Skip to main content
Matrix42 Self-Service Help Center

Devices Guide Part II: Managed

Overview

Managed Devices provides a summary of al currently enrolled and managed devices and also gives ability to perform device actions.

  • Navigate to Devices
  • Managed Device will be opened by default
  • The following options are possible on Managed Device Overview
    • Display Device Information
    • Add or remove colums
    • Perform Actions (Assign Tags, Lock, Block, Factory Wipe, Delete Business Data)
    • Open Device Overview
    • Select and Unselect devices and perform multiple actions (Lock, Block, Factory Wipe, Delete Business Data)
    • Search and Find Devices 

Admin_Guide_SB_013.png

Columns

Detail Description
Device ID Displays the unique Device ID from Silverback database.
Username The username associated with the provisioned device.
Platform Denotes the platform type the device has been built for.
Label A Custom Label for the device.
Device Name Displays the custom device name or bluetooth device name.
Model The model associated with the device hardware.
OS The Operating System running on the device.
OS Version The OS version running on the device.
Security Patch Level Displays the Security Patch Level for Android devices.
OS Update Displays available OS Updates for supervised Apple devices.
Serial Number Displays the device serial number.
Storage The amount of unused storage on the device.
Battery Indicates the device’s battery level.
Last Updated The time the device last contacted the server.
Owner Users nominate during enrollment whether the device is corporate or personal.
Device Owner Indicates the Device Owner status on Android Enterprise devices.
First Name Displays the users First Name as retrieved from LDAP.
Surname Displays the users Surname as retrieved from LDAP.
Supervised Indicates Yes or No whether the device is supervised or not.
Azure AD Indicates if the Windows 10/11 device is joined to Azure Active Directory.
Visibility Flag Displays visibility flags for devices.
IMEI Displays the device IMEI Number.
Actions  The actions that can be performed on the device (see below).

Actions

Action Icon Description
Tags Admin_Guide_SB_014.png Edits the current set of Tags associated with the device.
Lock Admin_Guide_SB_015.png Activates the screen lock on the device.
Block Admin_Guide_SB_016.png Moves the selected Device to the Blocked state and removes any corporate data or apps associated with Silverback.
Factory Wipe Admin_Guide_SB_017.png Hard resets the device and restores it to default factory settings, clearing all data and configurations.
Delete Business Data Admin_Guide_SB_018.png Deletes the selected device from Silverback and removes any corporate data or apps associated with Silverback.
Update OS Update is available Schedules an OS Update for supervised Apple devices. Please refer to Updating OS Versions on Apple devices for additional information.

Additional device and platform specific actions are available within the Device Overview 

Multiple Actions

Multiple Actions menu will be activated when selection at minimum two devices. 

Action Description
Lock Activates the screen lock on the selected devices.
Block Moves the selected devices to the Blocked state and removes any corporate data or apps associated with Silverback.
Factory Wipe Hard resets the selected devices and restores them to default factory settings, clearing all data and configurations from the device.
Delete Business Data Deletes the selected devices from Silverback and removes any corporate data or apps associated with Silverback.
Install Updates Schedules an OS Update for selected supervised Apple devices with an available OS Update. Please refer to Updating OS Versions on Apple devices for additional information.

Additional Factory Wipe Options

Action Description
iOS, iPadOS
Preserve Data Plan The Preserve Data Plan option is enabled by default and will preserve the data plan on an iPhone or iPad with eSIM functionality if one exists. This option is available for devices running on iOS 11 and later.  
Disable Proximity Setup Disables the Proximity Setup (Quick Start) pane in the Setup Assistant after the factory wipe.  This option is available for iOS and iPadOS devices running on iOS and iPadOS 14 and later
macOS
PIN, 6 digits As part of the erase process for Intel-based devices, you must provide a six-digit PIN to unlock the Mac. Our recommendation is to safe the PIN in a secure place, as Silverback does not store the PIN and will not be able to bypass the lock if the PIN is forgotten. For security reasons, providing a PIN will be either mandatory or not depending of the PIN Required For Device Lock information.
Obliteration Behaviour The option to factory wipe macOS devices with t​​​​he Erase all Content and Setting method requires an Apple Silicon Processor or an T2 Security chip, as the Factory Wipe commands uses in this case the Erase All Content and Settings (EACS) instead of the usual Erase Device Command. In combination with the Erase Device Command, the obliteration behaviour command acts as a fallback behavior for erasing a device from Silverback and the device will performs pre-flight checks to determine if the device is in a state that allows EACS. Depending on the selected obliteration behaviour, the device either starts or doesn't start to erase itself as highlighted below:

Default: If the EACS pre-flight fails, the device responds to Silverback an Error status and then attempts to erase itself. If the EACS pre-flight succeeds but EACS fails, then the device attempts to erase itself.

Do Not Obliterate: If the EACS pre-flight fails, the device responds to Silverback an Error status and doesn’t attempt to erase itself. If the EACS pre-flight succeeds but EACS fails, then the device doesn’t attempt to erase itself.

Obliterate With Warning: If the EACS pre-flight fails, the device responds to Silverback an Acknowledged status and then attempts to erase itself. If EACS pre-flight succeeds but EACS fails, then the device attempts to erase itself.

Providing a PIN might be still required when executing the Factory Wipe options for device that are supporting EACS. If devices are not enrolled via the Device Enrollment Program, they might not report the PIN Required For Erase Device information and in this case, a PIN is required as a backup. If devices are accidently presented with the obliteration behaviour, the device will anyway ignore the command.

To execute the fast Factory Wipe with the EACS, devices must be enrolled after having Silverback 22.0 installed. As from this version on, Silverback requests the required Bootstrap Token to approve this operation. 

Windows 10/11
Wipe and persist provisioned data Specifies that provisioning packages will be retained during the factory reset.
Wipe protected This option performs a remote wipe on the device and fully cleans the internal drive. The functionally is like basic wipe. But unlike Wipe, which can be easily circumvented by simply power cycling the device, this option will keep trying to reset the device until it’s done.

In some device configurations, this command may leave the device unable to boot.

Wipe and persist user data Will perform a remote reset on the device and persist user accounts and data. Additionally, the device remains enrolled during the factory reset execution and assigned profiles and applications will be re-applied to the device after the factory reset process is finished. 

Specials 

Serial Number

If the device being deleted, also has it’s serial or IMEI number listed in Hardware Authentication, the Silverback administrator will be prompted to optionally remove this as well. If you don’t want to delete the serial or IMEI number from Hardware Authentication, you can dismiss this prompt.

Device Lock for iOS and iPadOS

When this lock is sent to the device, the information is shown on the lock screen. For iOS and iPadOS devices, the person with access to the phone has the option to dial the number on the screen. Please note that if the device does not have a passcode configured, this information will not show on the device. With entering the passcode, the device can be unlocked. 

Device Lock for macOS 

macOS Devices require a pin code to be sent with the lock. When you click lock you need to enter this code. This code needs to be entered on the device to unlock it.

Device must be network-tethered

Some iOS, iPadOS, and macOS devices actions are displaying an option if the Device must be network-tethered. If devices are not network-tethered, the devices will ignore the executed command. Administrators can review if iOS and iPadOS devices are currently Network Tethered within the Device Information.

  • Was this article helpful?