GroundControl locks devices using its Imprivata Locker app, available for iOS and Android devices.
Obtaining the App
GroundControl locks devices using a Custom B2B App, which is distributed through Apple’s iTunes VPP program. There is no charge for the Imprivata Locker app for iOS.
To obtain the app, email support@imprivata.com with the following information:
- Your organization’s DEP ID
- Exact organization name as it appears in Apple Business Manager
Also make sure Custom Apps are enabled for your organization within Apple Business Manager. It may take 1-2 days for the app to appear in your list of Custom Apps.
After the app shows within ABM, your ABM administrator must “purchase” (for free) a number of copies of the app. It does not matter how many copies are purchased, but it should be sufficient to cover the quantity of devices you have.
After purchase, the app appears within your MDM alongside other VPP apps. Configure your MDM to automatically deploy your apps to the appropriate group of devices on enrollment. Ensure that the Imprivata Locker app is allowed through your MDM profiles and it’s not hidden or uninstalled during Check In or Check Out Workflows.
Locker App Details
Imprivata Locker 3.x (iOS)
- App ID: com.imprivata.b2b.locker
- External ID: 1569836501
- App Icon:
GroundControl Locker 2.0 + was supported through the end of 2021. You must migrate to Imprivata Locker 3.x (iOS). See this article for instructions on migrating.
Obtaining the App
Imprivata Locker Android is distributed via Managed Google Play.
Locker App Details
Locker App (Android) 1.0
- App Icon:
Required Android Device Settings and Permissions
The Imprivata Locker app (Android) requires the following device settings and permissions.
- Draw over (overlay) other apps. Must be enabled manually on each device.
- Accessibility Service. Must be enabled manually on each device.
The Locker app will prompt for these device settings/permissions during registration.
Configure an Emergency Unlock PIN
What happens when someone accidentally unplugged a cable, or the network is offline? At some point you may need to unlock a device when GroundControl is not available. The Imprivata Locker app includes a feature to unlock phones in case of emergencies. Unlock PIN is an optional feature and is not a requirement.
The Unlock PIN is configured via AppConfig in your MDM server.
- PIN entry requires no GroundControl access and no network access to unlock the device.
- The Unlock PIN may be any number between 4 and 8 digits.
- You may change the Unlock PIN as often as you like.
- You may assign different Unlock PINs to different groups of devices, using AppConfig features on your MDM server.
Once set up, unlocking a phone is easy.
- Unplug one of the locked devices from USB.
- Tap the padlock icon to display the numeric keypad.
- Enter the Unlock PIN.
iOS Example
Android Example
When the device has been unlocked in this way, GroundControl records the device was “Unlocked by PIN,” but does not know the identity of the user.
Like passwords, we recommend that you change the Unlock PIN regularly.
On successful unlock, GroundControl can automate a Workflow. The automation must use the trigger Unlocked via PIN Unlock, and the Workflow uses the Workflow model “Over the Air.”
AppConfig Options
Like any well-mannered app, Imprivata Locker supports AppConfig.
Next:
