Cloud Administrator Console
- Any modern web browser on Mac and Windows.
- Imprivata tests with Safari, Google Chrome, Firefox, and Microsoft Edge.
Launchpad Mac or Windows PC
Both Mac and Windows may be used to run the client-side Launchpad software.
| Testing | Production | |
|---|---|---|
| Form Factor | Desktop or laptop | Headless desktop mini-PC |
| Remote Desktop | Optional | Required |
| OS | macOS or Windows 10 version within last 2 years | |
| RAM | 4 GB+ | |
| Drive Capacity | 20 GB+ SSD | |
If your PC has trouble connecting to more than 8 or so iPhones at once, try to disable XHCI in the PC’s BIOS. Test your model thoroughly before selecting a PC to be used as Launchpad.
Network
GroundControl uses HTTPS (port 443) for all communication between the Launchpad and the Cloud Administrator Console. After initial registration, the Launchpad switches to Secure WebSockets (also port 443) for asynchronous bi-directional messaging.
Firewalls must support Secure WebSockets. A common firewall feature is to force close any sockets that remain open for a long period of time, but this will cause GroundControl to lose the client-server connection.
| Source | Destination | Protocol | Use |
|---|---|---|---|
| Launchpad | US: us.groundctl.com / 52.202.156.90, 54.197.149.48 UK: uk.groundctl.com / 18.168.161.122, 13.41.242.92 | HTTPS/443 and WSS/443 | Server communication |
| Launchpad | US: groundcontrol-prod.s3.amazonaws.com UK: c16-assets-groundctl-com.s3.amazonaws.com | HTTPS/443 | Asset downloads |
| Launchpad | *.bugsplatsoftware.com | HTTPS/443 | Crash reporting |
| Launchpad (iOS only) | albert.apple.com gs.apple.com appldnld.apple.com secure-appldnld.apple.com | HTTPS/443 | Apple device activation & IPSW downloads |
| Launchpad | Your Imprivata OneSign appliance | HTTPS/443 | Identify look up during Checkout (if used) |
| Device | US: groundcontrol-prod.s3.amazonaws.com UK: c16-assets-groundctl-com.s3.amazonaws.com | HTTPS/443 | Checkout (if used) |
| Device | Your Imprivata OneSign appliance | HTTPS/443 | Identity look up during Checkout (if used) |
| Device (iOS only) | *.push.apple.com | TCP Ports: 443, 80, 5223, 2197 | Apple push notifications |
| Device (Android only) | See Firebase Documentation | TCP ports: 443, 5228, 5229, 5230 | Firebase push notifications |
| GroundControl Server US: 52.21.126.154, 52.20.201.34 UK: 18.169.178.173 35.177.97.127 | Your MDM Server | HTTPS/443 | MDM API requests (if used) |
Apple products on enterprise networks typically require specific hosts and ports to be open. For more information, see Apple’s documentation on the use of Apple products on enterprise networks.
Android products on enterprise networks require specific hosts and ports to be open for Firebase push notifications. For more information, see Google documentation.
Proxy Support
GroundControl has limited support for proxies:
- Proxies must be configured in the Launchpad app during initial registration
- Only unauthenticated proxies are supported
- Authenticated proxies and PAC files are not supported
- System proxy settings are ignored
USB Hubs and Carts
USB hubs vary wildly in quality. GroundControl recommends a very limited number of hubs and carts from trusted manufacturers.
- Imprivata Bretford PowerSync Pro v2 and PowerSync Plus.
- Datamation UniDock, Trays, and U-Series Sync & Charge hubs and related carts.
- Cambrionix ThunderSync.
Poor-quality electronics will display intermittent errors during restores and iOS updates.
Devices
GroundControl supports Apple iOS and Android devices.
Apple Devices
Apple device support is based on iOS version support. GroundControl supports the most recent 2 years of iOS updates. Only factory-reset devices are supported.
Android Devices
GroundControl 6.0 and later supports Android devices, running Android 9 and above.
| Item | Support |
|---|---|
| Android OS | Android 9 or later |
| Devices | |
| Honeywell devices | CT30 (non-healthcare) |
| Samsung devices | Samsung S22 Samsung A14 |
| Spectralink devices | Versity 95 Versity 96 |
| Zebra devices | Zebra TC5 series - TC52, TC57 Zebra TC2 series - TC21, TC26 |
| Device settings and permissions | The Imprivata Locker app for Android devices requires the following device settings and permissions: - Draw over (overlay) other apps. - Accessibility Service. |
| MDMs | Android devices must be enrolled in an MDM system: - Workspace ONE (AirWatch) - Microsoft Intune |
Device Cases & Batteries
GroundControl does not support all device cases. For more information, see this article.