SOTI MobiControl

15.4

·

Build 4737

·

August 25, 2021

Upgrade Considerations

  • SOTI MobiControl now requires a minimum of Java 11. You can choose either Oracle Java 11 or OpenJDK 11. Refer to Online Help for the OpenJDK 11 setup procedure.
  • Upon upgrade, SOTI MobiControl installer automatically rebuilds the search data. As a result, any saved System Health Advanced Analytics charts data will be lost.
  • If you are using an older version of Cloud Link Agent (CLA) (e.g.,1.x,2.x or 3.x), you must upgrade to CLA v4.0. Before upgrading, you must uninstall the older version of CLA. If CLA 4.0 is not set up with MobiControl 15.4.x, any operation or functionality related to LDAP and ADCS will not work. For more information on CLA 4.0 setup, please refer to CLA 4.0 help.

Note:

We strongly recommend following the standard IT change control practices and testing of product upgrades in pre-production environments.

Contact SOTI's Professional Services and Support Team or visit the product documentation for information on proceeding with your upgrade.

Release Highlights

This release includes the following new features:

Dual SHA-1 and SHA-2 Device Support on Deployment Server

You can now manage both legacy Windows CE/Mobile devices (compatible with SHA-1 certificates) and newer Android/iOS/Windows devices (compatible with SHA-256 certificates) on the same Deployment Server. By removing the need to have a dedicated Deployment Server for SHA-1 compatible devices, you now save on operational and maintenance costs.

Android App Update Mode

When configuring an Android application within an App Policy, you can select how often you would like that application to be updated on the device. The following update modes are available:

  • Default Mode – The app is updated when the device is connected to Wi-Fi, is charging, and is not actively used.
  • High Priority Mode – The app is updated as soon as a new version is published to the Google Play Store.
  • Postpone Mode – The app update is postponed for up to 90 days after a new version becomes available.

With the new Android app update mode, you can prioritize critical app updates for the entire fleet, or postpone app updates that require testing before deploying them to devices.

General Improvements

Administrative Console

Users and Permissions Migration

The Users and Permissions page (formerly the Security page) is migrated to the next-generation user interface for a better user experience and overall consistency.

Users and Permissions logs can now be exported to a CSV file for further review and analysis.

App Policy Granular Permissions

You can restrict access to an individual App Policy to specific users and groups. This is an additional layer of access control on top of the App Policy permissions defined in the Users and Permissions page. This is similar to the granular permissions available for Profiles.

Android

App Release Track

When configuring an application within an Android Enterprise App Policy, you can now view all the available versions (i.e., tracks) for an app, such as beta, test, etc. You can pick one of the tracks to deploy to devices.

Authentication Payload – Revert to User Mode

The Android Authentication profile enables you to automatically revert devices to user mode after being in admin mode for a specified amount of time.

The Device Details page shows whether the device is in admin or user mode.

Authentication Payload – Revert to Kiosk Mode

The Android Authentication profile lets you automatically revert devices to Kiosk mode after being in Non-Kiosk mode for a specified amount of time.

The Device Details page shows whether the Android Agent on a device is in Kiosk or Non-Kiosk mode.

Wallpaper Configuration on Android Devices

You can now configure the wallpaper on Home and Lock screens of Android devices using Profiles in the SOTI MobiControl console.

Android Enterprise

Enterprise Application Deployment

You can deploy in-house or enterprise apps outside of the Google Play Store to your Android Enterprise devices through App Policies in the SOTI MobiControl console.

Personal Play Store on Corporate Personal Devices

Whitelisting/blacklisting enables you to control available applications in the Personal Play Store for Android 11+ Corporate Personal devices.

Work Compliance for Corporate Personal Devices

You can limit how long the Work Profile may be disabled on an Android 11+ corporate personal device. Once the time limit is reached, personal apps for end users are disabled until they re-enable their Work Profile.

COPE Feature Control Enhancement

The use of camera and screen capture functions can now be blocked on Android 11 corporate personal devices.

iOS – App Update Management

Automatic update of App Store and Custom Apps on iOS 11+ devices now leverage the application’s version identifier.

macOS – Content Library

SOTI MobiControl now supports Content Library for macOS devices, enabling file sharing with enrolled macOS devices.

Windows – Assigned Access Improvements

In Assigned Access mode, you can now choose to provide users with access to specific folders, such as "Downloads," or to all folders on Windows machines. This provides the ability to create new files or access existing ones, which was not possible until now.

SOTI Surf

You can now preview files before downloading them to Android devices.

SOTI Hub

The SOTI Hub interface now has a modern user interface.

Mandatory content for an iOS device can now be synchronized to that device, even when SOTI Hub is not running in the foreground.

You can now allow or prevent file uploads and edits in a WebDAV repository.

The Enterprise Resource Gateway (ERG) installer is now redesigned to simplify the installation process.

Settings Manager

The Settings Manager now has a modern user interface.

You can allow or disallow management of Wi-Fi network settings.

