公开(公告)号：US11126441B2

公开(公告)日：2021-09-21

申请号：US16418261

申请日：2019-05-21

Applicant: VMware, Inc.

Inventor： Alexey Polyakov ,  Nitin Rao ,  Nikhil Ravishankar ,  Xueliang Hua ,  Shravan Shantharam ,  Ondrej Stastny ,  Brooks Peppin

IPC: G06F9/46 ,  G06F8/61 ,  G06F9/4401 ,  G06F1/24

Abstract: Examples described here include systems and methods for refreshing the operating system (“OS”) of a device enrolled in a management platform. Execution of a first command file ensures that necessary components of the management platform residing on the device are stored in a partitioned portion of the device hard drive to preserve them during the OS refresh. After a new instance of the OS has been installed, execution of a second command file migrates the necessary components from the partitioned portion of the hard drive to the new OS instance. When the user logs back into the refreshed device, a third command file installs all necessary device management components at the new OS instance and re-enrolls the device with the management platform. In this manner, the OS of a managed device can be refreshed and re-enrolled in the management platform without significant input from a user or administrator.

公开(公告)号：US11126419B2

公开(公告)日：2021-09-21

申请号：US16418269

申请日：2019-05-21

Applicant: VMware, Inc.

Inventor： Alexey Polyakov ,  Nitin Rao ,  Nikhil Ravishankar ,  Xueliang Hua ,  Shravan Shantharam ,  Ondrej Stastny ,  Brooks Peppin

IPC: G06F9/455 ,  G06F8/61 ,  G06F9/46 ,  G06F9/4401

Abstract: Examples described here include systems and methods for refreshing the operating system (“OS”) of a device enrolled in a management platform. Execution of a first command file ensures that necessary components of the management platform residing on the device are stored in a partitioned portion of the device hard drive to preserve them during the OS refresh. After a new instance of the OS has been installed, execution of a second command file migrates the necessary components from the partitioned portion of the hard drive to the new OS instance. When the user logs back into the refreshed device, a third command file installs all necessary device management components at the new OS instance and re-enrolls the device with the management platform. In this manner, the OS of a managed device can be refreshed and re-enrolled in the management platform without significant input from a user or administrator.

公开(公告)号：US10778666B2

公开(公告)日：2020-09-15

申请号：US16526002

申请日：2019-07-30

Applicant: VMware, Inc.

Inventor： Jason Roszak ,  Varun Murthy ,  Shravan Shantharam ,  Blake Watts ,  Kalyan Regula

IPC: H04L29/06 ,  G06F21/56 ,  G06F21/10 ,  G06F21/52 ,  G06F21/50 ,  G06F21/62 ,  H04L29/08 ,  G06F9/48

Abstract: Various examples for performing automated enrollments of client devices with a management service after being accessed by a staging user account are described. A client device can be configured to identify a user account active on the client device and determine whether the user account is a staging user account or an end user account associated with an intended recipient of the client device. In an instance in which the user account is the staging user account, the client device can create an event listener on the client device that monitors a subsequent login of a user account performed through an operating system of the client device, the subsequent login of the user account being the end user account. In an instance in which the subsequent login of the user account is detected by the event listener, the client device can perform an automated enrollment with a remote management service.

公开(公告)号：US20200228622A1

公开(公告)日：2020-07-16

申请号：US16832664

申请日：2020-03-27

Applicant: VMware, Inc.

Inventor： Shravan Shantharam ,  Varun Murthy ,  Yogesh Govind Hande ,  Bhuvanesh Shanmuga Sundaram ,  Kalyan Regula

IPC: H04L29/08 ,  G06F9/451 ,  G06F9/445

Abstract: Various examples for providing a dynamic runtime interface for device management are described. In one example, a computing environment can access metadata that describes a configuration of a user interface made in a profile template designer application. The computing environment can identify a request for a profile creator that provides at least one setting for a desired configuration of a client device enrolled with a management service, and, in response to the request being identified, dynamically generate the user interface using the metadata, where the user interface includes a configured to receive the at least one setting for the desired configuration of the client device. The computing environment can generate a configuration profile accessible by the client device that causes an agent application executable on the client device to configure the client device in accordance with the configuration profile.

公开(公告)号：US10320771B2

公开(公告)日：2019-06-11

申请号：US15365524

申请日：2016-11-30

Applicant: VMware, Inc.

Inventor： Yogesh Govind Hande ,  Shravan Shantharam ,  Kalyan Regula ,  Varun Murthy ,  Bhuvanesh Shanmuga Sundaram ,  Jonathon Deriso

IPC: H04L29/06

Abstract: Disclosed are various approaches for providing single sign-on capabilities for a user on a client device. A user's credentials can be authenticated by an identity provider application. The identity provider application can facilitate single sign-on capabilities for browser-based applications and native applications on the client device.

公开(公告)号：US20180276002A1

公开(公告)日：2018-09-27

申请号：US15466841

申请日：2017-03-22

Applicant: VMware, Inc.

