Mobicontrol offline instance and Android

Hello,

I'd like to use Mobicontrol 2024 in a closed network and thus doesn't need of all Soti's online services.

I've made tests on a local Server, but seems to be difficult to register any Android.

Is there somewhere a doc that explains what can and can't be done, or maybe your own experience in those case.

thanks a lot.

a year ago
SOTI MobiControl
ANSWERS
MD
Matt Dermody Diamond Contributor
a year ago

It is very difficult to implement a truly "offline" Android management strategy today. Many of the enrollment methods are dependent on Google Play services so you would immediately eliminate most options for enrollment right off the bat by trying to be offline. DPC Identifier (afw#mobicontrol), ZTE, and QR based staging all download the latest agent from the Play Store by default. If you don't have access to the Play Store on the staging network you can't even perform that step. You'd either have to use a specific network just for staging or use a modified staging process such as using StageNow for Zebra devices. The ability to use an alternate method will be very much dependent on the manufacturer of your devices and whether that manufacturer provides a staging tool. There are some other ways of customizing the QR method to download the agent from an alternate location but you are getting into more complex territory at that point. 

And that's just staging and enrollment. Beyond that the devices generally need some level of connection to a lot of the various Play Services to function. For example if your application that you're intending to run on the devices is a hybrid web app with a WebView dependency then you'll likely need long term access to regular System WebView updates which can only come from Play or the manufacturer as firmware updates. The System WebView and other System components cannot be manually updated via sideloading.

PL

Thanks Matt for your quickly answer.

By the way , today i try to connect to an internal server which as just a NetBIOS name, i've made a redirection from public adress of 5494 port to internal server and a public dns entry for my public adress.

As i use the private ip adress as server in my a private network, terminal does not complete the enrollment process

If i use external adress in changing the server to the FDQN external name, i face the same problem.

i think i've missed something somewhere, may i have an idea of what's wrong ? 

MD
Matt Dermody Diamond Contributor
a year ago

Hi Laurent,

I honestly cannot provide any further guidance. I understand the desire but what you're looking to do is a  relatively unsupported and unofficial path so I don't have a lot of recent experience achieving what you're attempting to achieve. Most of the ~200 MC environments I help manage are cloud hosted and devices have access to the various Google Android Enterprise services. It is an unfortunate reality we now live in, at least in my opinion, but Google has made it increasingly difficult to manage Android without some sort of phoning home to the mothership.

But with inserting the download location (provisioning_device_admin_package_download_location) you should be able to enroll devices locally via QR without any internet connection.

We used that in the past (with a quite old Mobicontrol and Android version) but not sure if something has changed that you may need more now as we switched to use Zero-Touch and so on.

RK
Radim Kadlec
a year ago

In my experience, the only fully offline way to enroll an Android device to MobiControl is to install the agent via ADB/USB and then to assign it as Device Owner:

adb install GoogleMobiControl.apk
adb shell dpm set-device-owner net.soti.mobicontrol.androidwork/net.soti.mobicontrol.admin.DeviceAdminAdapter
adb shell monkey -p net.soti.mobicontrol.androidwork 1

C
CKMOD@SOTI
a year ago

Thanks for posting on SOTI Pulse, Thanks Radim, Matt and Rafael
for responding to the post, your expertise and willingness to help are greatly appreciated!
 
Have you had an opportunity to test the suggested solutions by Radim and Rafael and has it successfully addressed your query?
 
If not, or If you have any additional questions or concerns, please don't hesitate to reach out. We're dedicated to providing assistance and support.