IBM MaaS360

IBM MaaS360

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Software and Firmware Updates

    Posted Mon June 14, 2021 09:36 AM
    Good Afternoon,

    We have encountered issues across our board of customers with the Software and Firmware updates, we find that devices do not automatically download and install firmware updates regardless of what we set.

    Also we have similar issues with software, mainly MaaS360 it is very common that the app is updated but the only way a user can get the update is via opening the MaaS360 application on the device and selecting Update MaaS360.

    Kind Regards.

    ------------------------------
    Michael Hogeling
    ------------------------------


  • 2.  RE: Software and Firmware Updates

    Posted Tue June 15, 2021 05:26 AM
    Hi Michael
    App updates are dependent on a number of factors including distribution / installation settings, device / enrollment type and other factors. 
    Here are a few pointers and if you'd like to be more specific about the device and/or app types maybe we can help further. 
    - If you check the "Install automatically" and "Update automatically" box prior to distribution (before pushing to devices), the process is more likely to 'kick off' quickly and depending on the device/enrollment type, install silently (without requiring user acceptance). Again this is not across the board but these checkboxes do help. 
    - If you check the boxes having already distributed the apps, they do not take effect for existing distributions, only for new ones. If you decided to remove distributions and/or app from App Catalog please take care about having checked the boxes for "Remove automatically on..." which may trigger uninstallation of app from devices!
    - On iOS devices, Supervised mode devices (enrolled through DEP) should be able to install and update apps without requiring user acceptance, provided the checkboxes above are checked. 
    - On Android devices, for Device Admin mode (non-Android Enterprise), only non-Google Play apps will install and only on Samsung devices, anything else requires users to accept installation even if you have checked the boxes. Where devices are enrolled in Profile Owner or Device Owner mode (Android Enterprise), the apps will install without user intervention (both Play Store and non-Play Store apps). 
    Hope this helps
    Best

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------



  • 3.  RE: Software and Firmware Updates

    Posted Wed June 16, 2021 04:59 AM
    Hi Eamonn,

    Thank you for the information,

    So currently we do not have the MaaS360 MDM For Android app distributed as we thought it would auto update as a default feature. From what I have read adding this as a distributed app with install and update automatically on will increase the stability and distribution of updates.

    Also are you able to provide any information on the installation of OS updates? This seems to automatically install on some devices as intended but other devices are versions behind which then creates issues with the company being secure as they are not running the latest updates.

    Is this an issue with the device being a lower end LG. I have seen a common pattern that some devices such as Samsung and iOS seem to have much more support and integration.

    Kind Regards.

    ------------------------------
    Michael Hogeling
    ------------------------------



  • 4.  RE: Software and Firmware Updates

    Posted Wed June 16, 2021 06:17 AM
    Hi
    Regarding Android OS updates, in Android Enterprise you get to postpone updates for up to 90 days. 
    The only devices that can have 'granular' patch management - meaning you get to decide which updates - are Samsung devices, where you have purchased an add-on E-FOTA licence. 
    Android Enterprise again allows to configure postpone for 90 days but no further and no specifics on which patches. 
    The updates to Android don't happen like they do with Apple where the OS and the hardware are made by the same company. 
    Because Google have the policy of allowing hardware manufacturers and network operators to decide, the updates are in the control of those companies. 
    So you can have a same device, but a contract with 2 different network operators, where one gets an update and the other doesn't. 
    Samsung does have a policy of "N+2" meaning that they generally underline their commitment to having 2 major OS upgrades, for most of their devices. 

    Regarding the MaaS360 app, you have to have it installed if you want to have full management feature set from your portal. There is no choice here.

    ------------------------------
    Eamonn O'Mahony
    Technical Client Success Manager
    IBM Security
    Dublin, Ireland
    ------------------------------