Inventor： Jason Roszak ,  Craig Newell ,  Shravan Shantharam ,  Varun Murthy ,  Kalyan Regula ,  Blake Watts

IPC: G06F9/44

Abstract: Systems and methods are included for causing a computing device to assemble and boot from a managed operating system. When the computing device is powered on, it can execute firmware that specifies a server to contact. The server can identify an operating system (OS) to boot, and the location of a pre-enrollment installer for assembling the OS image. The pre-enrollment installer can download base OS images in one or more pieces from multiple locations determined based on ownership information of the computing device. The multiple OS images can relate to enterprise management and company-specific applications and drivers. Once the pre-enrollment installer has combined the base OS images, the computing device reboots using the combined OS image.

公开(公告)号：US11272030B2

公开(公告)日：2022-03-08

申请号：US16832664

申请日：2020-03-27

Applicant: VMware, Inc.

Inventor： Shravan Shantharam ,  Varun Murthy ,  Yogesh Govind Hande ,  Bhuvanesh Shanmuga Sundaram ,  Kalyan Regula

IPC: G06F15/16 ,  H04L67/303 ,  H04L67/00 ,  H04L67/02 ,  G06F9/451 ,  H04L69/329 ,  G06F9/445

Abstract: Various examples for providing a dynamic runtime interface for device management are described. In one example, a computing environment can access metadata that describes a configuration of a user interface made in a profile template designer application. The computing environment can identify a request for a profile creator that provides at least one setting for a desired configuration of a client device enrolled with a management service, and, in response to the request being identified, dynamically generate the user interface using the metadata, where the user interface includes a configured to receive the at least one setting for the desired configuration of the client device. The computing environment can generate a configuration profile accessible by the client device that causes an agent application executable on the client device to configure the client device in accordance with the configuration profile.

公开(公告)号：US11263021B2

公开(公告)日：2022-03-01

申请号：US16418282

申请日：2019-05-21

Applicant: VMware, Inc.

Inventor： Alexey Polyakov ,  Nitin Rao ,  Nikhil Ravishankar ,  Xueliang Hua ,  Shravan Shantharam ,  Ondrej Stastny ,  Brooks Peppin

IPC: G06F9/4401 ,  G06F12/0806 ,  G06F8/654

Abstract: Examples described here include systems and methods for refreshing the operating system (“OS”) of a device enrolled in a management platform. Execution of a first command file ensures that necessary components of the management platform residing on the device are stored in a partitioned portion of the device hard drive to preserve them during the OS refresh. After a new instance of the OS has been installed, execution of a second command file migrates the necessary components from the partitioned portion of the hard drive to the new OS instance. When the user logs back into the refreshed device, a third command file installs all necessary device management components at the new OS instance and re-enrolls the device with the management platform. In this manner, the OS of a managed device can be refreshed and re-enrolled in the management platform without significant input from a user or administrator.

公开(公告)号：US20210273920A1

公开(公告)日：2021-09-02

申请号：US16804824

申请日：2020-02-28

Applicant: VMware, Inc.

Inventor： Jonathon Deriso ,  Sagar Date ,  Rahul Parwani ,  Jinsong Liu ,  Senthil Parthasarathy ,  Shravan Shantharam

IPC: H04L29/06 ,  H04L29/08 ,  H04L9/32 ,  H04L12/66

Abstract: Disclosed are various embodiments for securely distributing certificates or encryption keys. A management service can receive an enrollment request from a client device. The management service can then send a key request to a certificate provider, the key request comprising a user identifier. The management service can also send a skeleton payload to an enterprise gateway. In response, the management service can receive an encrypted profile from the enterprise gateway, the encrypted profile comprising the skeleton payload with an encryption key inserted by the enterprise gateway into the skeleton payload. Finally, the management service can send the encrypted profile to the client device.

公开(公告)号：US20200371770A1

公开(公告)日：2020-11-26

申请号：US16418277

申请日：2019-05-21

Applicant: VMware, Inc.

Inventor： Alexey Polyakov ,  Nitin Rao ,  Nikhil Ravishankar ,  Xueliang Hua ,  Shravan Shantharam ,  Ondrej Stastny ,  Brooks Peppin

IPC: G06F8/61 ,  G06F9/4401

Abstract: Examples described here include systems and methods for refreshing the operating system (“OS”) of a device enrolled in a management platform. Execution of a first command file ensures that necessary components of the management platform residing on the device are stored in a partitioned portion of the device hard drive to preserve them during the OS refresh. After a new instance of the OS has been installed, execution of a second command file migrates the necessary components from the partitioned portion of the hard drive to the new OS instance. When the user logs back into the refreshed device, a third command file installs all necessary device management components at the new OS instance and re-enrolls the device with the management platform. In this manner, the OS of a managed device can be refreshed and re-enrolled in the management platform without significant input from a user or administrator.