Differences

This shows you the differences between two versions of the page.

--- en:mobile:setup:device_side:prep_device [2020/02/12 23:22] – [Install other Apps] lou_lomas
+++ en:mobile:setup:device_side:prep_device [2021/04/28 00:33] (current) – Mark Glover
@@ Line 2: / Line 2: @@
 ====== Preparing the device =====
-<WRAP round important 75%>
+Preparing the device for mSupply is very dependant on factors including:
-The Device is to be allocated to a **Facility**, <wrap em>not</wrap> any individual user.\\
+  * The make of the device
-An individual could leave the Facility and another officer will need to take over operation of the device.\\
+  * The version of Android running on it
-Therefore, any accounts in any apps set up on the device should <wrap em>NOT</wrap> be those of the user (e.g. email, Telegram).
+  * The details of how the organisation plans to manage devices and communicate with users
-</WRAP>
-**Preparing the device involves:**
-  * [[en:mobile:setup:device_side#initial_android_device_power_up|Initial Android device power up]]
-  * [[en:mobile:setup:device_side#android_tweaks|Android tweaks]]
-  * [[en:mobile:setup:device_side#device_remote_management|Configure device through device remote management]]
-  * [[en:mobile:setup:device_side#other_apps|Install other Apps]]
-==== Initial Android device power up ====
-<WRAP center round info 60%>
-  * It is virtually impossible to prevent a modern Android device which is connected to the internet from doing at least some software updates.  These can be of the order of <wrap em>0.5 GB</wrap> of data.  If the device's OS is updating you can add <wrap em>~1.0 GB</wrap> to that!
-  * If possible, it is worth preventing these updates from occurring over slow and expensive cellular data connections.
-  * Therefore, it is recommended to connect the device to a (lower cost and faster) internet connected Wi-Fi network at the time of initial device power up and allowing OS updates and mSupply installation.
-  * Once this process is complete, the device can then use its cellular data connection for ongoing mSupply operation.
-  * Each new version of Android and the branded OS introduce changes to the menu structure.  These instructions will likely need to be amended to suit the particular version of Android and branded OS.  Therefore, these instructions are generic, and will likely need to be documented in more detail depending on the particular device and version of Android and branded OS:-(
-</WRAP>
-  - Power up the device
-  - You should see a **Welcome!** screen where you will be asked for a language.  Select an appropriate language, then tap **START**
-  - You should be prompted to connect to a **Wi-Fi** network.  Even if you will use a Wi-Fi network as part of the process of setting up the device, turn Wi-Fi ''Off'' for now, then tap **NEXT**.  If possible, we'll connect to a Wi-Fi network later.
-  - You should be prompted to accept Terms and Conditions.  The only one compulsory appears to be the **End User License Agreement**.  ''Un-tick'' **Diagnostic data** and **Marketing information**. tap **NEXT**
-  - You should be prompted to accept a number of **Google services**:
-    - **Use Google's location service to help apps**:  Turn ''On''
-    - **Improve location accuracy**:  Turn ''On''
-    - **Send system data**:  Turn ''Off''\\ tap **NEXT**
-  - Because you have not connected to Wi-Fi, you should be prompted to set the **Date & time**:  Set these correctly.
-  - You may be prompted to provide a **Name**, or sometimes **First** and **Last** name.  Do <wrap em>NOT</wrap> use the personal name of the Officer In-Charge (OIC) of the facility.  A convention to follow is to set the the **Name** (or **First** name) to the facility name.  If you are prompted for a **Last** name, set that to the district / province.  e.g.\\ **Name** (or **First** name):  ''WAFI HC''\\ **Last name:**  ''Bulolo''\\ <WRAP center round tip 60%>
-Take care:  Your device will likely try to autocorrect your spelling!
-</WRAP>Then tap **NEXT**.
-  - You should be prompted to select a **Lock type**.  Choose **PIN**.
-  - You should be prompted to **Secure startup**.  Choose **Require PIN when device powers on**, then tap **CONTINUE**.
-  - You should be prompted to **Set PIN**.  Set it to ''6787'' (MSUP), re-enter it to confirm it.
-  - You should be prompted to set **Notifications**.  Set it to **Show content**, then tap **DONE**.
