Adding Android mobile devices to the list of managed devices

To add an Android mobile device to the list of managed devices, Kaspersky Endpoint Security for Android and a shared certificate must be delivered and installed on the mobile device. Shared certificates are used by Administration Server for identifying mobile devices. After a shared certificate is delivered and installed on a mobile device, the device appears in the list of managed devices.

You can add mobile devices of users to the list of managed devices by means of the Mobile device connection wizard. The wizard provides two options for delivery and installation of a shared certificate and Kaspersky Endpoint Security for Android:

By using a Google Play link
By using a link from Kaspersky Security Center Web Server
The Kaspersky Endpoint Security for Android installation package stored for distribution on Administration Server is used for installation

Starting the Mobile device connection wizard

To start the Mobile device connection wizard, do one of the following:

Use the context menu in the User accounts folder:
1. In the console tree, expand the Advanced folder and select the User accounts subfolder.
2. In the workspace of the User accounts folder, select the users, security groups, or Active Directory security groups whose mobile devices you want to add to the list of managed devices.
3. Right-click and in the context menu of the user account, select Add mobile device.
  The Mobile device connection wizard starts.
In the workspace of the Mobile devices folder click the Add mobile device button:
1. In the console tree, expand the Mobile Device Management folder and select the Mobile devices subfolder.
2. In the workspace of the Mobile devices subfolder, click the Add mobile device button.
  The Mobile device connection wizard starts.

Adding an Android mobile device by using a Google Play link

To install Kaspersky Endpoint Security for Android and a shared certificate on a mobile device using a Google Play link:

Start the Mobile device connection wizard.
On the Operating system page of the wizard, select Android as the mobile device operating system type.
On the Method to install Kaspersky Endpoint Security for Android on devices page of the wizard, select Download the app from Google Play.
On the Select users whose mobile devices you want to manage page of the wizard, select the users, security groups, or Active Directory security groups whose mobile devices you want to add to the list of managed devices.
This step is skipped if the wizard is started by selecting Add mobile device in the context menu of User accounts folder.

If you want to add a new user account into the list, click the Add button and enter the user account properties in the window that opens. If you want to modify or review the user account properties, select the user account from the list and click the Properties button.
On the Certificate source page of the wizard, specify the method for creating the shared certificate that Administration Server will use to identify the mobile device. You can specify a shared certificate in one of the following ways:
- Issue certificate through Administration Server tools
  Select this option to create a new certificate by means of Administration Server tools if you did not create it previously.
  
  If this option is selected, the certificate is automatically issued by using Administration Server tools.
  
  This option is selected by default.
- Specify certificate file
  Select this option to specify a certificate file that was created earlier.
  
  This method is not available if multiple users were selected at the previous step.
On the User notification method page of the wizard, define the settings for notifying the mobile device user by SMS or email about certificate creation:
- Show QR code in wizard
  If you select this option, a link to the installation package will be shown at the final step of the Mobile device connection wizard.
  
  This option is not available if multiple users were selected for the device connection.
- Send QR code to user
  Selecting this option allows you to configure user notification of connection of a new mobile device.
  
  You can select the email address type, specify an additional email address, and edit the message text. You can also select the type of the user phone for sending an SMS message, specify an additional phone number, and edit the SMS message text.
  
  If the SMTP Server has not been configured, no email messages can be sent to users. If SMS notification has not been configured, no SMS messages can be sent to users.
On the Result page, click Finish to close the wizard.

After the wizard finishes, a link and a QR code will be sent to the user's mobile device, allowing download of Kaspersky Endpoint Security for Android. The user clicks the link or scans the QR code. Next, the mobile device's operating system prompts the user to accept installation of Kaspersky Endpoint Security for Android installation. After Kaspersky Endpoint Security for Android is downloaded and installed, the mobile device connects to the Administration Server and downloads a shared certificate. After the certificate is installed on the mobile device, the device is displayed in the Mobile devices folder, which is a subfolder of the Mobile Device Management folder in the console tree.

Adding an Android mobile device using a link from Kaspersky Security Center Web Server

Kaspersky Endpoint Security for Android installation package published on the Administration Server is used for installation.

To install Kaspersky Endpoint Security for Android and a shared certificate on a mobile device using a link from Web Server:

Start the Mobile device connection wizard.
On the Operating system page of the wizard, select Android as the mobile device operating system type.
On the Method to install Kaspersky Endpoint Security for Android on devices page of the wizard, select Download the app installation package from Kaspersky Security Center.
In the field that appears below, select an installation package or create a new one by clicking New.
On the Select users whose mobile devices you want to manage page of the wizard, select the users, security groups, or Active Directory security groups whose mobile devices you want to add to the list of managed devices.
This step is skipped if the wizard is started by selecting Add mobile device in the context menu of User accounts folder.

If you want to add a new user account into the list, click the Add button and enter the user account properties in the window that opens. If you want to modify or review the user account properties, select the user account from the list and click the Properties button.
On the Certificate source page of the wizard, specify the method for creating the shared certificate that Administration Server will use to identify the mobile device. You can specify a shared certificate in one of the following ways:
- Issue certificate through Administration Server tools
  Select this option to create a new certificate by means of Administration Server tools if you did not create it previously.
  
  If this option is selected, the certificate is automatically issued by using Administration Server tools.
  
  This option is selected by default.
- Specify certificate file
  Select this option to specify a certificate file that was created earlier.
  
  This method is not available if multiple users were selected at the previous step.
On the User notification method page of the wizard, define the settings for notifying the mobile device user by SMS or email about certificate creation:
- Show QR code in wizard
  If you select this option, a link to the installation package will be shown at the final step of the Mobile device connection wizard.
  
  This option is not available if multiple users were selected for the device connection.
- Send QR code to user
  Selecting this option allows you to configure user notification of connection of a new mobile device.
  
  You can select the email address type, specify an additional email address, and edit the message text. You can also select the type of the user phone for sending an SMS message, specify an additional phone number, and edit the SMS message text.
  
  If the SMTP Server has not been configured, no email messages can be sent to users. If SMS notification has not been configured, no SMS messages can be sent to users.
On the Result page, click Finish to close the wizard.

The mobile app package of Kaspersky Endpoint Security for Android is automatically published on the Kaspersky Security Center Web Server. The mobile app package contains the app, the settings for connecting the mobile device to the Administration Server, and a certificate. The mobile device user will receive a notification containing a link for downloading the package from the Web Server. The user clicks the link. The operating system of the device then prompts the user to accept installation of the mobile app package. If the user agrees, the package will be downloaded to the mobile device. After the package is downloaded and the mobile device is synchronized with the Administration Server, the device is displayed in the Mobile devices folder, which is a subfolder of the Mobile Device Management folder in the console tree.