GroundControl locks devices using its Imprivata Locker app, available for iOS and Android devices.
Obtaining the App
GroundControl locks devices using a Custom B2B App, which is distributed through Apple’s iTunes VPP program. There is no charge for the Imprivata Locker app for iOS.
To obtain the app, email support@imprivata.com with the following information:
- Your organization’s DEP ID
- Exact organization name as it appears in Apple Business Manager
Also make sure Custom Apps are enabled for your organization within Apple Business Manager. It may take 1-2 days for the app to appear in your list of Custom Apps.
After the app shows within ABM, your ABM administrator must “purchase” (for free) a number of copies of the app. It does not matter how many copies are purchased, but it should be sufficient to cover the quantity of devices you have.
After purchase, the app appears within your MDM alongside other VPP apps. Configure your MDM to automatically deploy your apps to the appropriate group of devices on enrollment. Ensure that the Imprivata Locker app is allowed through your MDM profiles and it’s not hidden or uninstalled during Check In or Check Out Workflows.
Locker App Details
Imprivata Locker 3.x (iOS)
- App ID: com.imprivata.b2b.locker
- External ID: 1569836501
- App Icon:
GroundControl 6.2 and later no longer supports the GroundControl 2.0 app. You must migrate to Imprivata Locker 3.x (iOS). See this article for instructions on migrating.
Obtaining the App
Imprivata Locker Android is distributed via Managed Google Play.
To obtain the app:
- Provide the Google Play store information: Organization name and Organization ID. Google Play store organization information can be found here.
- After Imprivata assigns the Locker app to your organization, make sure you search for the full name of the app – Imprivata Locker – and approve it.
- After the app is released, it will be searchable in the Managed Play Store, where you can find, approve, and assign it similar to any other public app.
Locker App Details
Locker App (Android) 1.0 and later
- App Icon:
Required Android Device Settings and Permissions
The Imprivata Locker app (Android) requires the following device settings and permissions.
- Draw over (overlay) other apps. Must be enabled manually on each device.
- Accessibility Service. Must be enabled manually on each device.
The Locker app will prompt for these device settings/permissions during registration.
MDM Lock Task and Allowlist Requirements
- The Locker Android app must be granted Lock Task permissions in the MDM. Each MDM has different configuration steps to enable lock task in its kiosk mode or with a launcher.
- The Locker Android app must be added to the allowlist in your MDM.
Configure an Emergency Unlock PIN
What happens when someone accidentally unplugged a cable, or the network is offline? At some point you may need to unlock a device when GroundControl is not available. The Imprivata Locker app includes a feature to unlock phones in case of emergencies.
BEST PRACTICE: While Emergency Unlock PIN is an optional feature and is not a requirement, Imprivata strongly recommends using an Emergency Unlock PIN with your devices.
The In addition to marking the devices as Overdue, enable Lost Mode and send email for overdue devices. GroundControl supports Lost Mode with the following MDMs. is configured via AppConfig in your MDM server.
- PIN entry requires no GroundControl access and no network access to unlock the device.
- The Emergency Unlock PIN may be any number between 4 and 8 digits.
- You can change the Emergency Unlock PIN as often as you like.
- You can assign different Unlock PINs to different groups of devices, using AppConfig features on your MDM server.
Once set up, unlocking a phone is easy.
- Unplug one of the locked devices from USB.
- Tap the padlock icon to display the numeric keypad.
- Enter the Emergency Unlock PIN.
iOS Example
Android Example
When the device has been unlocked in this way, GroundControl records the device was “Unlocked by PIN,” but does not know the identity of the user.
Like passwords, we recommend that you change the Unlock PIN regularly.
On successful unlock, GroundControl can automate a Workflow. The automation must use the trigger Unlocked via PIN Unlock, and the Workflow uses the Workflow model “Over the Air.”
AppConfig Options
Like any well-mannered app, Imprivata Locker supports AppConfig.
Next:
