Administrator guide
11 Configure platform-specific settings
You have to configure specific settings for different platforms to support management of these device types in Sophos Mobile Control.
11.1 Configure iOS-specific settings
For iOS devices you must enable the use of Apple Push Notification service by uploading the APNs keystore to the web console. For further information on how to obtain your APNs certificate for
Sophos Mobile Control, refer to the Sophos Mobile Control startup guide or the Sophos Mobile
Control as a Service startup guide.
In addition, you can configure the locate function for iOS devices, if this is allowed for the customer you are logged in to. The super administrator can activate or deactivate the iOS locate function in customer management. For further information on customer management, see the Sophos
Mobile Control super administrator guide.
Note: Super administrators are not supported for Sophos Mobile Control as a Service. For Sophos
Mobile Control as a Service, customers are predefined.
11.1.1 Upload Apple Push Notification keystore
To use the built-in Mobile Device Management (MDM) protocol of devices running Apple iOS
4 (or higher), Sophos Mobile Control must use Apple Push Notification service (APNs) to trigger iOS devices. To enable the Apple Push Notification service, you must upload the Apple Push
Notification keystore in the web console. For information on how to obtain your APNs certificate for Sophos Mobile Control, refer to the Sophos Mobile Control startup guide or the Sophos Mobile
Control as a Service startup guide.
Prerequisite: You have obtained your APNs certificate for Sophos Mobile Control.
1. In the web console menu bar, go to Settings and click System setup.
The System setup view is displayed.
2. Go to the iOS settings tab.
3. Browse for the APNs certificate file. If you have not changed the suggested name during the creation process, this file should be called mdm_apns_certificate.pkcs12.
4. In the Password for the keystore field, enter the required password.
5. In the Apple ID field, you can enter your Apple ID for future reference.
6. Click Upload.
After the file has been uploaded successfully, a confirmation message is displayed.
7. Click Save.
23
Sophos Mobile Control
11.1.2 Configure locate function for iOS 6 devices
Note: The settings described in this section apply to iOS 6 devices only.
If the locate function is enabled, the Sophos Mobile Control app installed on iOS devices determines the device location and sends it to the Sophos Mobile Control Server. You can configure a compliance setting that relates to the locate function to make sure that the user allows the Sophos
Mobile Control app to retrieve location data, see Available compliance settings
(section 12.1). The locate function is available to administrators in the Actions menu of the Show device and Edit
device views (Show location button) and to end users in the Sophos Mobile Control Self Service
Portal (see the Sophos Mobile Control user guide for Apple iOS).
Note: You can only configure the locate function for iOS devices, if this is allowed for the customer you are logged in to. The super administrator can activate or deactivate the iOS locate function in customer management. For further information on customer management, see the Sophos
Mobile Control super administrator guide. Super administrators are not supported in Sophos Mobile
Control as a Service. In this case customers are predefined.
1. In the web console menu bar, go to Settings and click General.
The General settings view is displayed.
2. Go to the iOS client tab.
3. Make sure that the Enable device location field is selected.
4. In the Desired accuracy (in meters) field, select the radius for position changes detected by the Locate function:
■
■
■
100
1000
3000
Note: Higher accuracy will decrease battery life. The lowest value in this field (100) means the highest accuracy.
5. Click the Save button.
11.1.3 Configure destinations for AirPlay mirroring
With Sophos Mobile Control you can remotely trigger AirPlay mirroring between an iOS device and predefined AirPlay destinations (for example AppleTV).
Note: AirPlay only works for devices within the same network.
You can define destinations for AirPlay mirroring in the web console.
1. In the web console menu bar, go to Settings and click System setup.
The System setup view is displayed.
24
Administrator guide
2. In the iOS settings tab, under AirPlay destinations, click the Create Airplay destination button.
The AirPlay destination view is displayed.
3. Enter the Device name (obligatory) and the MAC address (optional). If necessary, enter the
Password for the AirPlay destination device.
