Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revisionLast revisionBoth sides next revision | ||
en:mobile:setup:device_side:prep_device [2020/02/12 22:14] – [Preparing the device] lou_lomas | en:mobile:setup:device_side:prep_device [2021/04/28 00:27] – [Preparing the device] Mark Glover | ||
---|---|---|---|
Line 2: | Line 2: | ||
====== Preparing the device ===== | ====== Preparing the device ===== | ||
- | <WRAP round important 75%> | + | Preparing the device for mSupply is very dependant on factors including: |
- | The Device is to be allocated to a **Facility**, | + | |
- | An individual could leave the Facility and another officer will need to take over operation | + | * The version of Android running |
- | Therefore, any accounts in any apps set up on the device should <wrap em> | + | * The details |
- | </ | + | |
+ | Please consult with Sustainable Solutions on this. | ||
- | **Preparing the device involves: | ||
- | * [[en: | ||
- | * [[en: | ||
- | * [[en: | ||
- | * [[en: | ||
==== Initial Android device power up ==== | ==== Initial Android device power up ==== | ||
- | <WRAP center round info 60%> | + | <WRAP center round info> |
* It is virtually impossible to prevent a modern Android device which is connected to the internet from doing at least some software updates. | * It is virtually impossible to prevent a modern Android device which is connected to the internet from doing at least some software updates. | ||
* If possible, it is worth preventing these updates from occurring over slow and expensive cellular data connections. | * If possible, it is worth preventing these updates from occurring over slow and expensive cellular data connections. | ||
Line 24: | Line 20: | ||
</ | </ | ||
- | - Power up the device | ||
- | - You should see a **Welcome!** screen where you will be asked for a language. | ||
- | - You should be prompted to connect to a **Wi-Fi** network. | ||
- | - You should be prompted to accept Terms and Conditions. | ||
- | - You should be prompted to accept a number of **Google services**: | ||
- | - **Use Google' | ||
- | - **Improve location accuracy**: | ||
- | - **Send system data**: | ||
- | - Because you have not connected to Wi-Fi, you should be prompted to set the **Date & time**: | ||
- | - You may be prompted to provide a **Name**, or sometimes **First** and **Last** name. Do <wrap em> | ||
- | Take care: Your device will likely try to autocorrect your spelling! | ||
- | </ | ||
- | - You should be prompted to select a **Lock type**. | ||
- | - You should be prompted to **Secure startup**. | ||
- | - You should be prompted to **Set PIN**. | ||
- | - You should be prompted to set **Notifications**. | ||
- | - You should be prompted to create a **Samsung account** (obviously will be different for other branded devices). | ||
- | - You may be prompted to confirm that you wish to **Skip Samsung account setup? | ||
- | - You may be prompted to configure **More useful features**. | ||
- | ==== Android tweaks | + | ==== Install Manage Engine-Mobile Device Management |
+ | Manage Engine-Mobile Device Management (ME-MDM) is used to remotely manage the Android devices running mSupply Mobile around the world. | ||
+ | * ME-MDM allows remote management of the device. Using ME-MDM we can install, update and uninstall software, track the location of lost devices and wipe the contents of the devices remotely. | ||
+ | * This means only the applications (mSupply, Telegram, Gmail, etc.) will be shown on the home screen and all other functions of the tablet are locked down. | ||
+ | Once ME-MDM is installed on the device, considerable control over the device is possible including remotely deploying, installing and executing apps. | ||
+ | There is [[https:// | ||
- | There are a number of tweaks that are worth applying before proceeding further: | + | <WRAP center round important 550px> |
- | === Screen timeout === | + | Requirements |
- | | + | |
+ | | ||
+ | </WRAP> | ||
- | === Turn off ' | ||
+ | === Terminology === | ||
+ | * **DEVICES** are enrolled to the MDM. | ||
+ | * Devices are assigned to **GROUPS**. You may need to configure additional groups if there will be more than one type of device installed in the system (that requires different profiles or apps). It is also recommended to have a Beta tester group of just one device which can then be used to verify that a software upgrade actually works properly. | ||
+ | * **USERS** are assigned to devices. All devices will be assigned to the same ‘system’ user for this ME-MDM ‘Customer’ account. | ||
