Displaying device assets

Go to the Device & Users > Devices page to display the devices being managed by Ivanti. The following information displays for each device, by default. The columns are configurable.

Table 15.  Device Assets fields
Name Description

Display Name

Displays the full name of the user registered with this phone.

Current Phone Number

Displays the phone number.

Model

Displays the make and model of the device.

For iOS: If you have MDM for iOS enabled and the View MDM Alerts option selected under Settings > System Settings > iOS > MDM, then entries for iOS devices that need attention will include alert icons. See “Alerts displayed in the Devices page for information on alerts and what they mean.

Manufacturer

Displays the name of the company that manufactures the device.

Platform Name

Displays the operating system running on the phone as reported by the Ivanti client running on the phone.

Home Country Name

Displays the home country for the device.

Status

Displays the state for each device:

  • Pending means that the user’s device has been registered on the Ivanti Server, but the Ivanti Client download has not yet been completed.
  • Verified means that the user has confirmed that the download of the Ivanti Client should proceed.
  • Active means that the Ivanti Client has been successfully downloaded and connected back to Ivanti at least once.
  • Lost means that this phone has been manually marked as Lost. This status does not affect other functionality.
  • Wiped means that the phone has been restored to factory defaults.

Registration Date

Date the device registered.

Last Check-In

Displays the elapsed time since the device was able to update profiles and configurations from Ivanti.

Owner

Displays whether the device is owned by the company or employee.

Operator

Displays the name of the service provider specified when the phone was registered with Ivanti.

Configuring the Devices page display

You can determine what information displays in the Devices page, such as IP address and battery level.

The selected columns are only retained from session to session for the same user who is using the same browser. In all other situations, the columns displayed on the Devices page revert to the default columns.

Procedure 

  1. In the Admin Portal, go to Devices & Users > Devices.
  2. Click the gear icon at the right of the Devices page.
  3. Check and uncheck boxes to select the device information to display on the Devices page. The information types are listed in Device Page Fields . For example, uncheck Display Name to remove that column, or check Battery Level to add that column. The columns are added and removed from the page as you check and remove checks from the list. The columns are displayed on the Devices page in the order listed beneath the gear icon.

Devices page information types

Use the information in the following table as you set up the Devices page.

Table 16.  Device Page Fields
Information Type Description

Display Name

Optional device user name (displayed by default).

Current Phone Number

Current device phone number (displayed by default).

Model

Device model (displayed by default).

Manufacturer

Device manufacturer (displayed by default).

Platform Name

Device platform name (displayed by default).

Home Country Name

Device home country (displayed by default).

Status

Device status, for example, Active (displayed by default).

Registration Date

Date device registered with Ivanti (displayed by default).

Last Check-in

Time of last device check-in (displayed by default).

Anti-Phishing native status

Indicates the status of the anti-phishing policy on the device.

Anti-Phishing VPN status

Indicates the status of the local phishing VPN.

Connected

Lists whether device is currently connected (applies to Android “always connected” devices only).

Owner

Device owner (displayed by default).

Operator

Carrier device uses (displayed by default).

Language

Language device uses.

Email Address

Device email address.

Battery Level

Device power level.

Client Name

The Ivanti client the device uses.

Client Version

Version of the client the device uses.

Data Protection

Displays whether data protection is set or not for the device.

Data Roaming Enabled

Displays whether data roaming is enabled or not for the device.

Device Admin Enabled

List whether device administrator privilege is enabled.

Device is Compromised

Indicates whether the device has been compromised.

Device Locale

Lists the device locale.

Device UUID

The device UUID.

Ethernet

Lists the Ethernet MAC.

IMEI

Lists the IMEI value.

IMSI

Lists the IMSI value.

IP Address

IP address of the device.

iPhone ICCID

Lists the integrated circuit card identifier (ICCID) for the iPhone or iPad device, which is an international identifier for the SIM.

iPhone MAC Address

Lists the MAC address for an iPhone device.

iPhone UDID

Lists the Unique Device Identifier for the Apple device.

iPhone Version

Lists the version of an iPhone.

Device Name

Name assigned the device.

OS Version

OS version the device uses.

Apple Education role

Indicates whether the device has an Apple School Manager role applied to it, specifically Teacher or Student.

Apple Education enabled

Indicates whether Apple Education is enabled on the device, meaning Apple School Manager.

Alerts displayed in the Devices page

The Devices page alert icons table describes the alerts that may be displayed in the Device & Users > Devices page (Device column) for devices. These alert icons apply to Android and iOS devices only.