Support for Cloud Link Agent High Availability Deployments

To ensure business continuity and maintain operational efficiency, you can now set two or more CLAs to handle large numbers of requests to access on-premise active directory and ADCS resources.

These additional CLAs will improve performance by load balancing the requests and ensuring all requests are handled, even when one CLA is down.

Microsoft SQL Server 2019

Support for Microsoft SQL Server 2019.

APIs

The following new REST APIs are included in this release:

  • Agents and Plugins
    • List Android Agents for a given manufacturer
    • List manufacturers of Android Agents
    • Initiate download of a specific Android Agent from the SOTI Agent Delivery service to SOTI MobiControl
    • Cancel in-progress downloads of Android plugins
    • Get Agent compatibility information from the SOTI Agent Delivery service
    • Update compatibility information for the downloaded Agent
  • Managed Google Play
    • Retrieve approved applications for a Managed Google Play binding
    • Execute an action on a Managed Google Play binding
    • Update Application Enrollment Token (.AETX)
    • Delete Enterprise Application Token (.AETX)
  • Branding
    • Manage branding images – list, update, and delete
  • Android Configuration
    • Retrieve and update a deployment type for Android devices
    • Retrieve and update a Samsung ELM configuration
  • Device Script Execution Status (Linux)
    • Get total success and failure count for script executions
    • Retrieve all script execution records for a device
    • Request a device to send output of a script execution to SOTI MobiControl
    • Retrieve stored script execution outputs from SOTI MobiControl
  • Devices
    • Manage device action scripts – list, create, update, and delete
  • Locate Timeout
    • Get the Device Locate timeout value
    • Update the Device Locate timeout value
  • Directories
    • Manage Azure directories – list, create, update, and delete
    • Manage LDAP directories – list, create, update, and delete
  • Security
    • Configure access policies for SOTI MobiControl local account users
    • Manage roles, user groups, and users
    • Retrieve log activities by role, group, and user
  • Servers
    • Get the health status of SQL Server and SOTI MobiControl databases
  • System Maintenance
    • Retrieve and update the Log Truncation and Maintenance configuration
  • System Health
    • Retrieve current metric data from Deployment Servers
    • Get the current Message Processing metrics for Deployment Servers
    • Get and update the System Health Metric message settings
  • Terms and Conditions
    • Manage Terms and Conditions that users accept during device enrollment
    • Manage versions of specific Terms and Conditions
    • Windows Modern Health Attestation
      • Retrieve and update the Health Attestation server configuration

Resolved Issues

MCMR‑25777 License counts for apps in the App Store License accounts were higher than expected
MC‑122175 On iOS devices, screenshots were not available in the App Detail screen of the App Catalog web clip
MC‑120808 The Application Policy report could not be generated in Microsoft Excel format
MC‑115260 In the iOS App Policy, tooltips appeared empty for the "Request Device to Install Application (Unsupervised Device Only)" and "Maximum Installation Attempts" options
MCMR‑22186 User permissions were not being saved
MCMR‑22252 Time synchronization for Mexico time zones was not working
MCMR‑23334 When a username was changed, logs still showed the old username
MCMR‑24376 Custom Data items were duplicated in the Data Collection Rule creation wizard
MCMR‑24386 Device target number in the Device Assignment dialog was not updated when a filter was applied
MCMR‑24632 Incorrect values were displayed on the Device charts for custom attributes and dates
MCMR‑25160 Ping Identity integration did not work with the standard SAML configuration
MCMR‑25252 Explorer in Windows Modern does not show folders and files that were granted access through Assigned Access.
MCMR‑25334 Feature control configuration failed to install on Windows Modern devices
MCMR‑25504 Unable to set the time zone to Yukon when configuring the Time Synchronization policy for a Device Group
MCMR‑25600 Cloud Link Agent 3.0 connection terminated after several minutes
MCMR‑25690 The value of Relocate Devices To field in the Alert Rule was reset when the configured device group moved under another device group
MCMR‑25725 When adding a new Identity user to MobiControl, object ID was displayed in the web console instead of username
MCMR‑25819 Error message displayed when configuring user permissions
MCMR‑26143 Unable to access WebDAV content through SOTI Hub using iOS devices
MCMR‑26213 Deployment Server crashed unexpectedly
MCMR‑26270 Assigned Access configuration was applied to the Windows Modern device only after multiple reboots
MCMR‑26307 Personalized device name was not displayed in the web console
MCMR‑26351 Disabling Allow Simple Password configuration for a Windows CE profile failed to save in web console
MCMR‑26643 Linux Ubuntu 20.04 was stuck in boot loop after assigning a lockdown profile
MCMR‑26684 Profile’s policy messaging value was saved with invalid Japanese character
MCMR‑27013 Nightly maintenance failed due to the length of time it required to complete
MCMR‑27046 Linux Agent failed to connect using HTTP proxy
MCMR‑27232 SOTI Surf crashed when accessing a link on a Google form
MCMR‑27535 An additional Self Service permission available in the Japanese UI was added to the English UI