Preparing the device

Preparing the device involves:

• Initial Android device power up
• Install Manage Engine-Mobile Device Management
• Install device remote management
• Install mSupply Mobile
• Install other apps

Manage Engine-Mobile Device Management (ME-MDM) is used to remotely manage the Android devices running mSupply Mobile around the world.

• ME-MDM allows remote management of the device. Using ME-MDM we can install, update and uninstall software, track the location of lost devices and wipe the contents of the devices remotely.
• This means only the applications (mSupply, Telegram, Gmail, etc.) will be shown on the home screen and all other functions of the tablet are locked down.

Once ME-MDM is installed on the device, considerable control over the device is possible including remotely deploying, installing and executing apps. There is extensive public documentation on ME-MDM. This document focuses on the particular elements relevant to mSupply Mobile installations.

• DEVICES are enrolled to the MDM.
• Devices are assigned to GROUPS. You may need to configure additional groups if there will be more than one type of device installed in the system (that requires different profiles or apps). It is also recommended to have a Beta tester group of just one device which can then be used to verify that a software upgrade actually works properly. ME-MDM has a good system of marking newly upgraded software as Beta, and then approving it for release after testing.
• USERS are assigned to devices. All devices will be assigned to the same ‘system’ user for this ME-MDM ‘Customer’ account. This user will need to be created in ME-MDM. The user must have the same email address that is used to set up Android for Work (AfW) / Managed Google Play when initially configuring the user’s account.
• PROFILES (security, Kiosk, etc.) are associated with Groups
• APPS are stored in the App Repository and distributed to Groups (profiles can also be associated with devices – however, this is not recommended)

1. Charge and label the device.
   1. If the battery level is low, take this opportunity to put the device on charge.
   2. Make sure the device is labelled and serial number recorded.
2. If the device has been used before, complete a factory reset for the device.
3. If the device has a SIM, ensure that the SIM is functional, with sufficient data, etc. If the devices don’t have their own SIM, ensure that you have the best WiFi connection possible. Three modes are possible in order of preference:
   1. Open WiFi: For speed of processing multiple devices, it is recommended that the WiFi is open (no password).
   2. Pre-configure WiFi AP in the QR code: If an open WiFi is not possible, then the WiFi credentials can be entered in the QR Code configuration in the ME-MDM Admin Console.
   3. Manual configuration: If this is not done, the WiFi can be manually entered on each device (please note that this can be tedious if there are many devices).
4. Enrol the device with ME-MDM.
   1. If the device is Android 9 or above:
      1. Obtain QR code (generated from ME-MDM: remember to select Android 9 code) for enrolling.
      2. Tap six times on the screen and, after allowing access to the camera, scan QR code.
   2. Ordered List ItemIf the device is Android 6 to 9:
      1. Obtain QR code for ME-MDM registration.
      2. On the google accounts page, enter the username afw#mdm and press OK.
      3. Open (or download) a QR code scanner when prompted.
      4. Scan the QR code.
5. If necessary, enter the WiFi credentials.
6. Notify ME-MDM admin of the following and request they Complete enrolment on the ME-MDM Admin Console.
   1. device site name
   2. device serial number
7. Once enrolment has been completed, profiles and apps (including mSupply mobile) will be pushed to the device through ME-MDM.

We recommend that you use TeamViewer and Telegram on the mobiles to aid with support. They can also be pushed through ME-MDM and configured as below.

1. Launch TV and accept permission requests.
2. Once TeamViewer has been configured on the device, find the device based on the serial number.
3. In the properties of the entry, change the ‘Alias’ to the Device site name.

Launch Telegram and configure as desired.

The following section highlights the key steps for initialising mSupply Mobile once it has been pushed to the device through ME-MDM.

Download open source mSupply Mobile from GitHub

The following apps (or equivalent) should be included:

• Calculator - use the device's calculator
• Wi-Fi centre - use the device's Wi-Fi control
• For communication between sites and with support workers:
  • Instant messaging - we recommend Telegram. Use the devices's SIM phone number, (not the operator)
  • Email - set up the device email app with an email address for the site/device (not the operator). We recommend Gmail.

While apps can be installed remotely using a SureMDM job, it may be more convenient to install them manually from a PC at the same time as installing the SureMDM and SureLock apps.