Using Devices

The Devices page lists all the devices you have registered in the Privileged Access Service and lets you send commands to the devices. The Devices page is blank until you register a device.

Not all companies use the Privileged Access Service for device registration. Contact your IT department to determine whether or not you should register your mobile devices.

Adding a Device

You add a device by installing the Delinea application on the device and then use this application to register the device in the Privileged Access Service. After you register the device, it is listed on the Admin Portal > Profile Devices page and remains registered until you or your IT administrator unregisters it.

Installing the Delinea Mobile Application

The easiest way to install the Delinea application to your device is to click Add Devices on the Devices page and then select a method.

You can install the Delinea application using the following methods (available methods are configured by your systems administrator):

  • Send an email to the device. The email message contains a link you tap to proceed. See Using an Email Message.

  • Use the camera on your device and a QR code reader application. See Using the QR Code for further detail.

The Google Play and App Store links are provided if you want to review the application description in the catalog before installing it on the device. You can also use them to download the application. You must have an Google Play or Apple App Store account to use these options.

We support the following versions:

  • iOS version 10.0 or later

  • Android 4.2 or later

Using an Email Message

You can send an email to the device to download the Delinea application to your device and then install it from the Downloads folder.

To initiate device registration using an email message:

  1. Open the Admin Portal > Profile page, click Devices, and Add Devices.

    This opens the Add Devices pop up window.

  2. In the Send registration link via: area, confirm the email address then click Send.

    The email is sent.

  3. On the device, open the email application.

  4. Tap the message.

  5. Authorize application download.

    On an Android device, tap OK to allow download of the file. This downloads the application file to your Downloads folder.

    On an iOS device, tap Open to open the application page in the Apple App Store and tap Install. This downloads and installs the application onyour home screen. Skip the next step and go to Registering an iOS Device and Using the Delinea Application to complete registration.

  6. Android devices only: Open the Downloads folder on the device and tap the Delinea application file just downloaded.

    This initiates application installation. Go to Registering an Android Device and Using the Delinea Application to complete registration.

Using the QR Code

You must have a QR code reader application to download the Delinea application using the QR code.

Many devices come equipped with a QR code reader application. If your device does not have one by default, there are many free apps you can install from Google Play or the Apple Apps Store.

To install the Delinea application by using the QR code:

  1. Open the Admin Portal > Profile page, click Devices and then click Add Devices.

  2. On the device, use the camera to scan the QR code.

  3. Authorize application download.

    1. On an Android device, tap Go to Website and then tap OK to allow download of the file. This downloads the application file to your Downloads folder.

    2. On an iOS device, tap Install. This downloads and installs the application on your home screen. Skip the next step and go toRegistering an iOS Device and Using the Delinea Application to complete the registration phase.

  4. Android devices only: Open the Downloads folder on the device and tap the Delinea application file just downloaded.

    This initiates application installation. Go to Registering an Android Device and Using the Delinea Application to complete registration.

Using Apple Device Registration

The Apple Device Enrollment Program is a service provided by Apple. It is designed to help businesses and education institutions easily deploy and manage iPads, iPhones, and Macs. It provides a fast, streamlined way to deploy company owned iPad and iPhone devices and Mac computers that your IT department purchased directly from Apple.

If you have a device assigned to the Apple Device Enrollment Program (DEP) registering the device is a two-part process:

  • First, you register the device in the Apple DEP program.

  • Second, you use the Delinea application to register the device in the Privileged Access Service.

The first procedure depends upon how your IT department configured the device. However, it does have the following basic steps:

  1. Set up the device communications.

    The device will need to connect to the Apple server. Your IT department will provide the information you need.

  2. Enter your login user name and password.

    This may be the user name and password you use to log in to your network or another set of credentials. Your IT department will provide these to you too.

  3. Perform the initial configuration tasks.

    These vary depending upon your organization’s security policies and can include prompts, for example, to setup a passcode, enable or disable location tracking, or set up Siri.

After you have completed the initial configuration tasks, the Delinea application and the Company Apps applications are automatically installed on your home screen. To perform the second registration piece—registering the device in the Privileged Access Service— see Registering an iOS Device and Using the Delinea Application.

Viewing Your Device Information

When you open the Devices tab, the screen lists all of the devices that you have registered in the Privileged Access Service, including devices that have been unregistered.

A device can have the following statuses:

  • Registered: The device is registered and in communication with the Privileged Access Service.

  • Unregistered: The device was registered at one time but has since been unregistered from the Privileged Access Service.

  • Unreachable: The device has not communicated with the Privileged Access Service for a period of time. That period of time is set by your IT administrator.

  • Registering: The device is in the process of registering with the Privileged Access Service. This is typically a short-term state.

The map shows the location of all the devices you have at one time been registered. For unreachable devices, the map shows the last known location. Click on the device’s arrow to center the focus on that device.

The map device locations are only shown if your organization is using the Privileged Access Service for mobile device management and you have enabled device tracking on the device and in the Privileged Access Service Admin Portal.

By default, location tracking is enabled in the Privileged Access Service Admin Portal.

In the Delinea application on iOS devices, location tracking uses the significant-change location service which, unlike the GPS location tracking, is very battery friendly. It is not perpetually trying to determine the device location. Note that the Apple Location icon does not differentiate between the different types of location services.

Similarly, the Delinea application for Android is configured for low power consumption. Open Location in the device Settings to see the battery use for the Delinea application.

If the location does not seem correct, click the Find Now button to ensure that you have the most recent GPS location data. You may need to reload the browser page to display a location change.

Sending Commands to Devices

The Privileged Access Service provides self-service commands you can send to the device. Send commands by doing one of the following in the Privileged Access Service Admin Portal > Profile:

  • Right-click the device in the Devices screen.

    The Privileged Access Service Admin Portal displays a drop-down list with the commands.

The available commands depend upon the following:

  • The type of device you have registered.

  • The device policies that your IT administrator has enabled for you.

The following table lists all of the Privileged Access Service commands for all devices. If the command is not displayed in the pop up menu, it is not available for that device.

Command Purpose
Lock Client App Locks the Delinea application on the device. This command is only available on iOS and Android devices.
Reset Client App PIN Resets the passcode for the Delinea application on the device. This command is useful when you forget your passcode. This command is only available on iOS and Android devices.
Email Device Log Sends the device log file in the device to an email address. You specify the email address when you click the command. You can also set an option to send the log file when the device is on Wi-Fi only.