Cloud Administrator Console
- Any modern web browser on Mac and Windows.
- Imprivata tests with Safari, Google Chrome, Firefox, and Microsoft Edge.
Launchpad Mac or Windows PC
Both Mac and Windows may be used to run the client-side Launchpad software.
|Form Factor||Desktop or laptop||Headless desktop mini-PC|
|OS||macOS or Windows 10 version within last 2 years|
|Drive Capacity||20 GB+ SSD|
If your PC has trouble connecting to more than 8 or so iPhones at once, try to disable XHCI in the PC’s BIOS. Test your model thoroughly before selecting a PC to be used as Launchpad.
GroundControl uses HTTPS (port 443) for all communication between the Launchpad and the Cloud Administrator Console. After initial registration, the Launchpad switches to Secure WebSockets (also port 443) for asynchronous bi-directional messaging.
Firewalls must support Secure WebSockets. A common firewall feature is to force close any sockets that remain open for a long period of time, but this will cause GroundControl to lose the client-server connection.
|Launchpad||US: us.groundctl.com / 220.127.116.11, 18.104.22.168|
UK: uk.groundctl.com / 22.214.171.124, 126.96.36.199
|HTTPS/443 and WSS/443||Server communication|
|Launchpad (iOS only)||albert.apple.com|
|HTTPS/443||Apple device activation & IPSW downloads|
|Launchpad||Your Imprivata OneSign appliance||HTTPS/443||Identify look up during Checkout (if used)|
|HTTPS/443||Checkout (if used)|
|Device||Your Imprivata OneSign appliance||HTTPS/443||Identity look up during Checkout (if used)|
|Device (iOS only)||*.push.apple.com||TCP Ports: 443, 80, 5223, 2197||Apple push notifications|
|Device (Android only)||See Firebase Documentation||TCP ports: 443, 5228, 5229, 5230||Firebase push notifications|
US: 188.8.131.52, 184.108.40.206
UK: 220.127.116.11 18.104.22.168
|Your MDM Server||HTTPS/443||MDM API requests (if used)|
Apple products on enterprise networks typically require specific hosts and ports to be open. For more information, see Apple’s documentation on the use of Apple products on enterprise networks.
Android products on enterprise networks require specific hosts and ports to be open for Firebase push notifications. For more information, see Google documentation.
GroundControl has limited support for proxies:
- Proxies must be configured in the Launchpad app during initial registration
- Only unauthenticated proxies are supported
- Authenticated proxies and PAC files are not supported
- System proxy settings are ignored
USB Hubs and Carts
USB hubs vary wildly in quality. GroundControl recommends a very limited number of hubs and carts from trusted manufacturers.
- Imprivata Bretford PowerSync Pro v2 and PowerSync Plus.
- Datamation UniDock, Trays, and U-Series Sync & Charge hubs and related carts.
- Cambrionix ThunderSync.
Poor-quality electronics will display intermittent errors during restores and iOS updates.
GroundControl supports Apple iOS and Android devices.
Apple device support is based on iOS version support. GroundControl supports the most recent 2 years of iOS updates. Only factory-reset devices are supported.
GroundControl 6.0 and later supports Android devices, running Android 9 and above.
|Android OS||Android 9 or later|
|Honeywell devices||CT30 (non-healthcare)|
|Samsung devices||Samsung S22
|Spectralink devices||Versity 95
|Zebra devices||Zebra TC5 series - TC52, TC57
Zebra TC2 series - TC21, TC26
|Device settings and permissions||The Imprivata Locker app for Android devices requires the following device settings and permissions:
- Draw over (overlay) other apps.
- Accessibility Service.
|MDMs||Android devices must be enrolled in an MDM system:
- Workspace ONE (AirWatch)
- Microsoft Intune
Device Cases & Batteries
GroundControl does not support all device cases. For more information, see this article.