The app on the device
Note! At this point, the Cortado app is only available for Android devices. An app for iOS devices will also be available soon.
Note! Users of fully managed devices will find the Cortado app on their device.
After successfully configuration, you will find the Cortado app on your mobile device. On the left image you see the app as part of the working profile, on the right image on a completely managed device.
- Open the app with the app icon (arrow in illus.).
- On the start page of the app you will receive a status message about the management of your work profile and/or your company devices:
- If the traffic light displays green, then the work profile and the device are running correctly, and any existing policies have been implemented (left illus.).
- If the traffic light displays yellow, the last time the device was updated was more than 48 hours ago (middle illus.).
- If the traffic light displays red, a policy is unable to be enforced. In the example, an insufficiently strong password has been set for a device with a work profile (right illus.).
- If necessary, change the password for the work profile or for the device.
- Tap on Update now, to refresh the status message.
On the start page of the Cortado app select the menu item Device Information.
Here you will find miscellaneous information about your Android device. The available information is dependent on the device model, the OS version and on whether this is a private device with a work profile (the example in the left illus.) or a fully managed company device (the example in the right illus.).
On the start page of the Cortado app select the menu item Apps.
Manage work apps
This will take you to the Play Store. Alternatively, you can also open the Play Store for your work profile (left illus.) or your fully managed device (right illus.) directly via the app icon.
Here you will find apps that your administrator has made available for your work profile or for your fully managed device. You can decide yourself whether you want to install these apps. All other work apps already located on your device have been pushed by your firm directly onto the device and you cannot uninstall them.
Additionally, in your work Play Store you will find an overview of your installed work apps and you can run the app updates from here.
Policies at a glance
On the start page of the Cortado app select the menu item Policies.
You will get an overview here of all general policies for devices with a work profile and for fully managed devices. Additionally, you will find the password policies here for the work profile and/or the whole device.
Policies for devices with work profile
For devices with a work profile, the number of policies is limited. You can see from the colour of the traffic light whether or not a policy permits a particular function.
Es gibt nur eine geringe Anzahl an Richtlinien, die auf das gesamte Gerät Auswirkungen haben. Diese gelten ausschließlich dem Schutz des Arbeitsprofiles. So kann Ihr Administrator zum Beispiel auf die Art der Entsperrung des Gerätes (Fingerabdruck bzw. Trust Agents/Smart Lock) and the strength of the device password. Beyond that the administrator has no access whatsoever to any private area on your computer.
If you have a work profile on your device, the majority of policies refer solely to the work profile or to the communication between work profile and the device. For example, the administrator can determine whether the camera app or Google Chrome is to be part of your work profile (left illus.) or not (right illus.). Or the administrator can determine whether data may be exchanged between the work profile and the private profile.
The policy Taking screenshot also only refers to your work profile. If the traffic light for this policy is set to red, you cannot take screenshots any more within your work profile. Outside of your work profile this policy has no impact.
Also, the policy Install apps from sources other than Play Store (arrow in left illus.) only refers to the installing of such apps within the work profile, e. g. via the Chrome browser or via Gmail (arrows in right illus.).
If the traffic light for account changes is set to red, this only means that you cannot add further business accounts to your device (arrow in right illus.). You can continue to add new private accounts.
Policies for fully managed devices
There are a large number of policies available for fully managed accounts. Most of the available settings for the device can be controlled by your administrator with the help of those policies. Whether or not a functionality is permitted by a policy is indicated by the colour of the traffic light. A blocked functionality is indicated in the device settings by a corresponding tip (middle illus.) or is greyed out (right illus.).
On devices with a work profile your administrator can set password policies for the work profile or for the whole device. For fully managed devices, password policies can be set for the whole device. Here you can see, for example, how long the password needs to be and whether it needs to contain upper case and/or lower case characters etc. (example in illus.).
Create your password according to the guidelines otherwise your work apps will be locked.
If your password has expired, you will receive a corresponding message in the app and your work apps will also be locked.
Note! When using Android devices version 9.0 or later, you will be prompted to set a new device password if you are using only one password for the work profile and the device. When using Android devices smaller than version 9.0, you will be prompted to set a new work profile password if you use only one work profile and device password.
On the start page of the Cortado app select the menu item Settings.
Here you have the option to delete your work profile from your device, or to reset your fully managed device to factory default settings. Moreover, you can get an insight into the MDM details and you can export or reset a log file.
Delete work profile/reset fully managed device
To delete the work profile from your device or to reset the whole device, click on the trash icon.
Take note that on devices with a work profile, only the work profile, including all business apps and data, will be deleted from the device. The deleted data cannot be restored. All private data, apps and settings remain untouched (left illus.). Alternatively, you can also delete the profile in the device settings under Users & accounts (right illus.).
Fully managed devices will be reset to factory default settings when you delete the device management. All existing data is irrevocably lost during the process. Alternatively, you can reset the device in the device settings, via the path System→ Reset options→ Erase all data (right illus.).
Note! Your administrator can use a policy to disable the resetting of the device. In this case the greyed-out trash icon will appear in the Cortado app and an error indication will appear (left illus.). The option Erase all data will also be greyed out in the device settings (right illus.).
Here you will find some relevant technical details for MDM.
Managing log files
Here you can send a log file to your administrator, should he instruct you to do so. The log file can help to analyse errors that may have occurred. To start, click on Export log file (left arrow in illus.) and then on Send via email (right arrow in illus.). Fill in the email address of your administrator and send the file to him. Alternatively, you can save the file to your device and send it using a different app.
Furthermore, you have the option here to reset the log file. This will delete the contents of the existing log file. Data logging will then continue as usual.
Legal & Privacy
On the start page of the Cortado app select the menu item Legal & Privacy (arrow in left illus.). Here, apart from links to the Imprint, to the Data privacy statement and to the Manufacturer, you will also find third-party license notices (right illus.). In addition, you will receive an overview of what data is transferred to the Cortado MDM server.
Whether or not it is possible for data to be transferred depends, among other factors, on the type of Android device, on the OS version and on the type of Android Enterprise device (fully managed or device with work profile). The list available here contains all data that can potentially be transferred.
Note! The location of a device can only be communicated if the user gives approval in the device settings. This applies to devices with a work profile as well as for fully managed devices. The approval of location release cannot be controlled via a policy from the administrator.