4. Click the Apply button.
The device is shown under AirPlay destinations in the iOS settings tab of the System setup view.
5. In the iOS settings tab, click the Save button.
You can trigger AirPlay mirroring between an iOS device and the destination defined by using the Request AirPlay mirroring button from the Actions menu in the Show device or Edit device view for the relevant device.
11.2 Configure Windows Phone 8 specific settings
For Windows Phone 8 you can configure the MDM synchronization interval.
Note: Synchronization is only performed in this interval. Synchronization through the server cannot be triggered.
In addition, you can configure the locate function for Windows Phone 8 devices, if this is allowed for the customer you are logged in to. The super administrator can activate or deactivate the locate function in customer management. For further information on customer management, see the
Sophos Mobile Control super administrator guide.
In addition, you can configure an email to be sent to users for app activation on their devices.
11.2.1 Configure synchronization interval
1. In the web console menu bar, go to Settings and click General.
The General settings view is displayed.
2. Go to the Windows Phone client tab.
3. In the MDM sync interval field, select the time interval for synchronization with the server.
4. Click the Save button.
11.2.2 Configure locate function for Windows Phone 8 devices
If the locate function is enabled, the Sophos Mobile Control app installed on Windows Phone 8 devices determines the device location and sends it to the Sophos Mobile Control Server. You can configure a compliance setting that relates to the locate function to make sure that the user allows
25
Sophos Mobile Control the Sophos Mobile Control app to retrieve location data, see
Available compliance settings (section
12.1). The locate function is available to administrators in the Actions menu of the Show device and Edit device views (Show location button) and to end users in the Sophos Mobile Control
Self Service Portal (see the Sophos Mobile Control user guide for Windows Phone 8).
Note: You can only configure the locate function for Windows Phone 8 devices, if this is allowed for the customer you are logged in to. The super administrator can activate or deactivate the
Windows Phone 8 locate function in customer management. If you change this setting it will only apply for newly enrolled devices. Already enrolled devices are not affected. For further information on customer management, see the Sophos Mobile Control super administrator guide. Super administrators are not supported in Sophos Mobile Control as a Service. In this case customers are predefined.
1. In the web console menu bar, go to Settings and click General.
The General settings view is displayed.
2. Go to the Windows Phone client tab.
3. Make sure that the Enable device location field is selected.
4. In the Desired accuracy (in meters) field, select the radius for position changes detected by the Locate function:
■
■
■
100
1000
3000
Note: Higher accuracy will decrease battery life. The lowest value in this field (100) means the highest accuracy.
5. Click the Save button.
11.2.3 Configure app activation email
1. In the web console menu bar, go to Settings and click General.
The General settings view is displayed.
2. Go to the Windows Phone client tab.
3. Under App activation email, do the following: a) In the Originator field, enter the email sender address.
b) In the Subject field, enter an email subject, for example "Activate the Sophos Mobile Control email on your device".
c) In the text field under Content, predefine the email content. The following placeholders are available and will be replaced by the corresponding values in the email:
■ _ACTIVATIONTOKEN_
26
Administrator guide
■ _CONFIG_LINK_
■ _SERVERURL_
■ _DEVICENAME_
■ _DEVICEDESCRIPTION_
Use the placeholder _ACTIVATIONTOKEN_ to include an activation token. This token is required for activating the app on the end user device.
4. Click the Save button.
11.3 Configure BlackBerry Enterprise Server
BlackBerry devices are supported in Sophos Mobile Control through BlackBerry Enterprise Server.
In the web console, you must specify the BlackBerry Enterprise Server URL and the account configured to be used for Sophos Mobile Control.
Note: BlackBerry devices are not supported for Sophos Mobile Control as a Service.
1. In the web console menu bar, go to Settings and click System setup.
The System setup view is displayed.
2. Go to the RIM BES tab.
3. In the BlackBerry BES URL field, enter the URL of the BlackBerry Enterprise Server.
4. Enter the User name and the Password of the account to be used for Sophos Mobile Control.
5. Click the Save button.
27
