<aside> ℹ️

Remote Management is the ability of a company to manage, configure, and secure mobile devices (computers, phones, tablets) in its fleet. It is made possible through the deployment of an agent, an MDM, on the devices composing the fleet.

</aside>

What is an MDM?

An MDM, or Mobile Device Management, is an agent deployed by Primo that allows you to manage, configure, and secure mobile devices used by your teams. Primo's MDM can support all mobile devices in your organization.

It works by deploying an agent on IT equipment to control them remotely, apply security policies, configure settings, and install or uninstall applications.

What is an MDM used for?

The MDM has several main functions:

• Application management: it allows deploying and updating necessary applications on employees' devices (computers and phones). For example, it allows providing a fully configured work tool to a new employee.
• Settings control: it ensures that the company's choices (disk encryption, firewall activation, password policy and OS updates, etc.) in terms of configurations are properly implemented across the entire fleet.
• Data security and protection: it allows securing data on devices. In case of loss or theft, the MDM allows remotely wiping sensitive data to prevent any leaks.
• Technical support: it allows providing remote software support and resolving issues on employees' devices. For example, it allows resetting passwords remotely if needed or forgotten.

How does the MDM act on devices?

The MDM acts on devices through various concrete actions:

• Application of an OS update policy
• Application of various security settings
  • Disk encryption and recovery key storage
  • Creation of password policies (strength and renewal)
  • Firewall activation
  • Antivirus deployment
  • Non-exhaustive list
• Installation of default applications
• Reading of applications present on the device, in order to,
  1. know if the applications that need to be installed are already there
  2. know if these applications are affected by known vulnerabilities
• Installation of MDM Profiles allowing preconfiguration of MacOS, Windows, and Linux, and their remote locking or erasure
• Execution of scripts for operational automation purposes