User manual
Documentation for Cerberus Enterprise MDM
Introduction
Cerberus Enterprise is a comprehensive EMM solution, designed to help you secure and manage your ...
Setup
Device provisioning overview
Cerberus Enterprise supports device management for both Android and Apple platforms. You can con...
Device Provisioning - Android
Supported devices
In general, any device running Android 6+ with Google Play Services is compatible with Cerberus E...
Enrollment tokens
Cerberus Enterprise uses enrollment tokens to start the Android device enrollment (provisioning)...
Personally-owned devices
Devices owned by employees can be set up with a work profile. A work profile provides a self-cont...
Company-owned devices for work and personal use
Setting up a company-owned device with a work profile enables the device for both work and person...
Company-owned devices for work use only
Full device management is suitable for company-owned devices intended exclusively for work purpos...
Zero-touch
IT admins can provision company-owned devices using the zero-touch enrollment method, outlined in...
Authenticate Using Google enrollment
Authenticate Using Google enrollment (also referred to as Google Authentication for Enrollment) ...
Device Provisioning - Apple
Apple provisioning overview
Cerberus Enterprise supports enrolling and managing Apple devices. Apple provisioning requires a...
Apple manual enrollment (Enrollment Profile)
Cerberus Enterprise supports manual enrollment for Apple devices using an enrollment URL and an ...
Apple Automated Device Enrollment (ADE)
Automated Device Enrollment (ADE) integrates with Apple Business Manager (ABM) to automatically ...
Policies overview
The Policies section of the dashboard (Dashboard → Policies) lists all policies in your account ...
Policies - Android
Summary
Android policies are the core entities of the system: they define the rules that are applied and ...
App management
In this section, you can set policies related to app availability, installation, updates, and per...
Kiosk mode
With kiosk mode, you can restrict a device's functionality to a single app or multiple apps. Choo...
Security
In this section, you can configure security-related policies. Security risk actionsChoose what to...
Multimedia
In this section, you can configure camera/microphone behavior, USB data access, printing, and dis...
Cellular
In this section, you can configure cellular-related policies. 1. Airplane modeControls whether ai...
Networking
In this section, you can configure networking-related policies.Wi‑Fi configurations can be provis...
System
In this section, you can configure system-related policies. 1. Minimum API levelThe minimum allow...
User management
Add user disabledWhether adding new users and profiles is disabled. For devices where managementM...
Personal usage
When provisioning a company-owned device for work and personal use, you can specify some rules to...
Cross-profile policies
Only applies to devices with personal and work profiles.Cross-profile copy/pasteWhether text copi...
Status reporting
In this section, you can configure which data should be retrieved from the device. The status dat...
Misc
1. Easter egg game disabledWhether the Easter egg game in Settings is disabled. 2. Skip first use...
Policy enforcement rules
If a device or work profile fails to comply with any of the policy settings listed below, Android...
Policies - Apple
Apple policies
Apple policies define management settings that Cerberus Enterprise applies to Apple devices via ...
Apple policy: Passcode
The Passcode settings section controls device passcode requirements and related security rules (...
Apple policy: Restrictions
The Restrictions sections control which OS features are allowed on managed Apple devices. In the...
Apple policy: Apps & profiles
This section documents how to configure managed applications and account payloads for Apple devi...
Device Status
Device overview
Open a device from Dashboard → Devices by clicking the device row. The page title shows the devi...
Commands
The Device editor provides a Commands panel to send remote commands to a managed device. Availab...
Location map
The Location map page (Dashboard → Location map) shows the last known location of devices in Goo...
Private apps
From this section of the dashboard, you can upload your own private Android apps or create web ap...
Certificate management
The dashboard includes a Certificates section to import, view, and delete certificates. Clicking...