Settings

Roles

In the Proget system, Roles are used to assign user groups access to individual console elements. With their help, you can effectively limit the possibilities of interfering with the system for particular groups, eg by disabling access to the Settings or Integrations tab.

To add Roles, go to the Settings tab, then click the Role button in the menu on the left.

Then click the Add a role button.

Enter the chosen name and optionally check the checkbox Enable two-step authentication (Each user with this role will be required to use 2-step authentication to log into the Proget console).

At this stage select the options that interest you, using check boxes or, if you want to give a user access to a tab with all its elements, by clicking Select all. Save by clicking the Save button.

A correctly added profile will appear in the list.

Then to assign roles you have to assign a group to it. Choose your Roles from the list by selecting it and click on Manage groups.

Add the selected group by clicking on it twice. You can add more than one group. After the selection, click the Save button.

If you want to edit or delete Roles, you can do this by selecting the role and clicking the corresponding action button.

Configure the LDAP connections list

Manage LDAP connections to synchronize directory services.

To add an LDAP connection, go to the Settings tab, then select the LDAP connections list from the configuration list. In the tab that appears, click Add Active Directory Connection.

The required fields when adding a new connection are: Name, Domain, Hostname, Port, User and Password.
Additional options are: Encryption and the ability to add attributes that are configured in the directory service.

If you have filled in the form correctly, click the Save button. After saving, you will receive the notification The connection has been successfully added. In addition, the profile created should appear in the LDAP connections list.

Activation message

To configure the device activation message, go to the Settings tab, then click the Activation Message button in the menu on the left.

Select the type of activation and click on the Update button above the table.

Here you have the option of editing the title and content of the activation message. You can choose whether a QR code is to be generated using a checkbox. Keep the changes with the Save button.

Device activation

To configure the activation settings, go to the Settings tab, then click the Activate devices button in the menu on the left.

Here you have the option of setting:

• Number of days for activation,
• Number of activation attempts,
• Whether the activation is to be deleted after activating the first device,
• The length of the generated password.

If you choose to check the Activation via SMS checkbox, you also have to choose the type of user authorization.

SMTP configuration

It is possible to configure the SMTP service, which is used to send activation messages and notifications to the user by e-mail. To configure it, go to the Settings tab, then select SMTP from the configuration list.

The fields to be completed are: Sender name, Sender e-mail address, SMTP server, SMTP port.

After completing the form, click the Save button.

If the configuration you saved is correct you will get the following information: The SMTP server configuration has been successfully added.

Server

To configure the server, go to the Settings tab, then click the Server button in the menu on the left. All organization details should be filled in correctly, in particular Backend URL and Frontend URL.

Gateway

A gateway is a secure e-mail access bridge that encrypts and protects traffic between the mobile device and internal e-mail systems.

To add a Gateway, go to the Settings tab, then click the Gateway button in the menu on the left.

Then, if you want to create a new Gateway with Local CA authentication, click the Add New Gateway button.

Fill in the fields according to the server data configuration and click the Save button.

If the system has been already configured with a SCEP profile and Certificate, you can create a Gateway with Enterprise CA authentication.

Apple Push Notification Service

Managing Apple devices should begin from activating them. For this purpose, generate an iOS activation link. The link will be available only after configuration the Apple Push Notification Service correctly.

First, add the Apple Push Notification Service certificate by going to the Integrations tab and selecting the Apple Push Notification Service option from the configuration list.

Click on the Generate Apple Push Notification Service Certificate Signing Request button to download the applepush.csr certificate for your server. The downloaded certificate should be sent to Apple by clicking the Apple Push Certificates Portal.

The Apple IDMSA service will be opened in a new browser page. You will need to enter your Apple ID credentials to log in.

After logging in, click the Create a Certificate button.

