IBM Security MaaS360

 View Only
  • 1.  Using another MDM to 'auto' enroll and migrate to MaaS360

    Posted Wed May 06, 2020 07:18 AM
    Hi all, 

    As the title suggests, is it possible to push the MaaS360 agent to Android devices along with a config/enroll file to the device on another MDM? This other MDM does have the ability to push files and Apps so it is more of a question can MaaS360 be enrolled like this. Once enrolled we can unenroll from the old MDM as it's still accessible.

    A bit of background, there are hundreds of devices, all remote of course, and the users will not follow instructions so we're trying to make it as little as possible the end user has to do (or get wrong).

    I understand there might be a legal implication where they have to accept t&cs upon enrollment but if it's just the Maas prompt that'd do.

    Thanks in advance for any ideas or assistance.


    ------------------------------
    Jack
    ------------------------------


  • 2.  RE: Using another MDM to 'auto' enroll and migrate to MaaS360

    Posted Wed May 06, 2020 10:39 PM

    Hi Jack - Just as an FYI - depending on the management style, you may not be able to have 2 MDMs on the device at the same time.  

    MaaS360 can make our APK available and generate and enrollment file that can be side loaded alongside it, but what can be done with them as far as delivery would be entirely up to the other service.



    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 3.  RE: Using another MDM to 'auto' enroll and migrate to MaaS360

    Posted Thu May 07, 2020 08:11 AM
    Hi Matt, 

    Thanks for replying. 

    They're all manually enrolled so no KME, DO/PO or anything in place.

    In the past I've tested manually enrolling both MaaS360 and the other MDM on Android and both are installed and both are administrators of the device. We are Admins of the old MDM too so we have full control of the policies and unenrollment. 

    How can I get the APK from a trusted source and generate an enrollment file?

    Thanks

    ------------------------------
    Jack Hayden
    ------------------------------



  • 4.  RE: Using another MDM to 'auto' enroll and migrate to MaaS360

    Posted Thu May 07, 2020 09:55 AM

    Navigate to the main menu Devices-->Enrollments then in the top right corner expand the "Other Enrollment Options" menu

    +If you do not see an option for Android Configurator - send me an email with the account number and I can enable it.

    +If you do see Android Configurator - the top section will have download links for the Android APK and the configuration file.

    Here is where it gets a little murky, however - the config file requires credentials.  As the admin then you're left with the choice of either pre-populating a config file for each individual users credentials, which can be a lot of work, or enrolling all the users under a generic user template, which would come with it's own set of issues when pushing user configurations like email settings, and based on your description may not be desired. 





    ------------------------------
    Matt Shaver
    System Architect
    IBM
    mshaver@us.ibm.com
    ------------------------------



  • 5.  RE: Using another MDM to 'auto' enroll and migrate to MaaS360

    IBM Champion
    Posted Thu May 07, 2020 07:42 AM

    This gets a bit tricky especially with iPhones, the APN and if you have them tied to an Apple Business Manager account in the original MDM.  In terms of Android, if you have enrolled using Android Enterprise it gets a bit tricky too in terms of the managed Google account you used.  I would suggest opening up a ticket with IBM support on this to get some real insight into the nuances of all of this.  Feel free to contact me directly as well. 

     

    Stay Healthy!

     

    Mitch Lauer

    connecTel  Wireless  

    159 Perry Highway, Suite 200

    Pittsburgh, PA 15229

    216-970-6981 | Cell

    412-339-5775 | Help Desk

    412-339-5765 | Direct Dial