Installing MDM

Stanford University MDM Installation Video available at: http://tinyurl.com/mdminstall

These instructions were made using an iPhone 4, but apply to all iOS devices running iOS 4.2.1 or later.

Let's Get Started

38

MDM Service Page

42 Tap the Learn what MDM does to protect you and your data button to review the features of MDM.

Most of the benefits you gain from having MDM include the ability to perform various remote functions such as:

  • Resetting passcode
  • Locking the device
  • Erasing Stanford data from your device
  • Wiping the entire device data

Tap Continue when you are ready to proceed.

Restricted data question

44 Before you answer the question "Will you use this device to access Restricted Data?," tap the Learn more about the Stanford Data classifications button to review the list of security categories.

14 At this time, the MDM program only offers two setting options: “Restricted” or “Public.” It is suggested that those accessing Stanford systems, including email and calendars, select “Restricted,” even though users are unlikely to actually have access to restricted data.

Selecting “Restricted” will require a six digit password on your iOS device. If using a six digit password is a significant hindrance and you will not be accessing “Restricted data,” it is acceptable to select “Public.”

You will have all the same protections when selecting “Public,” though the “Public” password is slightly less secure as it is only four digits.

45 A "Yes" response to this question brings you to the email and calendar configuration page. Continue to the Email and calendar portion of this guide.

Tap No if you are only accessing Public data.

A "no" response brings you to a page that offers the option of installing a configuration profile even if you only work with Public data.

Tap Yes to enroll in MDM.

Email and calendar (READ CAREFULLY)

46 It is important to understand what email service you use before continuing with the MDM process. If you aren’t sure what email server you are on:

  1. Open http://webmail.stanford.edu
  2. Login with your SUNet credentials

If you see all of your most recent email in Webmail (also known as Zimbra), you probably use Stanford’s email service. If you don’t see your most recent emails, you are most likely using a different email server, or have your email configuration on your computer set to download emails from Stanford’s server instead of leaving them online. For any questions, contact your local IT administrator to confirm your situation.

Department Server (non-Zimbra users)

Many departments run their own email server separately from the University’s webmail server. For example, the Dean’s Office, Electrical Engineering, and Computer Science departments run their own email servers. If you know your department runs its own email server you should NOT remove your existing email account, and you should NOT install Stanford email and calendar through MDM (Select No Email). In the event that your phone is lost or stolen, you can delete all iOS device data remotely using MDM.

Zimbra Users

If you use Zimbra, MDM can automatically configure your Stanford email account on your iOS device. If you already have your Stanford Email and Calendar installed on your device, we recommend you remove it first (see the bottom of this page on how to do this). Using the MDM-installed configuration allows you to remotely wipe Stanford data if your device gets lost.

Tap Stanford email and calendar if you want MDM to configure these settings automatically and add your Stanford Email and calendar to your device.

55 If you need to remove a previous exiting Stanford Email Account:

  1. Tap Settings
  2. Tap Mail, Contacts, Calendars
  3. Tap Stanford Mail, scroll to bottom and tap Delete Account

Installation instructions

This page describes the events during the installation process, which includes some alert messages. These iOS alerts are normal.

47 Tap Preview the installation steps to read the instructions on this page before you install the configuration profile.

Tap Begin Now at the bottom of the page when you're ready.

Installation begins

This profile image will come up on your screen. It enrolls you in the MDM program. You need to install it to enable your personal profiles. Profiles are MDM’s way of sending configuration details to your device.

48 Tap Install to proceed.

Several screens appear during the installation process to indicate when the installer is enrolling, installing, or generating a key. This is normal.

Warning dialog

49 This warning alerts you that some of your settings will change on the device to accommodate the configuration profiles. These include the passcode requirements and other security settings.

Tap Install Now.

Installation continues

50 The configuration profile begins to install your specific settings (including email, if you chose it) and several more screens appear during this process. You may be asked at this point to enter a device passcode.

You're almost done.

Warning dialog

51 This warning dialog is required by Apple as part of the MDM profile installation process. Stanford University will NOT access your application data, call history, personal voicemail, or SMS messages. Some device information is collected, including: device and network IDs, carrier info, operating system, storage capacity, and a list of installed applications.

Tap Install to continue.

Notification

52 After your profile installs, this "Enrollment in progress" page appears, which notifies you of the new MDM application on your Home screen and what to expect while your profiles finish installing on your device.

Scroll down the page after you read this information.

What to do next: 53

  1. Press the Home button on your device and tap Settings to set your device passcode and email password.
  2. Tap the Mobile Mgr application on your Home screen to open the MDM Device Manager, where you can review a list of your apps or access some remote management options for your device.
  3. Bookmark the URL of the My Devices (self-service) page on your desktop or laptop computer.

This URL is: https://mdm.stanford.edu

Review your profiles (OPTIONAL)

54 Tap Settings , tap General, tap Profiles to see the list of MDM profiles on your device. Learn more about them by pressing the right arrow. Your profiles might include:

Your enrollment profile. If you need to delete the MDM profiles, this profile removes all of them.

  • MDM settings
  • VPN
  • Activesync Mail (optional)

MDM Management Page

28 URL: https://mdm.stanford.edu

This page allows you to perform various remote functions and view information about your iOS device:

  • Lock device (Useful if you lose your device)
  • Forgot passcode
  • Remove Stanford Data (such as Email)
  • Wipe all data (Useful if you lose your device)

If you’ve followed these steps and are still having problems, try following the installation video at:

If you have additional questions or want to view more information about the MDM service, you can do so from:

If you run into any problems during the configuration of MDM, please submit a HelpSU ticket at: