There's a new home for Articles. Find Articles on Our Product Support Page.
Hi Everyone, I have several customers with fresh new On-Premise installation which are unable to use MobiControl properly. Everyone of them is on 2024.1.0It doesn't matter if it's Android Enterprise or Android Classic. Every device stucks on the profile installation "Pending Install" Older devices do not react to an Agent Update. With one customer I have the issue like a month ago already. Support told me that a new MobiControl Agent release would fix this but it didn't.Another customer has this issue since yesterday. The day before everything was working fine and they didn't changed anything on the system environment. Is somebody here which is expieriencing the same behaviour on their environment? I don't have this issue in my cloud instances.
MobiControl v15.2.5.1027, Zebra TC52x A10 -- new configuration to avoid application updates from Google Play Store. Profile details state all devices are pending installation, even after one week of reboots, and hard resets. Please advise. Thanks, all.
Hello, we have some Zebra devices (TC57, TC57X, TC58) with Android 10 and Android 13 that when you use the remote control, do not appear any notification to de user. But recently we have deployed a TC27 Android 13 device that allways show notification of remote control. Is ther any way to avoid it?
Hello I have terminals that lose time while the syncrho is well activated In the logs I can see Inaccurate device date-time detected while the PDA just after being connected Do you have an idea? Manufacturer Urovo Model DT50 Agent Version 2024.1.4.1149 Cloud Serveur : Version: 2024.0.1.1020
Hi All,I have 2300 Zebra devices made up of TC56 and TC57 devices. I would like to clear all the active notifications that are open on the devices. Is there a script for this? All devices are fully up to date. Version: 15.6.6.1010Thanks
We are currently using version 15.6.5.1018. When I start a remote session on an Android 11 device, I cannot insert text into a field on the device. I was under the impression that this was possible in earlier versions. Does anyone know if this is an Android restriction or is this no longer supported by SOTI MC?
Hey guys,since yesterday night, we have the problem, that the "Soti Mobi Control mangement service" and "search service" don't start anymore.We are using Soti Mobicontrol 15.6 and Windows Server 2016when i try to start the managment service ive got this error in the managment logs: [2024-07-21 08:16:53.479] INFO [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (32): Started heartbeat monitor.[2024-07-21 08:16:53.501] INFO [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (23): Comm.Client.65103039: Server sotitest.ernsting.de has been authenticated. Chipher: Aes256/256[2024-07-21 08:16:53.502] INFO [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (23): Comm.Client.65103039: Connected to [fe80::72ee:5eb2:9616:96d6%14]:5494[2024-07-21 08:16:53.515] INFO [Signal] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (32): LocalCTEngine[2024-07-21 08:16:53.520] INFO [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (40): New worker started[2024-07-21 08:16:53.580] INFO [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (40): Soti.Comm.Protocol.CommClient: Processing message: "ServerStatusMsg":{},"ServerStatusMsg":{"ServerStatus":1,"ServerTime":"21.07.2024 08:16:53","ServerId":3,"OnlineDeviceCount":15,"WorkerThreadCount":4,"QueueLength":0,"SelectedSystemTick":0,},"Message":{"TimeStamp":"21.07.2024 06:16:53",}[2024-07-21 08:16:53.587] INFO [DeploymentServer] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (40): Deployment Server '3' status changed to 'Started'.[2024-07-21 08:16:53.650] ERROR [ManagementService] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (18): Unable to check Elasticsearch status, Failed to ping the specified node.. Call: Status code unknown from: HEAD /[2024-07-21 08:16:53.721] ERROR [ManagementService] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (18): ********************************************************************* Exception: Failed to create perfmetrics index for ElasticSearch. *********************************************************************[ElasticSearchException: Failed to ping the specified node.. Call: Status code unknown from: HEAD /] bei Soti.Integration.ElasticSearch.Implementation.ElasticSearchClient.LogResponseAndCheckForErrors(IApiCallDetails apiCallDetails, Exception originalException, ServerError responseServerError) bei Soti.Integration.ElasticSearch.Implementation.ElasticSearchClient.IndexExists(String indexName) bei Soti.MobiControl.Search.Implementation.ElasticSearchClientWithMonitor.IndexExists(String indexName) bei Soti.MobiControl.Search.Implementation.MetricSearchInfoManager.CreateIndex(Boolean recreate) { [ElasticsearchClientException: Failed to ping the specified node.. Call: Status code unknown from: HEAD /] } { [PipelineException: Failed to ping the specified node.] bei Elasticsearch.Net.RequestPipeline.Ping(Node node) bei Elasticsearch.Net.Transport`1.Ping(IRequestPipeline pipeline, Node node) bei Elasticsearch.Net.Transport`1.Request[TResponse](HttpMethod method, String path, PostData data, IRequestParameters requestParameters) } { [PipelineException: An error occurred trying to read the response from the specified node.] bei Elasticsearch.Net.RequestPipeline.Ping(Node node) } { [WebException: Die Verbindung mit dem Remoteserver kann nicht hergestellt werden.] bei System.Net.HttpWebRequest.GetResponse() bei Elasticsearch.Net.HttpWebRequestConnection.Request[TResponse](RequestData requestData) } { [SocketException: Es konnte keine Verbindung hergestellt werden, da der Zielcomputer die Verbindung verweigerte 172.xx.xxx.x:9200] (I replace the ip with "x") bei System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress) bei System.Net.ServicePoint.ConnectSocketInternal(Boolean connectFailure, Socket s4, Socket s6, Socket& socket, IPAddress& address, ConnectSocketState state, IAsyncResult asyncResult, Exception& exception) } ******************************************************************** [2024-07-21 08:16:54.001] INFO [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (4): Starting connection to NetMQ at tcp://127.0.0.1:8540[2024-07-21 08:16:54.079] INFO [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (4): WebAPI Global Host: Host started at: https://+/mobicontrol[2024-07-21 08:16:54.079] INFO [General] [a238d623-5889-4654-82d9-bb64fa8b2a1b] (4): WebAPI Global Host: Starting hostable WebApi controllers ... doneThis error shows the Windowsprotocoll:Name der fehlerhaften Anwendung: Soti.MobiControl.ManagementService.Host.exe, Version: 15.6.5.15, Zeitstempel: 0x64d3c4adName des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.17763.6054, Zeitstempel: 0xc9a93043Ausnahmecode: 0xe0434352Fehleroffset: 0x0000000000041b39ID des fehlerhaften Prozesses: 0xe8cStartzeit der fehlerhaften Anwendung: 0x01dadb358c646cd0Pfad der fehlerhaften Anwendung: C:\Program Files\SOTI\MobiControl\Soti.MobiControl.ManagementService.Host.exePfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dllBerichtskennung: 844ebd87-09de-477e-b0b0-2e4e499ae25cIve checked the Firewall, but there is no blocked. We have 2 Servers, 1 Prod and 1 test and the 2 Server get the same problems yesterday.Has anyone an idea?
Hello SOTI team, I would like to stage an iPhone to only display a webclip on the device The problem is by using application restrictions (White List) it removes all but the settings and phone icon. My goal is to find a way to remove those icons from the phone by using SOTI. I tried creating a blacklist to specify com.apple.Preferences and com.apple.mobilephone but it will fail to install. Will I need to use an XML script to accomplish this? If so could some one help point me in the right direction for what options or ideas they have? Single App mode is not an option because I would like to add more webclips later. 07/30-Thanks Kindly for suggestions but Single App mode is not an option as the root goal would be to lockdown the phones similar to Android. I realize this may not be possible but my ideal situation would be to create a homescreen without the Phone and Settings icons. I think my only best solution is to drop those two icons in a folder on page 2. I believe we are facing limitations of what iOS 17 can do. I hope with iOS18 we will be able to hide those two icons and prevent user from being able to swipe right or left on homescreen. I did experiment with Custom Profiles but if you try to blacklist the Preferences and MobilePhone bundles using XML it will fail also. The official Apple documentaton does specify that you cant do that for those two Bundles so I think this may be out of SOTIs control. Thanks again!
Hello, I am sure this is a setting I am missing somewhere but currently no one can sign into any accounts on the Chrome mobile app and many of our apps load up the default browser to sign in to accounts. If I manually change the default browser to Samsungs browser I am able to sign in. All login's on chrome the sign in button is greyed out.
