Mobile Device Management For Your Phone
Overview
Mobile Device Management is a service that helps protect personal and University information on your smart phone quickly and easily. Whether it's a University-owned phone OR a personal phone, if it's used to access Stanford information or email, it must be securely configured.
iPhone/iPad users and Android users must register their devices. It's easy and free, and once installed, it allows you to remotely access or wipe your phone in case it's lost or stolen; it even lets you reset your passcode if you've forgotten it. Mobile Device Management also sets up your Stanford email, calendars, and VPN settings, so that conducting University business on your phone can be done securely.
For detailed installation instructions and FAQs, visit https://mdm.stanford.edu
Do you use Stanford Hospital or LPCH email? Follow this set of instructions to update your device registration and enable access to both your email accounts.
Which Devices Must Be Protected?
Stanford's Minimum Security Standards for endpoint devices require ANY phone or mobile device used to access High, Moderate, or Low-Risk Stanford information (including through email and calendar) to be protected with MDM—whether it's your own personal phone or a Stanford-owned phone.
If you have an Apple Watch, there is currently no requirement for MDM, as the Watch is so closely tied with the iPhone. Apple Watch users can find some security tips here.
(If you don't use your device for Stanford work or email, make sure you're still taking the appropriate precautions.)
Which Devices Are Supported
The following devices are currently supported:
- Apple devices* running iOS 10.0 or higher
- Android models must be running Android OS 6.0 or higher
*The Apple Watch does not currently require MDM—just its paired iPhone. Stanford affiliates can use the Apple Watch for Stanford work, provided it has the proper security settings.
How MDM Works
When you register with MDM, it will install a configuration profile on your smartphone. This allows you to access Stanford's systems (such as email) securely and automatically. It will also prompt you to decide whether you may potentially receive emails that contain Stanford Restricted information, and will ensure that your phone uses a passphrase. For more information, see the UIT pages about MDM.
Your privacy will be honored: When you register, MDM collects only limited information about your device. Stanford will not be able to access your application data, your voicemail, or your call history. For more information, see the UIT page about MDM and privacy.
Installing MDM will not affect the performance of your smartphone, but will help you by allowing you to manage it remotely, in case your phone is lost or stolen. To manage your phone and other registered devices, visit mydevices.stanford.edu from any computer, and log in with your SUID.
What You Should Do To Secure Your Device
- EVERYONE: You can start by setting a passcode lock on your phone or mobile device. It's just common sense, just like locking your house, your car, or your bike. If your phone isn't set to lock automatically and open with a passcode, it's not fully compliant with Stanford security policy.
- Apple and Android users: Enroll in MDM. It's easy and free; if you haven't done so already, go to https://mdm.stanford.edu and follow the easy instructions.
- Apple Watch users: Currently we do not have an MDM requirement, since the Apple Watch depends on an iPhone to run. In the meantime, you can use the Apple Watch for Stanford work by configuring the proper security settings.
- Other users: MDM is currently available only for iOS and Android operating systems—and you must be running MDM in order to use your device for Stanford work. If you receive emails that contain Moderate or High Risk Information, you cannot use ANY unsupported device to access Stanford email. If you have any questions, contact IT Security: file a help ticket, or call us at 725-8000 (option 4).
Quick Links
Do You Use Stanford Hospital or LPCH Email?
Special Instructions
For School of Medicine employees who also have email or calendars with either Stanford Hospital or Lucille Packard Children's Hospital, there is a special process to ensure you maintain access to both your email accounts from the same mobile device. We are working with the Hospitals to streamline this process, but here are current instructions to enable joint access.
Protecting your phone
• EVERYONE: Set a passcode on your phone. It's common sense, like locking your house or bike.
• Apple Users: Register your iPhone (and iPad) with MDM
• Apple Watch Users: Make sure you've activated the minimum security settings.
• Android Users: See if your device can run MDM; in the meantime, set a passcode lock, and follow ITS Tips on securing Androids.
Questions?
If you have any questions about MDM, or how to secure your device, contact IT Security: file a help ticket, call us at 725-8000 (option 4), or visit us at the Tech Bar.