Procedure

1. Click Administration → Device Enrollment Settings.
2. Click the Authentication tab.
3. Under section User Authentication, select one of the following:
   • Authenticate using Active Directory—to use the user information from the Active Directory to authenticate users.
   • Authenticate using enrollment key—to use an enrollment key to authenticate users.
     Mobile Security will automatically generate an enrollment key and send it to users in the invitation message.
     • Enrollment key usage limitation—select one of the following:
       • Use for multiple times—select this option to allow users to use the same Enrollment Key when enrolling multiple devices.
       • Use for one time—select this option to prevent users from reusing the Enrollment Key. You will need to send multiple invitations to each user who needs to enroll multiple devices.
     • Enrollment key expires after—select this setting if you want to discontinue using the automatically generated enrollment key after a certain time, and then select the time from the drop-down list.
     • Use preset Enrollment Key—select this setting if you want to manually generate the enrollment key and then click Generate to generate the enrollment key. This enrollment key will not be sent to the user in the invitation message.
     • Enrollment Key expires on—select this setting if you want to discontinue using the manually generated enrollment key on a certain date, and then select the date from the calendar.

   Note Authenticate using Active Directory setting is available in Full Version deployment mode, and Security Scan deployment mode with unlisted MDM vendor only.

4. (Full Version deployment mode only) Under section Device Authentication, select one of the following:
   • Disable this setting—to disable device authentication for mobile devices.
   • Authenticate using IMEI or Wi-Fi MAC address—this setting enables you to upload a list of mobile devices that you want to authenticate.
   1. Click Export allowed device list template to download the template and create the allowed device list.
   2. After you have created the list, click Browse to select and import the list of mobile devices that you created in the previous step.
   3. Click Check Data Format to verify the data format in the allowed devices list. After verification, Mobile Security displays all the mobile devices in the Allowed Devices' Status list.
   4. Select one of the following options:
      • Delete unauthenticated devices—to delete the mobile devices that already exist in the Device Management screen but do not exist in the allowed device list that you import.
      • Display unauthenticated devices in group "Unauthenticated"—to move all the enrolled mobile devices that already exist in the Device Management screen but do not exist in the allowed device list that you import to the group Unauthenticated.

   Note If you use Device Authentication, Mobile Security will regroup all the mobile devices according to the allowed device list that you use.

5. Click Save.