Device management

MDM migration

Otukan plans a move from your current device manager group by group: per-platform reset and re-enrolment, policy and app transfer, staged waves, a fallback.

  • Constraints first

    Otukan establishes which devices need a reset, which only need re-enrolment and what each user will notice, before a single date is set.

  • Intent, not settings

    Policies and app configurations are rebuilt from what they are meant to achieve, so old workarounds are not copied into the new service.

  • A way back at every wave

    The old service stays live until each wave is confirmed, and every group has a written fallback and a named support owner.

Migration risks Otukan plans for

Moving a fleet goes wrong in predictable places. Otukan addresses each before the first wave.

Unplanned data loss

  1. Detect

    Devices whose migration path includes a reset or work-profile removal are identified per group.

  2. Respond

    Backup and sync of work data are confirmed with users before their device moves.

  3. Report

    Each group's reset status and backup confirmation are tracked in the migration plan.

Policies lost in translation

  1. Detect

    Every policy in the old service is listed with the purpose it serves.

  2. Respond

    The purpose is rebuilt on each platform's own terms in Otukan and tested on pilot devices.

  3. Report

    A mapping sheet shows old policy, intent and new configuration side by side.

Apps missing after the move

  1. Detect

    Required apps, their configurations and in-house builds are listed per group.

  2. Respond

    Managed distribution in Otukan is prepared and verified on the pilot before users move.

  3. Report

    App arrival per device is confirmed in the inventory during each wave.

Devices stranded between services

  1. Detect

    Devices released from the old service but not yet enrolled in Otukan are counted daily.

  2. Respond

    Stranded devices are chased through their users or recovered on site.

  3. Report

    The daily list feeds the wave's go or hold decision.

How it works

  1. Survey the fleet

    Platforms, enrolment modes, provisioning channels and contract dates are captured per device group.

  2. Rebuild the intent

    Policies and app configurations are recreated in Otukan from what each is meant to do.

  3. Migrate a pilot

    A pilot wave covering each device type proves the path, the user experience and the fallback.

  4. Move in waves

    Groups migrate one at a time, each confirmed before the next is scheduled.

  5. Retire the old service

    Once every wave is confirmed, old enrolments, tokens and assignments are closed.

Otukan plans a move from your current device manager in three parts: constraints, sequence and recovery. First it works out, per platform and ownership mode, which devices need a reset, which only need re-enrolment and what each user will notice. Then it rebuilds policies and app delivery in Otukan from their purpose, proves the path on a pilot wave and moves the fleet in confirmed stages. Throughout, the old service stays live for groups not yet moved, and every wave has a written fallback and a named support owner. The plan works the same way whichever product you are leaving.

Constraints

A device can only be managed by one service at a time, so every migration is a re-enrolment. What differs is how disruptive that is for each device.

Device groupWhat migration involvesUser impact
Android, corporate-owned (fully managed or dedicated)Reset, then provisioning into Otukan through zero-touch, QR code or another supported methodDevice returns to setup; local data not synced elsewhere is lost
Android, work profile on personal deviceOld work profile removed, new one created through OtukanPersonal side untouched; work data in the old profile is removed
Apple, assigned through Apple Business Manager or Apple School ManagerReassignment to Otukan in the organisation’s account; erase needed or not depending on OS version and enrolmentVaries per group; confirmed on the pilot
Apple, User EnrollmentManaged account removed from the old service and enrolled again into OtukanPersonal data untouched; managed apps reinstall

Otukan fills in this table for your fleet during planning. Two further constraints shape the calendar: the date your current contract ends, and the renewal dates of platform credentials such as the Apple push certificate. Both are placed on the plan before any wave is scheduled.

Preparing users

Where a reset or work-profile removal is involved, users need to know what will happen and what to back up. Otukan provides the wording per group and confirms backup before a device moves. For the enrolment paths themselves, see MDM device enrollment.

Sequence

Otukan runs migration as a chain of steps, each depending on the one before it.

  1. Survey. Device groups, platforms, enrolment modes, provisioning channels and required apps are recorded.
  2. Policy transfer. Each existing policy is listed with its purpose and rebuilt in Otukan. Settings that were workarounds for the old product are dropped rather than copied.
  3. App delivery. Required apps, their managed configurations and in-house builds are set up in Otukan’s managed distribution and verified on test devices.
  4. Pilot wave. A small group covering each device type migrates first. Otukan checks on the device that policy and apps arrived, and records the user experience.
  5. Staged waves. Groups or sites move one at a time. Each wave is confirmed before the next is scheduled.
  6. Close-out. Old enrolments, tokens and device assignments in the previous service are closed.

The pilot is the most valuable step. It turns assumptions about resets, app arrival and user effort into facts about your own devices. The questions worth settling before choosing a new service are listed on the MDM requirements checklist.

Recovery

Every wave has a fallback, and its shape depends on how far a device has gone.

  • Before reset or removal. The device is still managed by the old service. Pausing is simple: the wave stops and nothing changes for the user.
  • After reset or removal. Going back means enrolling the device into the old service again. The plan keeps that route open until the wave is confirmed.
  • After confirmation. The device is fully managed by Otukan, and issues are handled as normal support.

Support ownership is split by service, not by guesswork. Your help desk takes first contact; Otukan owns enrolment, policy and app issues in the new service; whoever runs the old service owns anything that has not yet moved. The split is written down before the pilot and reviewed after every wave.

Each wave ends with a short review: what took longer than planned, which users needed help, and which devices stalled. Those findings adjust the next wave’s timing, user wording and support staffing, so each wave builds on what the last one taught.

The service you move to is described on mobile device management. Migration is one stage of evaluation and lifecycle, alongside the pilot, ownership, support and a planned exit.

Common questions

  • Will every device have to be factory reset?

    Not every device, and Otukan tells you which ones in advance. Corporate-owned Android devices usually need a reset to become fully managed again. Apple devices assigned through Apple Business Manager are reassigned to Otukan, and whether an erase is needed depends on the OS version and how they are enrolled, which Otukan confirms per group. Personal devices change their work profile or managed account instead.

  • Can we run the old and new services side by side?

    Yes, and Otukan plans for it. The old service stays in place for groups that have not moved yet, and each device is managed by exactly one service at any moment. Running both during the transition is what makes a fallback possible, so the old service is retired only after every wave is confirmed.

  • Who supports users during the move?

    The plan names a support owner per wave. Usually your help desk takes first contact, with Otukan on hand for enrolment and policy issues in the new service, and your current supplier or team for anything still in the old one. The division is written down before the pilot, so every problem has an owner from the first call.

Move your fleet one confirmed wave at a time

Tell us roughly how your fleet splits by platform and ownership, how devices are enrolled today, and when your current contract ends. We never ask for exports from your current management console or its administrator accounts.

Or request a technical demo