Android system updates: Adjust MDM settings now

25. February, 2021

Android’s market share of mobile operating systems is 68% in Austria in January 2021.[1] Around 55 per cent of them now run on Android 10, just under 19 per cent on Android 9, and the rest are distributed down to Android 4.4.[2]

In September 2020, Google released Android 11. Google’s Pixel has already received the update, and other manufacturers will follow later this year. Android 11 should improve the privacy of users. Like Android 10, it also influences the management of the devices via IKARUS mobile.management. We have summarised the most significant changes again.

Update to Android 10

After the update to Android 10, devices that are rolled out with the device administrator are rejected by the MDM server and can no longer be managed. Google no longer supports the combination of Android 10 and the device administrator activation method.

In order to fully manage a device with Android 10 via IKARUS mobile.management, the Device Owner method must be used. For this, the device must either be new or reset to factory settings. When starting the device, a code can be scanned in the MDM system. Thus the MDM activation is performed directly during the device setup.

Privately-owned devices can also be managed via IKARUS mobile.management under Android 10 with the Work Profile setting (without a device administrator).

Our tips:

  • The Device Owner method already works from Android 8. We recommend that you always create new MDM devices as Device Owner to avoid future problems when updating the operating system.
  • Existing devices rolled out with the device administrator should be switched to the Device Owner (company device) or Work Profile only (a private device with business use) before the system update to Android 10. This is how you avoid the devices losing the connection due to the update.

Update to Android 11

Android 11 also only allows administration as a Device Owner. Furthermore, it is no longer possible to manage both the device and the Work Profile – Google is forcing administrators to decide between the variants. When updating to Android 11, a device with both settings loses the connection to MDM, but the Work Profile remains manageable.

Our tip:

  • If the device itself continues to be managed after the update to Android 11, the work profile can be deactivated in advance. The device will then remain manageable with Android 11 without further action.
HarfangLab Guard
MITRE ATT&CK Framework
v.l.n.r.: Joe Pichlmayr (CEO IKARUS) – Anouck Teiller (CSO HarfangLab) –Alexander van der Bellen (Bundespräsident Österreich) - Frédéric Joureau (Erster Botschaftsrat der französischen Botschaft in Wien) – Christian Fritz (COO IKARUS)
EDR
Cyber Kill Chain
Business Email Compromise
Prognosen für die zehn größten Cybersecurity-Bedrohungen für 2030
E-Mail Verschlüsselung
Schritt für Schritt zum Notfallplan für IT-Security-Incidents
Account Management
Bedrohung
Indicators of Attack
Gefahren durch vertrauenswürdige Services
Threat Intelligence
SQL Injection
SMTP Smuggling

WE ARE LOOKING FORWARD TO HEARING FROM YOU!

IKARUS Security Software GmbH Blechturmgasse 11
1050 Vienna

Phone: +43 1 58995-0
Sales Hotline:
+43 1 58995-500
sales@ikarus.at

SUPPORT HOTLINE

Support hotline:
+43 1 58995-400
support@ikarus.at

Support hours:
Mon – Thu: 8am – 5pm
Fri: 8am – 3pm
24/7 support by arrangement

Remote maintenance software:
AnyDesk Download