Skip to main content
Matrix42 Self-Service Help Center

Devices Guide Part II: Managed

Overview

Managed Devices provides a summary of al currently enrolled and managed devices and also gives ability to perform device actions.

  • Navigate to Devices
  • Managed Device will be opened by default
  • The following options are possible on Managed Device Overview
    • Display Device Information
    • Add or remove colums
    • Perform Actions (Assign Tags, Lock, Block, Factory Wipe, Delete Business Data)
    • Open Device Overview
    • Select and Unselect devices and perform multiple actions (Lock, Block, Factory Wipe, Delete Business Data)
    • Search and Find Devices 

Admin_Guide_SB_013.png

Columns

Detail Description
Device ID Displays the unique Device ID from Silverback Database
Username The username associated with the provisioned device
Platform Denotes the platform type the device has been built for.
Label A Custom Label for the device.
Device Name Displays the custom device name or bluetooth device name
Model The model associated with the device hardware.
OS The Operating System running on the device.
OS Version The OS version running on the device
Security Patch Level Displays the Security Patch Level for Android Devices
OS Update Displays available OS Updates for supervised Apple Devices
Serial Number Displays the device Serial Number
Storage The amount of unused storage on the device
Battery Indicates the device’s battery level
Last Updated The time the device last contacted the server
Owner Users nominate during enrollment whether the device is corporate or personal.
Device Owner Indicates the Device Owner status on Android Enterprise devices.
First Name Display the users First Name as retrieved from LDAP.
Surname Display the users Surname as retrieved from LDAP.
Supervised Display “Yes/No” depending on whether the device is Supervised or not.
Azure AD Indicates if the Windows 10 Device is joined to Azure Active Directory
Visibility Flag Displays visibility flags for devices
IMEI Displays the device IMEI Number 
Actions  The actions that can be performed on the device (see below)

Actions

Action Icon Description
Tags Admin_Guide_SB_014.png Edits the current set of Tags associated with the device.
Lock Admin_Guide_SB_015.png Activates the Screen Lock on the device.
Block Admin_Guide_SB_016.png Moves the Selected Device to the Blocked Container and removes any Corporate Data or Apps associated with Silverback from the device.
Factory Wipe Admin_Guide_SB_017.png Hard resets the device and is restored to default factory settings, clearing all data and configurations from the device.
Delete Business Data Admin_Guide_SB_018.png Deletes the Selected Device from Silverback – Removing any Corporate Data or Apps associated with Silverback from the device.

Additional device and platform specific actions are available within the Device Overview 

Multiple Actions

Multiple Actions menu will be activated when selection at minimum two devices. 

Action Description
Lock Activates the Screen Lock on the device.
Block Moves the Selected Device to the Blocked Container and removes any Corporate Data or Apps associated with Silverback from the device.
Factory Wipe Hard resets the device and is restored to default factory settings, clearing all data and configurations from the device.
Delete Business Data Deletes the Selected Device from Silverback – Removing any Corporate Data or Apps associated with Silverback from the device.
Install Updates Sends a Download and Install Request to supervised iOS devices with an available OS Update

Additional Factory Wipe Options

Action Description
iOS, iPadOS
Preserve Data Plan The Preserve Data Plan option is enabled by default and will preserve the data plan on an iPhone or iPad with eSIM functionality if one exists. This option is available for devices running on iOS 11 and later.  
Disable Proximity Setup Disables the Proximity Setup (Quick Start) pane in the Setup Assistant after the factory wipe.  This option is available for iOS and iPadOS devices running on iOS and iPadOS 14 and later
macOS
PIN, 6 digits As part of the erase process for Intel-based devices, you must provide a six-digit PIN to unlock the Mac. Our recommendation is to safe the PIN in a secure place, as Silverback does not store the PIN and will not be able to bypass the lock if the PIN is forgotten. For security reasons, providing a PIN will be either mandatory or not depending of the PIN Required For Device Lock information.
Obliteration Behaviour

The option to factory wipe macOS devices with t​​​​he Erase all Content and Setting method requires an Apple Silicon Processor or an T2 Security chip, as the Factory Wipe commands uses in this case the Erase All Content and Settings (EACS) instead of the usual Erase Device Command. In combination with the Erase Device Command, the obliteration behaviour command acts as a fallback behavior for erasing a device from Silverback and the device will performs pre-flight checks to determine if the device is in a state that allows EACS. Depending on the selected obliteration behaviour, the device either starts or doesn't start to erase itself as highlighted below:

Default: If the EACS pre-flight fails, the device responds to Silverback an Error status and then attempts to erase itself. If the EACS pre-flight succeeds but EACS fails, then the device attempts to erase itself.

Do Not Obliterate: If the EACS pre-flight fails, the device responds to Silverback an Error status and doesn’t attempt to erase itself. If the EACS pre-flight succeeds but EACS fails, then the device doesn’t attempt to erase itself.

Obliterate With Warning: If the EACS pre-flight fails, the device responds to Silverback an Acknowledged status and then attempts to erase itself. If EACS pre-flight succeeds but EACS fails, then the device attempts to erase itself.

Providing a PIN might be still required when executing the Factory Wipe options for device that are supporting EACS. If devices are not enrolled via the Device Enrollment Program, they might not report the PIN Required For Erase Device information and in this case, a PIN is required as a backup. If devices are accidently presented with the obliteration behaviour, the device will anyway ignore the command.

To execute the fast Factory Wipe with the EACS, devices must be enrolled after having Silverback 22.0 installed. As from this version on, Silverback requests the required Bootstrap Token to approve this operation. 

Windows 10/11
Wipe and persist provisioned data Specifies that provisioning packages will be retained during the factory reset.
Wipe protected This option performs a remote wipe on the device and fully cleans the internal drive. The functionally is like basic wipe. But unlike Wipe, which can be easily circumvented by simply power cycling the device, this option will keep trying to reset the device until it’s done.

In some device configurations, this command may leave the device unable to boot.

Wipe and persist user data Will perform a remote reset on the device and persist user accounts and data. Additionally, the device remains enrolled during the factory reset execution and assigned profiles and applications will be re-applied to the device after the factory reset process is finished. 

Specials 

Serial Number

If the device being deleted, also has it’s serial or IMEI number listed in Hardware Authentication, the Silverback administrator will be prompted to optionally remove this as well. If you don’t want to delete the serial or IMEI number from Hardware Authentication, you can dismiss this prompt.

Device Lock for iOS and iPadOS

When this lock is sent to the device, the information is shown on the lock screen. For iOS and iPadOS devices, the person with access to the phone has the option to dial the number on the screen. Please note that if the device does not have a passcode configured, this information will not show on the device. With entering the passcode, the device can be unlocked. 

Device Lock for macOS 

macOS Devices require a pin code to be sent with the lock. When you click lock you need to enter this code. This code needs to be entered on the device to unlock it.

Device must be network-tethered

Some iOS, iPadOS, and macOS devices actions are displaying an option if the Device must be network-tethered. If devices are not network-tethered, the devices will ignore the executed command. Administrators can review if iOS and iPadOS devices are currently Network Tethered within the Device Information.

  • Was this article helpful?