-  - You should be prompted to create a **Samsung account** (obviously will be different for other branded devices).  Tap **SKIP**
-  - You may be prompted to confirm that you wish to **Skip Samsung account setup?**.  Tap **SKIP**
-  - You may be prompted to configure **More useful features**.  Decline all of these.  Tap **FINISH**
-==== Android tweaks ====
-There are a number of tweaks that are worth applying before proceeding further:
-=== Screen timeout ===
-  - The default screen timeout can be quite short (30 seconds).  For normal mSupply operation, this is too short.  This should be set to at least 2 minutes.  **Settings > Display > Screen timeout** Set to, say, ''5 minutes''
-=== Turn off 'Capitalise first letter' ===
-In order to ease operation on the tablet, it's a good idea to avoid capital letters.  This is also facilitated by turning off 'capitalise first letter' in the keyboard setting on the device.
-  * Samsung devices:  **Settings > General management > Language and Input > On-screen keyboard > Samsung Keyboard > Smart typing > Auto capitalise**:  ''Off''
-=== Device updates ===
-As soon as your device accesses the internet, it will likely try to update software.  This can take unnecessary time and data.  We need to take action to minimise this.  It is worth deleting or disabling as many extra apps on the device as possible, including:
-    - All brand bloatware (Samsung / Lenovo / etc.)
-    - All MS Office applications
-    - All Google applications
-  * **Settings > Software update > Download updates automatically**  ''Un-tick''
-=== Allow apps to be installed from local sources ===
-  * **Settings > Lock screen and security > Unknown sources**:  Turn ''On''
-=== Enable Knox security (necessary for Sure MDM management - see below) ===
-  * **Settings > Device maintenance > Device security** Accept the prompted permissions request
-  * **Knox active protection**:  Turn ''On''
-  - You may be prompted for various services by the pre-installed apps.  Ignore / defer / deny all of these.<WRAP center round important 60%>
-At this point, the device will try and update its apps.  Proceed as quickly as possible to the next step:
-</WRAP>
-  - Turn off the manufacturer's Auto updates for the device:
-    - **Apps > Samsung > Galaxy Store > Settings (top right menu) > Auto update apps > Never**.  While you are in the Auto update apps area:
-    - Turn ''Off'' **Update notifications**
-    - Turn ''Off'' **Marketing choice**
-  - Enter the credentials for a local Wi-Fi network, then tap **NEXT**.
-==== Device remote management ====
-As of 2019-10-15, SureLock and SureMDM are used to manage Android Tablets running mSupply Mobile around the world.
-  * [[https://docs.42gears.com/suremdm/docs/SureMDM/42GearsUEMConsole.html|SureMDM]] allows remote management of the tablets.  With **SureMDM** We can install and uninstall software, track the location of the tablets and wipe the contents of the tablets remotely. Many other functions as well.
-  * [[https://docs.42gears.com/surelock/docs/surelock_android/Introduction.html|Surelock]] locks the Tablets into Kiosk mode. This means only the apps (mSupply, Telegram, Gmail, etc.) will run on the tablets.  The user is presented with a home screen that only contains icons for these apps and all other functions of the tablet are locked down.
-=== Management using SureMDM ===
-Once SureMDM is installed on the device, considerable control over the device is possible including remotely deploying, installing and executing apps including SureLock.
-This control is generally managed through application of SureMDM [[https://docs.42gears.com/suremdm/docs/SureMDM/JobsforAndroid.html|'Jobs']].  This document does not detail SureDMD Jobs as the exact configuration will depend on a number of local specific factors.
-=== PIN code for SIM ===
-To prevent removal of the SIM from the device and use of the SIM on another device, it is a good idea to [[https://www.howtogeek.com/259360/how-to-set-up-sim-card-lock-for-a-more-secure-android-phone/|set the SIM PIN]].
-==== Install other Apps ====
-{{page>en:mobile:setup:device_side#&nodate&nouser}}
-**The following apps (or equivalent) should be included:**
-  * Calculator - use the device's calculato
-  * Wi-Fi centre - use the device's Wi-Fi control
-  * For communication between sites and with support workers:
-    * Instant messaging - we recommend [[https://play.google.com/store/apps/details?id=org.telegram.messenger|Telegram]].  Use the devices's SIM phone number, (not the operator)
-    * Email - set up the device email app with an email address for the site/device (not the operator)
-While apps can be installed remotely using a SureMDM job, it may be more convenient to install them manually from a PC at the same time as installing the SureMDM and SureLock apps.
+Please consult with Sustainable Solutions ( <support@msupply.org.nz> ) on this.
 \\
 \\
-|  //Return to:  **[[en:mobile:setup:device_side|]]** | | Next:  **[[en:mobile:setup:device_side:3|]] **//  |
+|  //Return to:  **[[en:mobile:setup:device_side|]]** | | Next:  **[[en:mobile:setup:device_side:initialise_store]] **//  |