Mobile Device Management For Your Phone

MDM (Mobile Device Management) is a service that helps protect personal and University information on your smart phone quickly and easily. Whether it's a University-owned phone OR a personal phone, if it's used to access Stanford information or email, it must be securely configured.

iPhone and iPad users (and users of supported Android devices) must register their devices with MDM. It's easy and free, and once installed, it allows you to remotely access or wipe your phone in case it's lost or stolen; it even lets you reset your passcode if you've forgotten it. MDM also sets up your Stanford email, calendars, and VPN settings, so that conducting University business on your phone can be done securely.

For detailed installation instructions and FAQs, visit http://med.stanford.edu/mdm

Stanford's Minimum Security Standards for endpoint devices require ANY phone or mobile device used to access High, Moderate, or Low-Risk Stanford information (including through email and calendar) to be protected with MDM—whether it's your own personal phone or a Stanford-owned phone.

(If this does not apply to your device, make sure you're still taking the appropriate precautions.)

When you register with MDM, it will install a configuration profile on your smartphone. This allows you to access Stanford's systems (such as email) securely and automatically.  It will also prompt you to decide whether you may potentially receive emails that contain Stanford Restricted information, and will ensure that your phone uses a passphrase. For more information, see the ITS pages about MDM.

Your privacy will be honored: When you register, MDM collects only limited information about your device. Stanford will not be able to access your application data, your voicemail, or your call history. For more information, see the ITS page about MDM and privacy.

Installing MDM will not affect the performance of your smartphone, but will help you by allowing you to manage it remotely, in case your phone is lost or stolen. To manage your phone and other registered devices, visit mdm.stanford.edu from any computer, and log in with your SUID.

The following devices are currently supported:

• Apple devices* running iOS 5.1 or higher
  
• Android models must be running Android OS 4.0 or higher (click to see if your device is supported)

*The Apple Watch does not currently require MDM—just its paired iPhone. Stanford affiliates can use the Apple Watch for Stanford work, provided it has the proper security settings.

• EVERYONE: You can start by setting a passcode lock on your phone or mobile device. It's just common sense, just like locking your house, your car, or your bike.
• Apple users: You can sign up for MDM on your own. It's easy and free; if you haven't done so already, go to http://mdm.stanford.edu on your phone's browser and follow the easy instructions. Or, visit http://med.stanford.edu/mdm for more detailed instructions.
• Apple Watch users: Currently we do not have an MDM requirement, since the Apple Watch depends on an iPhone to run. This will change with the advent of iOS 9, which will allow the watch to run apps natively. In the meantime, you can use the Apple Watch for Stanford work by configuring the proper security settings.
  
• Android users: See if your Android phone can support MDM. In general, MDM requires Android OS 4.0 and higher (but NOT the Kindle Fire). Although we don’t yet have an MDM solution for all Androids, be proactive and start using a passcode lock, and follow ITS' Android Security Tips.  Please remember that at this time, an Android phone without MDM is not approved for Stanford Restricted information. If you receive emails that contain Moderate or High Risk Information, you cannot use your unsupported Android to access Stanford email.  If you have any questions, contact IRT Security: file a help ticket, or call us at 725-8000 (option 4).
• Blackberry users: To protect your Blackberry, register your device with Stanford’s Blackberry Enterprise Server (https://itservices.stanford.edu/service/exchange). You must be registered with the BES service in order to access Moderate or HIgh Risk information on your Blackberry.