Device management

Support and lifecycle

How to evaluate support and lifecycle for device management: support lines per fleet group, OS and model change, and tested recovery and offboarding paths.

  • One support path

    Users call your help desk, your help desk reaches Otukan, and every case is traceable from first contact to the device it concerns.

  • Change on a calendar

    OS releases, model retirements and platform renewals are placed on a shared calendar with your team, so none of them arrives as a surprise.

  • Recovery rehearsed

    Lost devices, failed updates and offboarding follow procedures tested on pilot devices, not procedures written the day they are needed.

Lifecycle events Otukan plans for

Select an event to see how Otukan spots it, what happens next and what your team sees.

New operating system release

  1. Detect

    Otukan tracks Android and Apple release cycles and tests management behaviour on the models in your fleet.

  2. Respond

    Updates are held, staged or released per device group, as your policy sets and the platform allows.

  3. Report

    Your team receives a model-by-model status and any configuration change needed.

Model reaching end of support

  1. Detect

    Devices whose maker has stopped delivering security updates are identified in the inventory.

  2. Respond

    Replacement is planned with your team, and interim restrictions can be applied to affected groups.

  3. Report

    A list of affected devices, with dates, feeds your replacement budget.

Lost or broken device

  1. Detect

    A help desk case or a device that stops reporting starts the agreed recovery path.

  2. Respond

    The device is locked or wiped remotely, and its replacement enrols into the same group.

  3. Report

    Each action is logged against the administrator who ran it.

Policy change with side effects

  1. Detect

    Changes go to a pilot group first, and devices that fail to confirm the new policy are flagged.

  2. Respond

    The change is paused or rolled back for the affected group.

  3. Report

    The change history shows who approved it, where it went and what it did.

User leaving the organisation

  1. Detect

    An offboarding request or a directory change starts the leaver workflow.

  2. Respond

    Work data is removed; a corporate device is reset and returned to stock, a personal device keeps its personal side.

  3. Report

    Offboarding is recorded per device, with the date and the person who confirmed it.

How support is set up

  1. Map support lines

    Your help desk, Otukan and any partner each get a defined first, second or third line role.

  2. Agree the calendar

    OS release reviews, model retirements and platform renewals are placed on a shared schedule.

  3. Rehearse recovery

    Lost, broken and stuck devices are recovered on pilot hardware before rollout.

  4. Rehearse offboarding

    A leaver and a retired device are processed end to end, with results recorded.

  5. Review on a cycle

    Support cases, lifecycle events and the exit plan are reviewed together at agreed intervals.

An IT or fleet team should evaluate support and lifecycle by testing how the service behaves on the worst day of a device’s life, not the first. That means knowing who answers users for each fleet group, how operating system and model changes are handled over years, and whether recovery and offboarding have been rehearsed on real hardware. Otukan agrees support lines with you and any partner before rollout, reviews OS releases on your own models and tests lost-device, leaver and retirement paths during the pilot. This applies to Android and Apple devices in each ownership mode. Service hours and escalation terms are agreed per contract.

This page is part of the evaluation and lifecycle collection.

Support by fleet group

Support needs differ by who owns the device and what it is for. Settle them group by group.

Device groupTypical support needLifecycle pressure
Corporate-owned, general usePassword resets, lost phones, app problemsRefresh cycles and OS updates on mixed models
Dedicated or kiosk devicesFast replacement so the task continuesLong service lives on a fixed OS image
Personally owned, work profile or User EnrollmentWork app access without touching personal dataUser-driven OS updates and device changes

Operating systems

Android and Apple devices age differently. Android support depends on each maker’s update policy per model; Apple publishes its own device support for each OS release. Otukan records both per model in your inventory rather than applying one rule to the whole fleet.

Privacy on personal devices

Support on a personally owned device has limits the user can see. Help desk staff can find the device, reset work access and remove work data. They cannot read personal apps, photos or messages, and the enrolment mode keeps those out of the management service in the first place. Otukan writes those limits into the support script, so staff and users hear the same answer.

Operating model

A support arrangement is only as clear as its lines and its access rules.

Support lines

LineUsually held byWhat it handles
First lineYour help deskUser contact, device look-up, lock and passcode reset
Second lineYour fleet administrators, or a partner where agreedGroup moves, policy questions, on-site handling
Third lineOtukan engineersEnrolment faults, policy delivery, platform changes, the service itself

Who holds each line is agreed per contract and written into the responsibility matrix. For how that matrix is built, see ownership and partner scope.

Access and change control

Otukan support reaches your tenant only when a case needs it, with your approval and a time limit, and every action is logged. Who hosts and operates the tenant is set out on MDM deployment options. Policy changes travel the same way whoever makes them: pilot group first, then the wider fleet once devices confirm the result.

Integrations over time

Directory, certificate and ticketing connections age too. Otukan includes each connection in lifecycle reviews, so an expiring certificate or a changed directory attribute is caught in the review, not in a user’s failed enrolment.

Ending the service

Lifecycle includes the end of the contract. Export formats, deletion confirmation, the handover period and the release of devices from bulk enrolment are agreed before rollout and rehearsed once on a pilot tenant, so leaving is a procedure rather than a negotiation.

Lifecycle, rehearsed

Evaluate every stage with a named workflow on pilot devices, and record the result.

  1. Provisioning. A new device reaches its user, enrols into the right group and receives policy and apps without help desk involvement.
  2. Change. A policy change reaches the pilot group, one device is made to fail it, and the pause and rollback work as written.
  3. Recovery. A device is reported lost, locked, wiped and replaced, and the replacement enrols into the same group.
  4. Offboarding. A leaver’s corporate device is reset and returned to stock; a leaver’s personal device loses its work data and nothing else.
  5. Retirement. A model at end of support is replaced, and the old units are released from bulk enrolment.

Each rehearsal produces a dated record with devices, OS versions and the person who confirmed it. Those records become the baseline for the reviews Otukan holds with you after go-live. Moving an existing fleet in is covered on MDM migration.

Common questions

  • Who do our users call when a device misbehaves?

    Your own help desk stays the first point of contact, because it knows the users and the workflow. It has a help desk role in Otukan that can look up devices and run limited actions. Anything beyond that, such as an enrolment fault or a policy that does not apply, goes to Otukan engineers through the agreed support route, with the case and the device identified.

  • What happens when Apple or Google release a new OS version?

    Otukan tests management behaviour on the models in your fleet and tells you what, if anything, needs to change. You decide per device group whether updates are held for a period, staged or released, within what each platform and ownership mode permits. Dedicated devices often wait longer than general-use phones, and that choice is yours.

  • What support continues if we end the contract?

    The exit terms are agreed at the start, not at the end. They cover data export, deletion confirmation, releasing devices from bulk enrolment and support during the handover period. Because platform accounts are in your organisation's name, the fleet can move to another service without starting again.

  • Can Otukan staff reach our devices whenever they like?

    No. Otukan support has no standing access to your tenant. When a case needs it, access is requested, approved by your administrators and limited in time, and every action taken is written to the audit log your auditors can read.

Support that lasts as long as the fleet

Tell us how your fleet splits by ownership and platform, who answers users today and the workflow that must never stop. We never ask for administrator passwords, enrolment tokens or exports that contain personal data.

Or request a technical demo