Chat now with support
Chat with Support

Enterprise Single Sign-On 9.0.2 - QRentry Users Guide

Preface_1 QRentry Overview Preparing the mobile device to use Using Enterprise SSO for Mobile Devices Using QRentry Authentication Manager Managing Mobile Devices

Accessing a computer

Accessing a computer


This section explains how to use QRentry to access a computer remotely.

Depending on the configuration defined by the EAM administrator, you might have to access a computer with QRentry.

Before starting
  • QRentry is installed on your mobile device.
  • Your mobile device and computer are enrolled.
  • Your computer must be started.

IMPORTANT: Multi-session mode is not available with QRentry: no other user must be connected to your computer.

  1. From your mobile device, start the QRentry application and tap Computers.

The list of enrolled computers appears:



  1. Tap .

Your Windows session opens.

  1. To:
  • Lock your session, tap .
  • Close your session, tap .

NOTE: For a complete description of these icons, please refer to the Enrolled Computer Status sub-section hereunder.


Enrolled Computer Status




The state of the Windows session is unknown: the connection is being established.

The computer is unreachable: check for a network problem.

Your Windows session is currently locked on the computer.

Your Windows session is currently opened on the computer.

There is no Windows session on the computer or this is not your Windows session.




Tap to open your Windows session.

Tap to lock your Windows session.

Tap to close your Windows session.
A confirmation pop-up appears.

Android only: tap to remove the computer from the remote control.

iOS only: slide the computer to the left and tap Delete to remove the computer from the remote control.

Managing Mobile Devices

Managing Mobile Devices

This section describes all the tasks related to mobile devices management. Some tasks are restricted to the EAM administrator, while others can be performed by any QRentry user. These tasks are:

Managing mobile devices from the EAM console

Managing mobile devices from the EAM console

Using the mobile devices management module

  • The EAM console includes a dedicated mobile devices management module, which is available from the welcome page. This module allows you to:
  • Display the list of the mobile devices already enrolled, and the list of the mobile devices not yet enrolled (optional).
  • Display the properties of each mobile device (device name, Personal key ID, local administration access, Mobile OS...).
  • Export the list of mobile devices into a CSV file.
  • Disable a mobile device.
  • Remove a mobile device from your configuration.
  1. From the EAM console welcome page, click the Mobile Devices management button.
  2. Click the Apply button to display the list of enrolled mobile devices:

    1. To add to the list the mobile devices that are not yet enrolled, select the check box and click Apply.
    2. To export the list of mobile devices, click Export.
    3. To enable/disable one or more mobile devices, select them and click Enabled/Disabled.
    4. To remove a device, select it in the list and click Remove

Double-click a listed mobile device to browse to the mobile device.

Using the directory management module

Using the directory management module


For a selected user:

  • The Mobile Devices tab allows you to force the Unique Identifier (IMEI) verification for a mobile device that is not yet enrolled.
  • The sub-tree contains his mobile device(s) and by selecting one, the following tabs are displayed:
    • The Information tab gives you all the information for the management of mobile devices within the QRentry feature:
      • The mobile devices enrolled for computer and application access and optionally, for the local administration access.
      • The mobile devices not enrolled yet.
      • The properties of each mobile device (device name, Unique Identifier...).
      • You can also use this tab to disable a user’s mobile device.
    • The Events tab allows you to display all the events that are directly or indirectly linked to the selected mobile device, for a defined period (the last two days by default). This report contains the user actions log entries.
Window description

NOTE: To display the following tabbed panels, browse the tree structure of the Directory panel to the wanted user object, select it to display the Mobile Devices tab or unfold it and select a mobile device.

Mobile Devices Tab





Removes the selected mobile device. The user can no longer enroll this device to log on.


Allows you to specify the Unique Identifier of the selected mobile device to restrict the user to enroll a given device.


  • This feature works only for Android mobile devicesand BlackBerry .
  • Depending on the User Security profile configuration, it may be mandatory to enter the Unique Identifier. For details, see Allowing users to log on with a mobile device
Information Tab





Displays the following information:

  • Name: name configured during the enrollment of the mobile device.
  • Operating System: OS of the mobile device (iOS, Androidor BlackBerry).
  • State: enable or disable the mobile device by clicking the Enable/Disable button.
  • Enrolled on: date and time of the mobile device enrollment. Otherwise: Not enrolled.
  • Last configuration update: date and time of the last update of the mobile device configuration (for example, update of E-SSO applications).
  • Unique Identifier: unique number of the mobile device.
  • Personal Key ID: private key ID. This ID is also available from the QRentry application installed on the mobile device.
  • Audit ID: identification number of the mobile device displayed in the reports.

Administration keys

This area displays the following information:

  • The list of the Access Point security profiles that contain the computers for which the selected mobile device can be used to log on as local administrator (Computer profile column).

Note: several Access Point security profiles can be listed if they use the same Active Directory group (for details, see Allowing users to log on as a local administrator).

  • For each Access Point security profile, if the mobile device is enrolled or not for local administration access (Status column), as follows:
    • Mobile device enrolled.
    • Mobile device enrolled with local administration access.
    • Mobile device not yet enrolled.


  • The local administration roles associated with each security profile (Local admin role column).
Related Documents