+ | * **PROFILES** (Restrictions, | ||
+ | * **APPS** are stored in the App Repository and distributed to Groups (or devices - not recommended) | ||
- | In order to ease operation on the tablet, it's a good idea to avoid capital letters. | ||
- | * Samsung devices: | + | <WRAP center round tip 60%> To record asset tags with sites, it is necessary |
- | === Device updates === | + | * Device serial number |
- | As soon as your device accesses the internet, it will likely try to update software. This can take unnecessary time and data. | + | * Device name |
- | - All brand bloatware (Samsung / Lenovo / etc.) | + | * Asset tag |
- | - All MS Office applications | + | * Phone (SIM) number |
- | - All Google applications | + | |
- | * **Settings > Software update > Download updates automatically** | + | |
- | === Allow apps to be installed from local sources === | + | |
- | * **Settings > Lock screen and security > Unknown sources**: | + | |
- | === Enable Knox security (necessary for Sure MDM management - see below) === | + | |
- | * **Settings > Device maintenance > Device security** Accept the prompted permissions request | + | |
- | * **Knox active protection**: | + | |
- | - You may be prompted for various services by the pre-installed apps. Ignore / defer / deny all of these.< | + | Note: If you succeed in transferring |
- | At this point, | + | |
</ | </ | ||
- | - Turn off the manufacturer' | ||
- | - **Apps > Samsung > Galaxy Store > Settings (top right menu) > Auto update apps > Never**. | ||
- | - Turn '' | ||
- | - Turn '' | ||
- | |||
- | - Enter the credentials for a local Wi-Fi network, then tap **NEXT**. | ||
- | |||
- | |||
- | |||
- | |||
- | |||
- | ==== Device remote management ==== | ||
- | |||
- | As of 2019-10-15, SureLock and SureMDM are used to manage Android Tablets running mSupply Mobile around the world. | ||
- | |||
- | * [[https:// | ||
- | * [[https:// | ||
- | |||
- | === Management using SureMDM === | ||
- | Once SureMDM | + | === Installation === |
+ | - Charge and label the device. | ||
+ | - If the battery level is low, take this opportunity to put the device | ||
+ | - Make sure the device | ||
+ | - If the device has been used before, complete a **factory reset** for the device. | ||
+ | - If the device has a SIM, ensure that the SIM is functional, with sufficient data, etc. If the devices don’t have their own SIM, ensure that you have the best WiFi connection | ||
+ | - **Open WiFi**: | ||
+ | - **Pre-configure WiFi AP in the QR code**: | ||
+ | - **Manual configuration**: | ||
+ | - Enrol the device with ME-MDM. | ||
+ | - If the device is Android 9 or above: | ||
+ | - Obtain QR code (generated from ME-MDM: remember to select Android 9 code) for enrolling. | ||
+ | - Tap six times on the screen and, after allowing access to the camera, scan QR code. | ||
+ | - Ordered List ItemIf the device is Android 6 to 9: | ||
+ | - Obtain QR code for ME-MDM registration. | ||
+ | - On the google accounts page, enter the username '' | ||
+ | - Open (or download) a QR code scanner when prompted. | ||
+ | - Scan the QR code. | ||
+ | - If necessary, enter the WiFi credentials. | ||
+ | - Notify ME-MDM admin of the following and request they **Complete enrolment on the ME-MDM Admin Console**. | ||
+ | - device site name | ||
+ | - device serial number | ||
+ | - Once enrolment has been completed, profiles | ||
- | This control is generally managed through application of SureMDM [[https:// | ||
- | === PIN code for SIM === | + | You can find the latest version of open source mSupply Mobile **[[https:// |
- | To prevent removal of the SIM from the device | + | We recommend that you use TeamViewer |
- | ==== Install other Apps ==== | + | === Configure TeamViewer |
+ | - Launch TV and accept permission requests. | ||
+ | - Once TeamViewer has been configured on the device, find the device based on the serial number. | ||
+ | - In the properties of the entry, change the ‘Alias’ to the Device site name.\\ | ||
- | The following Apps, or equivalent, are recommended: | ||
- | * Calculator - use the device' | + | === Configure |
- | * Wi-Fi centre - use the device' | + | Launch Telegram and configure as desired. |
- | * Instant Messaging for communication between sites and with support workers: | + | |
- | While the instant messaging app can be installed remotely using a SureMDM job, it may be more convenient | + | The following section highlights |
\\ | \\ | ||
\\ | \\ | ||
- | | //Return to: **[[en: | + | | //Return to: **[[en: |