How to encrypt iOS and Android devices using MDM?
Description
With more organizations moving to a mobile-first workforce, each and every mobile deivce contains a lot of confidential corporate date which needs to be secured from unauthorized access. Encryption is the most common way to secure the data present on the devices, whereby unauthorized usage of corporate data is restricted. You can use MDM to encrypt data as explained below:
Steps
Android
- Android by default supports 128-bit AES(Advance Encryption Standard) with certain OEMs supporting key size higher than 128-bits. To enable this encryption using MDM:
- On the MDM server, click on Device Mgmt from the top menu and select Profiles from the left pane.
- Click on Create Profile and select Android. Provide a name for the profile. You can know more about profiles here.
- Select Restrictions from the left menu. Ensure the options Enforce Storage Encryption and Enforce SD Card Encryption are set as Yes, with latter to be enabled in case you want the encryption to be extended to the data on the SD card.
- Once done, save and publish the profile. This profile can then be distributed to devices and/or groups.
iOS
iOS devices are encrypted by default. To ensure even the data backups are encrypted, follow the steps given below:
- On the MDM server, click on Device Mgmt from the top menu and select Profiles from the left pane.
- Click on Create Profile and select iOS. Provide a name for the profile. You can more about profiles here.
- Select Restrictions from the left menu. Ensure the option Force Encrypted Backup is set as Yes, to extend the encryption to the data backup.
- Once done, save and publish the profile. This profile can then be distributed to devices and/or groups.