Client. TouchDown provides

access to Exchange e-mail, contacts, and calendars using ActiveSync technology.

Motorola & Samsung Specific Policies

Additional Policies can be set for Motorola and Samsung devices.

On the Summary page, enter the policy name, note, and remaining properties.


11/21


Configuration Policy Blackberry

Create a policy for scheduling device

connections, collecting inventory, and

configuring device settings for BlackBerry

devices.


12/21


Configuration Policy iOS

Create a policy to create MDM payloads, which define settings such as

settings for items such as Wi-Fi and passcodes. Policy definitions arecompliant with the Apple iPhone Configuration Utility definitions.

Apple iOS MDM Payload Policies

Afaria combines multiple policies into a single delivery payload before sending

them to a device. Apple designed iOS management to support multiple instances

of some policy types and support only a single instance of other policy types.

The following policy types are limited to a single instance on a device:

Passcode

Restrictions

Exchange ActiveSync Advanced


13/21


Configuration Policy Windows

Create a policy for scheduling device connections, collecting inventory, and configuring device

settings for Windows computers.


14/21


Configuration Policy Windows Mobile (Professional)

For Windows Mobile Professional or Windows Mobile Standard devices, create a policy for

scheduling device connections, collecting inventory, and configuring device settings.

Connection Policies

Specify connection properties such as dial ing methods, dialing locations, network details, DNS and IP settings,

roaming controls, and port controls.

Device Policies

Specify device properties such as owner details, device sounds, and executable file properties.

Formats Policies

Specify format properties for language, numbers, currency, time, and date.

Device Configuration CSP Policies

Specify device configuration properties such as e-mail settings, synchronization settings and other device

configuration details.

Network CSP PoliciesSpecify network properties such as GPRS details, proxy details, VPN details, and WiFi properties for the

device.


15/21


Application Policies

Application policies define commercial and enterprise

application packages for iOS and Android devices. The

policies determine which applications are available for devices

to browse and install.

Policy






16/21


Summary

Application Name

Application Note

General

Package Name and Text

iTunes (Number) or Google

Play (Identifier)

Configuration

Afaria API configuration file

Application Policy

Policy


17/21


Sessions & Channels

Session channels are selected in session policies and let you to

perform a variety of scripted tasks on your non-iOS Afaria devices.

Create session channels using the Afaria Channel Administrator, then

select them in session policies. In addition to sending and retrieving

files, you can perform system tasks such as disk maintenance,

registry updates, and script execution. You can also utilize control flow

logic to condition task execution.

Device types supported are:

Windows Mobile Professional

Windows Mobile Standard

BlackBerry

Windows Android

Policy






18/21


Session & Channels Settings

A published Session is able to run a Session Manager Channel

or a Set of Session Manager Channels

The Afaria Channel Administrator is used to create SessionManager Channels

Program is reachable in Windows Start Menu

Old Afaria 6.6 UI can be used to create Session Manager Channels and

Channel Sets

Policy


19/21


Session & Channels Afaria Channel Administrator

From the Afaria server desktop, click Start > Programs > Afaria > Afaria Channel

Administrator to create and publish session channels for selection in session

policies.


20/21


You should now be able to

Understand the mechanisms of Device Management with Afaria 7

Understand the basic functionality of Sessions

Summary


21/21


2012 SAP AG. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or for any purpose

without the express permission of SAP AG. The information contained herein may be

changed without prior notice.

Some software products marketed by SAP AG and its distributors contain proprietary

software components of other software vendors.

Microsoft, Windows, Excel, Outlook, PowerPoint, Silverlight, and Visual Studio are

registered trademarks of Microsoft Corporation.

IBM, DB2, DB2 Universal Database, System i, System i5, System p, System p5, System x,

System z, System z10, z10, z/VM, z/OS, OS/390, zEnterprise, PowerVM, Power

Architecture, Power Systems, POWER7, POW ER6+, POWER6, POWER, PowerHA,

pureScale, PowerPC, BladeCenter, System Storage, Storwize, XIV, GPFS, HACMP,

RETAIN, DB2 Connect, RACF, Redbooks, OS/2, AIX, Intelligent Miner, WebSphere, Tivoli,

Informix, and Smarter Planet are trademarks or registered trademarks of IBM Corporation.

Linux is the registered trademark of Linus Torvalds in the United States and other countries.

Adobe, the Adobe logo, Acrobat, PostScript, and Reader are trademarks or registered

trademarks of Adobe Systems Incorporated in the United States and other countries.

Oracle and Java are registered trademarks of Oracle and its affiliates.

UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group.

Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin

are trademarks or registered trademarks of Citrix Systems Inc.

HTML, XML, XHTML, and W3C are trademarks or registered trademarks of W3C,

World Wide W eb Consortium, Massachusetts Institute of Technology.

Apple, App Store, iBooks, iPad, iPhone, iPhoto, iPod, iTunes, Multi-Touch, Objective-C,

Retina, Safari, Siri, and Xcode are trademarks or registered trademarks of Apple Inc.

IOS is a registered trademark of Cisco Systems Inc.

RIM, BlackBerry, BBM, BlackBerry Curve, BlackBerry Bold, BlackBerry Pearl, BlackBerry

Torch, BlackBerry Storm, BlackBerry Storm2, BlackBerry PlayBook, and BlackBerry App

World are trademarks or registered trademarks of Research in Motion Limited.

Google App Engine, Google Apps, Google Checkout, Google Data API, Google Maps,

Google Mobile Ads, Google Mobile Updater, Google Mobile, Google Store, Google Sync,

Google Updater, Google Voice, Google Mail, Gmail, YouTube, Dalvik and Android are

trademarks or registered trademarks of Google Inc.

INTERMEC is a registered trademark of Intermec Technologies Corporation.

Wi-Fi is a registered trademark of Wi-Fi Alliance.

Bluetooth is a registered trademark of Bluetooth SIG Inc.

Motorola is a registered trademark of Motorola Trademark Holdings LLC.

Computop is a registered trademark of Computop Wirtschaftsinformatik GmbH.

SAP, R/3, SAP NetWeaver, Duet, PartnerEdge, ByDesign, SAP BusinessObjects Explorer,

StreamWork, SAP HANA, and other SAP products and services mentioned herein as wellas their respective logos are trademarks or registered trademarks of SAP AG in Germany

and other countries.

Business Objects and the Business Objects logo, BusinessObjects, Crystal Reports, Crystal

Decisions, Web Intelligence, Xcelsius, and other Business Objects products and services

mentioned herein as well as their respective logos are trademarks or registered trademarks

of Business Objects Software Ltd. Business Objects is an SAP company.

Sybase and Adaptive Server, iAnywhere, Sybase 365, SQL Anywhere, and other Sybase

products and services mentioned herein as well as their respective logos are trademarks or

registered trademarks of Sybase Inc. Sybase is an SAP company.

Crossgate, m@gic EDDY, B2B 360, and B2B 360 Services are registered trademarks

of Crossgate AG in Germany and other countries. Crossgate is an SAP company.

All other product and service names mentioned are the trademarks of their respective

companies. Data contained in this document serves informational purposes only. Nationalproduct specifications may vary.

The information in this document is proprietary to SAP. No part of this document may be

reproduced, copied, or transmitted in any form or for any purpose without the express prior

written permission of SAP AG.

Device Management

Documents

Transcript of Device Management