Table 17.  Devices page alert icons
Alert Icon Alert Name Description Action

Data Protection Disabled (iOS only)

iOS Multitasking is Disabled

 

Data Protection:

One of the following MDM-mandated security requirements is not being met:

  • Passcode is not set
  • Encryption is not fully enabled

Multitasking:

The multitasking feature for iOS is not enabled, most likely because Location Services has not been enabled on the device.

Display the tooltip for the alert icon.

For tooltip Passcode Required, inform the user that MDM mandates setting a passcode on the device.

For tooltip Restore Required, inform the user that the device must undergo a complete restore after upgrade to fully enable encryption features.

For tooltip iOS Multitasking is Disabled, confirm that Location Services is enabled on the device. On the device, enable location services for [email protected] by selecting Settings > Privacy > Location Services > Ivanti.

Unlocked Device

The OS has been compromised.

If the device connects to email via ActiveSync, then block it using the Block feature in the ActiveSync Association page.

Inform the user that the device must be restored.

App Control Violation

An app control rule has been violated.

Expand the device’s Device Details panel to see specific information on the violation. See the Ivanti EPMM [email protected] Guide.

Quarantined (iOS only)

Configurations have been removed from the device due to a security violation.

For more information, see “Viewing quarantine information” in the Ivanti EPMM Device Management Guide for iOS and macOS devices

Device Administrator Not Activated (Android)

MDM Profile Removed (iOS)

 

Device Administrator Not Activated:

The device administrator privilege is not activated for the Ivanti app or the Samsung DM Agent. The device administrator privilege is required for most of the device management features that Ivanti provides. For more information on the Samsung DM Agent, see “Uninstalling the Samsung DM Agent” in the Ivanti EPMM Device Management Guide for Android and Android Enterprise devices

MDM Profile Removed:

The MDM profile has been removed from the device. An MDM profile is required for the Ivanti app on iOS to operate with full functionality.

If the device connects to email via ActiveSync, then block it using the Block feature in the ActiveSync Association page.

Inform the user that the privilege must be restored.

Displaying more device and user information

Detailed information about each device is available on the Device & Users > Devices page. To expand the device details panel, find the device in the table, and click the caret next to the check box. The device details panel expands immediately below the row. You can have multiple device detail panels open at once.

To close device details, click the X in the top right of the panel, or click the caret next to the check box.

When you expand the device details panel, the following displays on the left-hand side:

  • Health Attestation (Windows only)
  • Location Data (Windows only)
  • A link to View Logs for the Device
  • A link to Push/Remove Profiles (if applicable)
  • A link to Software Version Update
  • User name
  • User email
  • Image of the device
  • Phone number (if applicable)
  • Device model
  • OS version
  • Device capacity
  • Status
  • Last check-in time
  • Registration date
  • Operator
  • Country name
  • Device Space

The categories and information available on the right side of the Device Details panel are shown in the following table:

Table 18.  Device Details panel
Category Information Available

Device Details

Device-specific details received from the device. For more information, see “Valid search fields” in the Ivanti EPMM V2 API Guide.

Policies

Status of policy distribution.

Labels

Labels applied to this device.

Logs

Click the links to view the logs. For iOS devices, you can only view logs if MDM is enabled.

  • Certificate Inventory
  • Profile Inventory
  • Provisioning Profile Inventory
  • Managed Apps Inventory
  • MDM Log (Android and iOS)

Apps

List of apps that are installed on the device.

iBooks

List of iBooks that are present on the device (iOS only).

Configurations

Status of configurations distribution, e.g., Exchange, VPN, etc.

Compliance

App control rule violations or Compliance Policy violations, if any, appear here.

Custom Attributes

Names of custom attributes assigned to the device. You can assign custom attributes to users or devices to associate additional properties with these objects. These properties can then be used to build groups or distribute configurations.

Restrictions

List of restrictions applied to the device.

Comments

Added by an Ivanti administrator to record information about this device

For Android devices:

  • For information about details displayed relating to AppConnect for Android, see the AppConnect Guide for EPMM.

For Windows 8.1 Phone devices:
In addition, the following information is also displayed for dual SIM phones:

  • IMEI2
  • IMSI2
  • Roaming2

Adding a comment to device details

The Comments tab in the device details panel enables you to add brief text to the device record.

Procedure 

  1. Click the Comments tab.
  2. Enter the text.
  3. Click Submit to save your changes, or Cancel to revert to the original comment.
  4. The comment pane displays the date and time the comment was created or modified.

Displaying log data for a selected device

You can view log data for a particular device.

Procedure 

  1. From the Admin Portal, go to Device & Users > Devices.
  2. Expand the device details panel by clicking the up arrow next to the check box.
  3. Click the View Logs for Device link, found at the top left of the Device Details panel.