Getting started with Mobile Guardian is quick and easy but does require some simple pre-planning in order to allow you to start managing your devices.
- Key Questions
What operating systems are you onboarding?
Please take a look at OS-specific sections below.
Do you operate a Global Proxy?
If so, this information must be configured in the BASELINE profile within your Mobile Guardian Dashboard. It is essential to add this information (and any required certificates) in BEFORE onboarding your devices to allow them to communicate with your network.
- Network Pre-requisites
- An 802.11 wireless network that is open or using a Pre-Shared Key (PSK)
- Ports that need to be open for registration. 80, 443
- For Apple devices: https://support.apple.com/en-us/HT203609 but essentially TCP ports 5223, 2195, 2196, 443 (5223 and 443 for enroll and control. Rest of are for MDM servers).
- For Android and Chrome: Outbound TCP connections on ports 5228-5230
- Schools utilizing SSL-inspecting proxies will need to add a temporary network without SSL interception in order to configure tablets.
- Schools need to ensuring consistent connectivity and sufficient bandwidth is available for any initial deployment of apps
3.2 OS-Specific Areas
Are you enrolled in DEP (Device Enrollment Program)?
- If so, then need to set up to point to Mobile Guardian
- If not in DEP, access to Apple Configurator 2 (and mac to run it on)
Do you have a VPP (Volume Purchase Program) account?
- If so, log into your account at https://volume.itunes.apple.com/ and download the token.
- If not then ensure you have the details of the AppleID used to purchase apps
If you are onboarding more than 10 devices, then you will need to make use of the Apple Push Notification Service. Ensure you have a school controlled AppleID that can be used for this.
For managing Android devices, the following will be needed or need to be considered.
- A Google Account to download the Mobile Guardian Manage Application from the Play Store.
- An 802.11 wireless network that is open or using a Pre-Shared Key (PSK) and compatible with your tablets/phones
- Access to these domains:
Note: Specific applications may have additional requirements.
For managing Chromebooks, the following will be needed or need to be considered.
- Google Apps for Education for your domain
- A unique Google Apps for Education account for each tablet
- An 802.11 wireless network that is open or using a Pre-Shared Key (PSK) and compatible with your tablets
- Access to these domains:
- Google Provisioning API, enabled in the Google Admin console. (For information, see Administrative APIs in the Google Apps Administration Help Center.)