If you have read the terms of use, check the checkbox and click Accept. You can now upload your applepush.csr certificate by clicking on the Select file button. After you have uploade the file, a confirmation will be displayed and the option to download another certificate will appear. The name of this file should be MDM_Proget Sp. z o.o._Certificate.pem. Download it.

After downloading the Apple Push notification Service certificate, click on the Import Apple Push Notification Service certificate button where you can upload the file MDM_ Sp. z o.o._Certificate.pem. If the certificate is correctly uploaded, the status should change and the date of expiration of the certificate along with its UID will appear.

Now you can generate iOS activation links by going to My card and clicking the Generate activation button.

Renewing the Apple Push Notification Service Certificate

Before the certificate expires, you need to renew it, to generate activations for iOS devices. On the Integrations – Apple push Notification Service tab, click the Renew certificate button.

Click Generate Apple Push Notification Service Certificate Signing Request button and retrieve the certificate.

Then go to the website using the Go to Apple Push Certificates Portal button.

After logging in, find the certificate that you created earlier on the list and click the Renew button.

Then select the previously downloaded certificate and upload it using the Upload button.

Download the renewed certificate using Download button.

Upload a new certificate using Import Apple Push Notification Service certificate button.

Correctly updated certificate.

Apple Business Manager

Apple Business Manager is used to streamline the process of issuing Apple devices to end users. The program allows you to automatically activate Apple devices on the Proget server when you first start the device or after restoring it to factory settings. The program also allows you to define the stages of the first start-up of the device and remote start of the supervisor mode.

To configure Apple Business Manager, go to the Settings tab, select Apple Business Manager from the configuration list.

The first step is to create an Apple Business Manager account at Apple Businnes Manager. .

Then click on the Download server public key button,

and go to the Business Apple website, log in and go to the MDM Servers tab – Add a new MDM server.

Add the server name and upload the previously downloaded public key, save the server and generate the created server token.

The last action is to download the downloaded token by clicking Import server file.

Notifications

To configure Notifications go to the Settings tab, select Notifications from the configuration list.

Then, if you want to add a new notification, click the Add notification button.

To add recipients of the notification, click the Add button and enter the recipient’s address.

Next, we select the events to be notified when they occur. We save by clicking the Save button.

A correctly saved notification will appear in the list. To edit or delete a notification, select its checkbox and click the appropriate button.

The Service window

The service window gives you the option to allow remote login to the Proget console to a person providing technical support. Disabling the service window will immediately block this possibility. To enable the service window, go to the Settings tab and select the Service window from the configuration list.

Audit and logging

To enable and configure audit and logging, go to the Settings tab, select Audit and logging from the configuration list. By checking the checkbox Audit events, you enable the configuration, and the slider determines how long logged data should be stored. Save with the Save button.

The list of audits is located below the Save button. To download an audit, select it and click on the Download button above the table.

Reports

To add a new report, go to the Reports tab, click on Settings button and then click on the Add new report.

Fill in the Name field and optionally Description. Select Reports Format from list (CSV or PDF). Choose reports Type or set custom reports data by selecting the appropriate checkboxes.

Next, set the reporting schedule and the time period the generated reports should be stored.

If you already have SMTP configuration set up, you can check the check box Send report by e-mail and add recipient addresses. Save the report by clicking the Save button.

A correctly saved report setting will appear in the list.

Access control

This setting allows you to restrict access to the server by adding a list of IPv4 addresses that will be allowed access to the console (if access control is not set, then the server is available from any address)
To add allowed IP addresses for access control, go to the Settings tab, select Access control from the configuration list and click the Add button. After entering the IP range, click the Save button.

Theme

To modify the console’s graphic layout, go to the Settings tab, select Theme from the configuration list.

The color of the console can be changed in two ways. The first is to click on the sampler and select from the displayed palette of the color you are interested in. The second option is to enter the color code in the text field, using hexadecimal notation.

Change the logo and favicon by clicking the appropriate buttons. Select file. We keep the changes by clicking the Save button.