Mobile Device Management (MDM) and device passwords

Learn what to consider if your cloud devices need Mobile Device Management (MDM) or a password, passcode, or PIN, for example because upper management or your security policy requires it. If an MDM is required, Perfecto devices can work with it. The MDM configuration must be done by someone who manages the MDM policies in your organization. Make sure your MDM settings do not block the device services and permissions required for connection, debugging, USB data transfer, and app installation.

Perfecto is not responsible for the installation, configuration, or maintenance of any customer MDM or customer-installed certificate(s).

Following are a few caveats to consider when working with an MDM.

The preparation process for MDM enrollment involves a factory reset of the device.

  • Android devices using an MDM:

    For Android devices managed by Microsoft Intune, device ownership is required. You must install the Intune profile on the device before shipping the device to the Perfecto data center. Once the device is connected, the MDM policy for device ownership is preserved.

    The MDM must not disable or restrict the following services:

    • ADB Debugging

    • The function to allow installation of unknown applications (this is an Android security setting)

    • Data transfer over USB

    • Video transfer over USB

    • Stay Awake

    In addition, do not enable the Scan apps with Play Protect setting.

    For proper connection and support, your MDM team must make sure that all settings are configured as detailed in Hybrid clouds | Set up and connect Android devices.

  • iOS devices using an MDM:

    The MDM must not disable or restrict the following services:

    • Any of the Perfecto iOS clients on the device

    • Data transfer over USB

    • Video transfer over USB

    • Installation of applications to the device

    • Never lock

    In addition, devices should not require a passcode lock of less than 15 minutes.

    For proper connection and support, your MDM team must make sure that all settings are configured as detailed in Hybrid clouds | Set up and connect iOS devices.

  • General configuration. The MDM must not force the following:

    • Immediate passcode lock. If required, set the lock to no less than 15 minutes.

As long as the MDM follows these requirements on the devices, using an MDM should not be a problem. Note that the use of passwords, passcodes, or a PIN also fall under the same regulations.