MANAGEMENT SERVICE MIGRATION FOR MANAGED DEVICES

• US 20180146046A1
• Filed: 05/18/2017
• Published: 05/24/2018
• Est. Priority Date: 11/22/2016
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: DEANE, ROGER, HARRIS, JEFF, GOVERDHAN, URVASHI
• Granted Patent: US 10,873,511 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 41/042 comprising distributed management centres cooperatively managing the network
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/0027 Managing security policies for mobile device or applications control, e.g. mobile application permission management or mobile device security settings
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/0802 using revocation of authorisation
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

Disclosed are various examples for client device migration. In one example, a client device is enrolled with a first management service. A user interface is generated that identifies a user request to enroll the client device with a second management service. An un-enrollment from the first management service is initiated. The un-enrollment from the first management service is initiated using identifier of the client device. An enrollment with the second management service is initiated. The enrollment with the second management is initiated using a the identifier of the client device.

Claims

1. A system, comprising:

at least one computing device; and

program instructions executable in the at least one computing device that when executed, cause the at least one computing device to;

identify a request to migrate a diene device from a first management service to a second management service the request comprising a device identifier associated with the client device;

cause the cheat device to be un-enrolled from the first management service by causing a first management profile associated with the first management service to be removed from the client device;

determine that the client device is un-enrolled from the first management service;

cause a request to enroll the client device with the second management service to be sent to the second management service, the request comprising the device identifier;

obtain enrollment data from the second management service; and

cause the client device to be enrolled with the second management service by authenticating the client device with the second management service using the enrollment data and causing a second management profile associated with the second management service to be installed on the client device.

2. The system of claim 1, further comprising program instructions executable in the at least one computing device that, when executed, further cause the at least one computing device to cause the client device to download and install a migration application that identifies the device identifier.

3. The system of claim 2, wherein the migration application enables a network adapter of the client device to identify the device identifier.

4. The system of claim 1, further comprising program instructions executable in the at least one computing device that, when executed, further cause the at least one computing device to cause the client device to download and install a migration application that generates a user interface that identifies the request to migrate the client device from the first management service to the second management service.

5. The system of claim 4, wherein the user interface includes a visualization aid that provides status information regarding a migration of the client device from the first management service to the second management service.

6. The system of claim 1, wherein the at least one computing device invokes an Application Program Interface (API) of the first management service to determine that the un-enrollment is completed.

7. The system of claim 1, wherein the enrollment data comprises an enrollment token associated with the second management service.

8. The system of claim 1, wherein the enrollment data comprises an enrollment link associated with the second management service.

9. A computer-implemented method, comprising:

identifying a request to migrate a client device from a first management service to a second management service, the request comprising a device identifier associated with the client device;

causing the client device to be un-enrolled from the first management service by causing a first management profile associated with the first management service to be removed from the client device;

determining that the client device is un-enrolled from the first management service;

causing a request to enroll the client device with the second management service to be sent to the second management service, the request comprising the device identifier;

obtaining enrollment data from the second management service; and

causing the client device to be enrolled with the second management service by authenticating the client device with the second management service using the enrollment data and causing a second management profile associated with the second management service to be installed on the client device.

10. The computer-implemented method of claim 9, further comprising:

causing the client device to install a migration application; and

causing the client device to apply a configuration file to the migration application that includes a first server address associated with first management service and a second server address associated with second management service.

11. The computer-implemented method of claim 9, further comprising:

determining whether the client device is enrolled with the second management service; and

rendering user interface on the client device that includes indicates that the client device is migrated from the first management service to the second management service.

12. The computer-implemented method of claim 9, further comprisingL

querying the first management service for management data associated with the client device;

storing the management data in a temporary device record;

transmitting the management data to the second management service.

13. The computer-implemented method of claim 12, further comprising:

causing the client device to identify a profile based at least in part on the management data and install the profile on the client device.

14. The computer-implemented method of claim 9, wherein the enrollment data comprises an enrollment token associated with the second management service.

15. The computer-implemented method of claim 12, wherein causing the client device to be un-enrolled from the first management service further comprises redirecting to an emulated management service a request to un-enroll the diem device from the previous management service, wherein the emulated management service emulates the previous management service and provides an un-enrollment command to the client device.

16. A non-transitory computer-readable medium embodying program instructions executable in at least one computing device that, when executed, cause the at least one computing device to:

identify a request to migrate a client device from a first management service to a second management service, the request comprising a device identifier associated with the client device;

cause the diem device to be un-enrolled from the first management service by causing a first management profile associated with the first management service to be removed from the client device;

determine that the client device is un-enrolled from the first management service;

cause a request to enroll the diem device with the second management service to be sent to the second management service, the request comprising the device identifier;

obtain enrollment data from the second management service; and

cause the client device to be enrolled with the second management service by authenticating the client device with the second management service using the enrollment data and causing a second management profile associated with the second management service to be installed on the client device.

17. The non-transitory computer-readable medium of claim 16, further comprising program instructions executable in the at least one computing device that, when executed, further cause the at least one computing device to send a link to the client device to download a migration application that generates a user interface that identifies the request to migrate the client device from the first management service to the second management service.

18. The system of claim 17, wherein the user interface includes a visualization aid that provides status information regarding a migration of the client device from the first management service to the second management service.

19. The non-transitory computer-readable, medium of claim 16, wherein the enrollment data, comprises an enrollment token associated with the, second management service.

20. The non-transitory computer-readable medium of claim 16, further comprising program instructions executable in the at least one computing device that, when executed, further cause the at least one computing device to send to the first management service a request to un-enroll the client device from the first management service to cause the client device to un-enrolled from the first management service.