Administrator Guide Part VIII: Admin

Authentication Provider Settings

Most of the Authentication Provider Settings will be filled automatically after importing the Identity Providers Metadata. Additionally you can configure the visibility settings for Self Service Portal and Management Console Login. 

Authentication Provider Button Settings

This sections covers the customization for the Authentication Provider Button for the Self Service Portal and the Management Console Login.

Mobility (MDM and MAM)

Windows Store for Business

App Protection 

Signing Certificate

Displays the Expiration Date of the Profile Signing Certificate

Apple Push Notification Service

An Apple Push Notification Service (APNS) certificate is required for Silverback to manage iOS and macOS devices. After you add the certificate to Silverback, your users can enroll their devices. When a push certificate expires, you must renew it. When renewing, make sure to use the same Apple ID that you used when you first created the push certificate.

• The creation process is listed in the following Guide: Getting Started - Apple Guide I : Basics
• To renew the certificate please check the following knowledge base article: APNS Renewal process 

Companion Push Notification Service for iOS & iPadOS

Companion Push Notification Service for iOS & iPadOS  is the certificate used for Matrix42 Companion application on iOS or iPadOS devices to create or send push notifications. It will be provided and delivered with any Silverback installation. The certificate is valid for 1 year and will be replaced by a new one in the course of Silverback updates. In the case that the certificate will expire and you are not able to update to a newer Silverback version, check the following knowledge base article: Companion Push Certificate Update 

Access

In addition to the normal permissions granted to the various console user roles, some of these can be additionally configured from this section.

Device Privacy

Silverback allows  to control visibility of applications installed on devices and control the permissions for administrative users to view applications lists and perform factory resets on managed devices.

Home Section 

The main page gives an overview of the status and information relating to your Device Enrollment Program account. The organization and server information is displayed after a successful import of your token. The Account Overview section indicates how many devices are currently in your DEP account and how many are currently enrolled in Silverback.

Devices Section

The Devices section lists the devices in your DEP account and an associated username if the user is enrolled. The table shows a list of all users in your DEP program, regardless of whether they are enrolled in Silverback. The list can also be exported by clicking the Export button. The table shows the following details:

Settings Section

The Settings section allows you to configure your integration with Apple’s DEP program and determine the device behavior.

Logs 

Clicking the Logs button will export a *.csv file of actions that have been performed specifically on the Device Enrollment Program. This covers changes made by administrators and also events that are related to the Silverback connection to Apple. 

The file will contain the following information:

• Log ID
• Date
• User Name
• Action
• Action Destination 
• Http Code
• Http Text

Overview

Setting	Option	Description
Type	e.g. Samsung Safe	Defines the Operating System platform the the known device.
Model No.	e.g. SM-J530F	Each device models gets his Model number from the Hardware Vendor. In our example the Galaxy J5 could have more then 1 Model No. due to Market or region specific changes.
Description	e.g. Galaxy J5	The description will be shown in Devices area as the "Model" to identify Device Names
Edit		Edit an existing device type mapping by clicking on the edit button
Remove		Remove a device type mapping by clicking on the remove button

Edit Unknown Devices

• Click the Magnifier icon
• Change the Find filter to Description
• Enter as search criteria Unknown
• Click Edit on any unknown device type
• Enable the New Description checkbox
• Enter a desired device name, e.g. Galaxy J5
• Click Save

New Device Type

Add here device types in advance

• Click New Device Type
• Fill ill all necessary Create Device Type information

• Click Save 

Bulk Import

Add here new device types in bulk mode.

Edit Email Templates

• Choose the Email Template you want to edit
• Click the Edit button

When you click Edit on a template, a window will appear showing you the contents of the template.

You can use the controls at the top of this window to modify the template itself. It’s important to note that every language in the system has its own template. This means if you modify the template for English, these changes won’t affect the German template.

You can change the language currently being edited by clicking on the language drop down menu at the top. Note that language sent with the email depends on some conditions. For Admin emails, the language of the destination administrator will be used. For user enrollment based emails, the language of the user’s device using the SSP will be used. For user emails triggered by admins, the language of the admin will be used.

It’s also possible to use System Variables in each template. The availability of the variables depends on the template you are working with. By clicking the Variables drop down menu, you can choose the variable to add and also see what is available for that template.

Edit SMS Template

You can also modify the SMS message that is sent to users on enrollment. You can modify the message individually per language. The only variable available for SMS message is  {0}, and this will be replaced with the user’s enrollment link automatically.

• Scroll down to the SMS Template section
• Select from the drop down list the language you want to edit
• Change the text, but keep the {0} variable
• Click Save
• Click Reset to restore to get back to the default text

Overview

Detail	Example	Description
Id	e.g. 1	Database ID for the item
Serial Number	e.g. F17M9VN8FFG8	Serial number of the device
IMEI	e.g. 35303609258938 8	IMEI number of the device
Username	e.g. tim.tober@imagoverum.com	Displays the associated user to this device when it is enrolled.
Ownership	Corporate Personal	Displays the pre-defined ownership for this device and will overwrite whatever end users are choosing from Self Service Portal
Device Name	e.g. Imagoverum-iPad-001	Displays the pre-assigned device name
Label	e.g. Marketing	Displays the currently associated Label
Visibility Flag	e.g. Executive Board	Displays the currently associated Visibility Flag
Edit		Edit the selected device id
Remove		Removes the selected device id

Add New Device ID

Note that either Serial or IMEI is required, but one must exist. It’s also allowed to populate both serial and IMEI, but this will match either or (i.e. it will not make sure the device matches both values, it will find the first match and allow this).

Bulk Import

Overview

Error Logs

Silverback manages its enrolled devices through a series of commands that are sent and received by these devices over either a Wireless or Cellular connection. If for any reason one of these devices responds with an error, Silverback will log it in this error log for the Administrator to find.

The Error log is generated with the following headers:

Audit Logs

The Audit Logs will help Silverback Administrators keep a track of which user performed which action within the Silverback Management Console. The Audit Log is generated with the following headers:

Activation Lock Bypass 

For devices running iOS 7.1 or higher, it’s possible to override devices that have had Activation Lock enabled on them. For the bypass to work, three conditions must be met:

• Device must be running iOS 7.1 or above
• Device must be supervised
• Allow Activation Lock must be enabled in restrictions for that device.

When the device enrolls, Silverback will request a bypass code from the device, whether the user has enabled Activation Lock or not. To bypass the Activation Lock, click Export Bypass Codes from the Logs page. A CSV file will be downloaded containing all of the bypass codes that Silverback has collected.  Locate the device by using either the UDID, Last MDM Username or IMEI Number, and then note down the Activation Lock Bypass Code.  On the device, when prompted for the previous user’s iTunes account information, leave the Username field empty, and enter the bypass code in the password field.

 The Bypass Code Export is generated with the following headers:

Windows 10 Mobile

Windows 10

OSX

Managed App Feedback Collection for iOS

With iOS 7 and above, application developers can add information to their applications that a third party system like Silverback can retrieve. Enabling this setting will make sure that managed applications will be checked for application feedback. The application feedback is viewed from the Device Information Popup.

Pending Commands Overview

iOS, OSX Samsung SAFE and Android devices have pending commands stored in a form of queue. This means when a device checks in to the system, the system will find commands for that device in the queue and execute them. The table shows what pending commands exist in the system and also let you search and sort them, or delete them.

The various elements of the Pending Commands table contains:

• Click Refresh to update the pending command list
• Select outstanding pending commands and click delete selected (not recommended)

Concurrency Statistics

Concurrency Statistics gives you an overview of how long commands are taking to execute in your environment. The graph will display the average execution time for the top slowest requests. The “Current cut off limit” is the maximum number of devices that can connect to the system at any one time (this excludes enrolling devices). In large deployments, this means that a steady load can be achieved on the server. When a device attempts to connect and this number is consumed, the device will be told to “go away”, and attempt to connect later. Use the average execution time in the graph to determine your system limit. If the times are getting too high, reduce the cut off limit.

Front End

One Time Passwords

Simple Enrollment

Overview

Setting	Options	Description
ID	e.g. 1
Username	e.g. admin
Roles	e.g. Administrator
Email	e.g. admin@imagoverum.com
Time Zone	e.g. (UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna
Edit
Remove

Create New System User

From here the administrator is able to create local users to manage the Silverback environment. 

• Click New System User
• Fill in the following information

• Click Save

Adjust User Details

• Click the Edit button next to any of the listed System User

Active Directory

Under the  Active Directory tab Administrators have the ability to define LDAP Groups, so that all members of this group are able to login as an administrative user into the Management Console. Please refer to our Release Notes, where the functionality is fully described. 

Overview

The Overview Section provides a high level view of your VPP Account, lets you enter the company token and configure VPP Settings.    

Assets 

The assets section provides a list of all VPP applications in the system  Silverback displays the following application information:

• Asset ID
• App (Name)
• Asset ID
• Total Amount of Licenses
• Total Assigned Licenses 
• Total Available Licenses
• Retired Licenses
• Is Irrecoverable 
• Product Type 

Users

User section displays information about VPP users and the offers possibility to export the list of users in the system.

Licenses

The licensing section allows you to view the users, devices and licenses associated with your account. The main view is a table which shows you the licenses in your account, and the information associated with it. You can also export a list of licenses, and manually assign and un-assign licenses from users.  

Import

• Navigate to Import Section
• Configure your default values for importing VPP Applications:

• Click Save Settings

• Navigate to Overview