Obtaining the App
GroundControl locks devices using a Custom B2B App, which is distributed through Apple’s iTunes VPP program. There is no charge for the GroundControl Locker app.
To obtain the app, please email firstname.lastname@example.org with the following information:
- Your organization’s DEP ID
- Exact organization name as it appears in Apple Business Manager
Also make sure Custom Apps are enabled for your organization within Apple Business Manager. It may take 1-2 days for the app to appear in your list of Custom Apps.
After the app shows within ABM, your ABM administrator must “purchase” (for free) a number of copies of the app. It does not matter how many copies are purchased, but it should be sufficient to cover the quantity of devices you have. Go ahead, get 10,000.
After purchase, the app will appear within your MDM alongside other VPP apps. Configure your MDM to automatically deploy your apps to the appropriate group of devices on enrollment. Please ensure the Imprivata Locker app is allowed through your MDM profiles and it’s not hidden or uninstalled during Check In or Check Out workflows.
Locker App Details
Imprivata Locker 3.x
- App ID: com.imprivata.b2b.locker
- External ID: 1569836501
- App Icon:
GroundControl Locker 2.0+ will be supported through 2021, you must migrate to Locker 3 before then. Instructions on how to migrate can be found in this article.
Configure an Emergency Unlock PIN
When happens when someone accidentally unplugged a cable, or the network is offline? At some point you may need to unlock an iPhone when GroundControl is not available. The Imprivata Locker app includes a “Back Door” feature to unlock phones in case of emergencies. Unlock PIN is an optional feature and is not a requirement.
The Unlock PIN is configured via AppConfig in your MDM server.
- PIN entry requires no GroundControl access and no network access to unlock the device.
- The Unlock PIN may be any number between 4 and 8 digits.
- You may change the Unlock PIN as often as you like.
- You may assign different Unlock PINs to different groups of devices, using AppConfig features on your MDM server.
Once set up, unlocking a phone is easy.
- Unplug one of the locked iPhones from USB.
- Tap the padlock icon to display the numeric keypad.
- Enter the Unlock PIN.
When the device has been unlocked in this way, GroundControl records the device was “Unlocked by PIN,” but does not know the identity of the user.
Like passwords, we recommend that you change the Unlock PIN regularly.
Like any well-mannered app, GroundControl Locker supports AppConfig. Below are available settings. Most users will leave these at the default settings, except for Unlock PIN.
|UnlockPIN||string||(none)||Sets the emergency Unlock PIN|
|AllowManualLock||boolean||false||Allows you to tap on the padlock icon to lock the device.|
|InterappPreDelay||integer (may also be referred to as a number)||3||Seconds to wait after receiving a Lock command and before starting any logout routines.|
|InterappPostDelay||integer (may also be referred to as a number)||0||Seconds to wait after finishing the interapp API routine and before entering Single App Mode.|
|MaxInterappAttempts||integer (may also be referred to as a number)||8||Number of retries before attempting app logout during interapp API routine|
|ActiveBrightness||integer (may also be referred to as a number)||100||0-100. Screen brightness when GC Locker app is woken up.|