Force Recovery Mode for Unpaired Devices via Launchpad Details

Mobile Access Management can manage passcode locked devices by clearing the device’s passcode over-the-air via MDM, an action that requires Wi-Fi connectivity on the device. In the event a passcode-locked device no longer has active connectivity, for example after a reboot, these devices can become unpaired and recovery mode is required to remove the passcode.

Mobile Access Management can now force recovery workflows via the admin console, allowing you to recover and reprovision an unpaired device remotely. Today, this action can be performed on a single device or automated via an API, but it will be included as part of automation rules in a future release.

IMPORTANT:

This feature requires allowing force recovery via an MDM restrictions profile. If this option or checkbox is not available in the restrictions profile in your MDM, it may be possible to enable via custom XML.

To force recovery on unpaired devices:

  1. In the MAM console, navigate to Launchpads > Launchpad Details.

  2. Click the Actions menu and select Force Recovery.

    ..

  3. The device will enter recovery mode. After recovery mode is completed, The Launchpad will automatically execute any rules enabled that match the device state.

Using a custom XML in Omnissa Workspace ONE

Copy 
<dict>
        <key>PayloadDescription</key>
        <string>Configures restrictions</string>
        <key>PayloadDisplayName</key>
        <string>Restrictions</string>
        <key>PayloadIdentifier</key>
        <string>com.apple.applicationaccess.D1B3FF5E-B7F4-467D-B9B2-B7BD17419D341</string>
        <key>PayloadType</key>
        <string>com.apple.applicationaccess</string>
        <key>PayloadUUID</key>
        <string>D1B3FF5E-B7F4-467D-B9B2-B7BD17419D341</string>
        <key>PayloadVersion</key>
        <integer>1</integer>
        <key>allowUnpairedExternalBootToRecovery</key>
        <true/>
</dict>

  1. Create a new Configuration profile.

  2. Type a name for the profile.

  3. In Profile type, select Template.

  4. Under Configuration Settings, expand Connected Devices.

  5. In the Automated device enrollment section, switch the Allow users to boot devices into recovery mode with unpaired devices setting to Yes.

  6. Deploy to devices before attempting force recovery.