You’ll need to create three workflows: Device Prep, Return, and Check Out.
Device Prep: Here you will do the basic provisioning of the device. You should include the following actions, at a minimum:
- Perform MDM command – This will delete the device which ensures that the enrollment is treated as “new”. – Pre- Enrollment Action > Delete from MDM.
- Add WiFi
- Set Name
- Set Language and Locale – This will skip this set up screen on the device
- DEP Enrollment
- Check in Action
Your MDM should install the “GroundControl Locker” app on enrollment for these devices.
Important! Ignore the warning and do not include a WiFi profile in the Return and Checkout workflows. Your device will already have a WiFi profile from the PREP workflow, and reinstalling the WiFi profile during the return or check out process may cause the workflow to fail.
Return: This workflow will lock down devices when connected, without needing to run a full prep workflow. Include the following actions:
- Check In Device — this will launch and lock the GC Locker app 2.0 or Imprivata Locker 3.0, set the status to “Checked In” and clear the Device User attribute.
- Set Wallpaper — a black wallpaper is a visual clue that devices are locked. You may wish to use this intimidating wallpaper.
- On Failure — In the unlikely event check-in fails, we recommend adding an On Failure action to your workflow to ensure your device is locked and checked in. Under advanced, add an On Failure action. Select Retry this workflow option only and select the number of attempts you would like, 2 should be fine.
- Perform MDM Command > Clear Passcode — if you are using passcodes in your organization, you will need to clear the passcode via MDM in order to check successfully in devices. For more information, see our article on Clearing Passcodes.
Check Out: This workflow will unlock the device after a successful badge tap. When the workflow is run, the attribute “[Device User]” will have the username of the person checking out the device.
Include the following actions:
- Check Out Device — this action will unlock the GC Locker app, display a green screen with the user’s ID, and set the device status to “Checked Out”. If you have Smart Hub services enabled, it will also rapidly flash the white LED next to the device.
- Set Wallpaper — if you used the black wallpaper above, then on check out you will want to add your friendly wallpaper with your organization’s logo. We also recommend embedding text onto the Lock Screen saying “Checked Out to [Device User]” or something similar.
- On Failure — We only consider a checkout complete when the device being checked out is unplugged. In order to account for a device not being removed after a check out was initiated, we recommend adding an On Failure action to your workflow to check the device back in.
Under Advanced, add an On Failure action. Select the “If still failing, run another workflow” option only and select your RETURN workflow. This On Failure action will return the device to the checked in state if this final step is not completed after 60 seconds.