Hi all We have Samsung Devices in the field that battery drain is a concern with, namely the new Samsung Galaxy Tab Active 5 SM-X306B (Android 14) that we think would benefit from the battery optimisations menu being accessible. Currently in order to stop end users from accessing their file storage directories on the tablet we are having to blacklist the Device Care service/app so that when they click it they are warned that there is no app that can be opened to access it, as they can access their file storage from that app. On older devices, the Device Care and Battery Optimisation sections were combined into the Device Care app, on the Tab Active 5, there is a separate menu entry in settings for the Battery usage and Optimisations but this is still tied to Device Care. So if we blacklist Device Care, clicking Battery Optimisations also becomes blacklisted and not accessible. As a result of the blacklist, I suspect that Samsung is unable to optimise apps battery usage effectively because its blocked from operating making the battery drain much faster than intended. Is there anyway to block the user accessing Device Care but allow it to continue running in the background by removing it from the blacklist? Using Soti Settings Manager is not an option for us unfortunately as a workaround. We are currently using classic enrolment (please no discussions why). Soti Agent is Android Classic, 2024.1.0.1149 Soti Mobicontrol server: 2024.1.0.1052 Thanks
Hi All,I have roughly 700 Samsung A14 devices running on Android 13 TP1A.220624.014.A146PXXS5BWK1Mobi Version: 15.6.6.1010We need to turn off "Lock instantly with side key" on our devices. Does anyone have a script that would do this?Cheers
hi soti support i have case with sentintent mysystem agent version MobiControl net.soti.mobicontrol.elm.samsung15.1.0 Build 1045 server servion soti 15.3 os version 8.0.0 Brand samsung this script sendintent -b "intent:#Intent;action=soti.imei.ACTION;S.imei=%IMEI%;component=bundle.id.app/.MyReceiver;end;" script success but imei do not broadcast into application
Hello, I am using the REST API to create a Certificate Authority in MobiControl. I have successfully called the APIs to create the CA (adcsHttps), add the root certificate (adcsRootCertificate) and add the template information (certificateTemplates). The final piece to complete this for me is to add the enrollment certificate to the CA. This is done using adcsEnrollmentCertificate. I have followed the documentation and formatted the request exactly as required, however I keep receiving an Internal Server Error (500). Can anyone offer me some advice on how to debug this? I have made sure the certificate pfx file does not contain and certificate chains (this is a requirement). And the Certificate Authority created in MobiControl from this script will allow me to manually load the enrollment certificate pfx after the script is run (so I'm pretty confident its not the format of the PFX file). Here is a snippet of my code (Powershell): $EnrollmentCertificatePath = "C:\Test\enrollment.pfx" $RootCertificatePath = "C:\Test\rootca.der" $EOL = "`r`n" # # Create Certificate Authority # $AuthHeader = @{} $AuthHeader["Authorization"] = "Bearer <AuthToken>" try { $CreateCABody = @{} $CreateCABody["ReferenceId"]=$null $CreateCABody["Name"]="MY NEW CA" $CreateCABody["CertificationAuthorityType"]="AdcsPkiHttps" $CreateCABody["PolicyServiceUrl"]="https://cesserver.com/ADPolicyProvider_CEP_UsernamePassword/service.svc/CEP" $CreateCABody["EnrolmentServiceUrl"]="https://cesserver.com/CESSERVER_CES_UsernamePassword/service.svc/CES" $CreateCABody["RootCertificateInfo"]=$null $CreateCABody["EnrolmentCertificateInfo"]=$null $CreateCABody["AuthenticationType"]="UserNamePassword" $CreateCABody["CertificateInfo"]=$null $CreateCABody["UserName"]="cesuser" $CreateCABody["Password"]="password" $CreateCABody["CloudLinkAgentName"]=$null $CreateCABodyJson = $CreateCABody | ConvertTo-Json $adcsHttps = "https://mobicontrol-server/MobiControl/api/certificateManagement/certificationAuthorities/adcsHttps" $result = Invoke-restmethod -Uri $adcsHttps -ContentType "application/json" -Method POST -Headers $AuthHeader -body $CreateCABodyJson $ReferenceId = $result.ReferenceId Write-Host "Success: New CA created - Reference ID: $ReferenceId" } catch { $_.Exception.Message exit -2 } # # Set the root CA certificate for the new CA # $Base64EncodedRootCaFile = [Convert]::ToBase64String([IO.File]::ReadAllBytes($RootCertificatePath)) Write-Host "Extracted root CA file contents (base64) - Reference ID: $Base64EncodedRootCaFile" $CerFilename = 'rootca.cer' $AdcsRootCertBody = $EOL + "--mc_boundary" + $EOL $AdcsRootCertBody += "Content-Type: application/pkix-cert+json" + $EOL $AdcsRootCertBody += "{ `"filename`": `"" + $CerFilename + "`" }" + $EOL + $EOL + $EOL $AdcsRootCertBody += "--mc_boundary" + $EOL $AdcsRootCertBody += "Content-Type: application/pkix-cert" + $EOL $AdcsRootCertBody += "Content-Transfer-Encoding: base64" + $EOL $AdcsRootCertBody += "Content-Disposition: attachment; filename=`"" + $CerFilename + "`"" + $EOL + $EOL $AdcsRootCertBody += $Base64EncodedRootCaFile + $EOL + $EOL + $EOL $AdcsRootCertBody = $AdcsRootCertBody + "--mc_boundary--" + $EOL try { Write-Host "Body for AdcsRootCert is:" Write-Host $AdcsRootCertBody Write-Host "..." $adcsRootCertificate = "https://mobicontrol-server/MobiControl/api/certificateManagement/certificationAuthorities/$ReferenceId/adcsRootCertificate" $result = Invoke-restmethod -Uri $adcsRootCertificate -ContentType "multipart/related; boundary=mc_boundary" -Method POST -Headers $AuthHeader -body $AdcsRootCertBody Write-Host "Success!" } catch { $_.Exception.Message exit -3 } try { $TemplateBody = @{} $TemplateBody["Name"]="User Template" $TemplateBody["CertificationAuthorityReferenceId"]="$ReferenceId" $TemplateBody["CertificationAuthorityTemplateName"]="UserTemplate" $TemplateBody["CertificateTarget"]="Device" $TemplateBody["SubjectTemplate"]="CN=test" $TemplateBody["AlternativeSubjectTemplate"]=$null $TemplateBody["KeySize"]=2048 $TemplateBody["ShouldRemoveAfterRenewal"]=$true $TemplateBody["UseAutoRenewal"]=$true $TemplateBody["NumberOfDaysForAutoRenewal"]=60 $TemplateBody["PreservePrivateKey"]=$true $TemplateBody["Disabled"]=$false $TemplateBody["PublishToLdap"]=$false $TemplateBody["KeyProtection"]="Protected" $TemplateBody["HashAlgorithm"]="Sha1" $TemplateBody["ValuePeriod"]="Days" $TemplateBody["ValuePeriodUnits"]=0 $TemplateBody["RequireUserAuthentication"]=$false $TemplateBodyJson = $TemplateBody | ConvertTo-Json $certificateTemplates = "https://mobicontrol-server/MobiControl/api/certificateManagement/certificationAuthorities/$ReferenceId/certificateTemplates" $result = Invoke-restmethod -Uri $certificateTemplates -ContentType "application/json" -Method POST -Headers $AuthHeader -body $TemplateBodyJson } catch { $_.Exception.Message exit -5 } # # Set the enrollment certificate for the new CA # $Base64EncodedEnrollmentCertFile = [Convert]::ToBase64String([IO.File]::ReadAllBytes($EnrollmentCertificatePath)) $AdcsEnrollmentCertificateBody = "--mc_boundary" + $EOL $AdcsEnrollmentCertificateBody += "Content-Type: application/x-pkcs12.metadata+json" + $EOL $AdcsEnrollmentCertificateBody += "{`"filename`": `"enrollment.pfx`", `"password`": `"mypassword`"}" + $EOL + $EOL + $EOL $AdcsEnrollmentCertificateBody += "--mc_boundary" + $EOL $AdcsEnrollmentCertificateBody += "Content-Type: application/x-pkcs12" + $EOL $AdcsEnrollmentCertificateBody += "Content-Transfer-Encoding: base64" + $EOL $AdcsEnrollmentCertificateBody += "Content-Disposition: attachment; filename=`"enrollment.pfx`"" + $EOL $AdcsEnrollmentCertificateBody += $Base64EncodedEnrollmentCertFile + $EOL + $EOL + $EOL $AdcsEnrollmentCertificateBody += "--mc_boundary--" try { Write-Host "Body for adcsEnrollmentCertificate is:" Write-Host $AdcsEnrollmentCertificateBody Write-Host "..." $adcsEnrollmentCertificate = "https://mobicontrol-server/MobiControl/api/certificateManagement/certificationAuthorities/$ReferenceId/adcsEnrollmentCertificate" Write-Host "Posting: $adcsEnrollmentCertificate" $result = Invoke-restmethod -Uri $adcsEnrollmentCertificate -ContentType "multipart/related; boundary=mc_boundary" -Method POST -Headers $AuthHeader -body $AdcsEnrollmentCertificateBody Write-Host "Success!" } catch { # THIS IS WHERE WE END UP WITH AN INTERNAL SERVER ERROR (500) Write-Host "Failed to import the PFX file. Ensure the password is correct and that the PFX file does NOT contain CA certificates" $_.Exception } Thanks! Andy
We are trying to move away from Clasic Enrolment (where we have to side-load all the application via Profile / Package) to a more robust deployment (via Enterprise Google Play Store). I've managed to create the binding between the MDM and Google Play Store and get any application available in Google Play Store to get installed on the Work Profile (we are using COPE- Corporate - Personal Enrolment method). I was also able to upload a custom Android application via the same method. The issue surfaced when I've try to upgrade the custom application to a new version. When attempt to edit the custom application and load the new apk, I am getting Cannot update a published APK.
Hi, Is it possible to turn off Android Fully Managed device in Single App User mode from device side? How?
Top-tier experts who are delivering outstanding content. Should have more than 7000 points.
Experts who are consistent with great content. Should have more than 1000 points.
Highly experienced members with valuable inputs. Should have more than 700 points.
Beginners taking the initiative. Should have more than 500 points.
New contributors starting their journey. Should have more than 250 points.