Client Device Onboarding
beem Agentless Setup
In agentless mode, sites and SIM‑based devices connect directly to the beemNet via the Swisscom network. No app or manual configuration is required, the devices automatically become part of the central security and policy framework.
Prerequisite of Device Compatibility
Confirm whether your device supports eSIM technology. You can usually find this information in your device settings or on the manufacturer’s official website.License Assignment
Before proceeding, ensure that the correct license (Protect & Connect) is assigned to your user in the beem Hub. This is required for agentless operation.eSIM Activation Process
- Scan the eSIM QR Code
- Follow the on-screen instructions to install the eSIM directly on your device.
- If you are using a dual-SIM setup, make sure to select the beem eSIM line for mobile data usage. This setting can be adjusted later in your device’s mobile network settings.
beem Agent-Based Setup (beem App)
In agent-based mode, the beem App establishes a secure connection to the beemNet, enabling additional security features such as Deep Packet Inspection (DPI). For this reason, using the beem App is recommended over the purely agentless mode when enhanced protection is required.
- Download the beem app: Use the latest version of the app for your device.
- Follow the on-screen instructions to install and set up the beem app on your device. For additional support, select the appropriate onboarding guide below to ensure a smooth and secure setup experience:
Follow these steps to set up the beem app and ensure a secure, seamless experience on your iOS/iPadOs device.
1. Initial App Setup
- Launch the beem app and follow the in-app setup prompts.
Tips for the best experience:
- Enable notifications to receive important updates (e.g., security alerts and safety measures).
- Allow location access to ensure optimal app functionality.
2. Set Up a Secure Connection
Once the app setup is complete:
- Download the security profile when prompted. Confirm the download.
- Open : Settings → General → VPN & Device Management → Swisscom beemNet Root CA
- Tap Install (top right corner).
- Enter your device passcode.
- Tap Install again to confirm.
- Once installed, return to the beem app.
3. Enable Certificate Trust
To enhance data security and ensure trusted connections:
- Go to : Settings → General → About → Certificate Trust Settings
- Enable Full Trust for the root certificate: Swisscom beemNet Root CA
- Tap Continue, then return to the beem app.
4. Allow VPN Connection
When prompted, allow the VPN connection to activate secure communication.
5. You're all set!
Follow these steps to set up the app and ensure a secure, seamless experience on your Android device.
1. Initial App Setup
- Launch the beem app and follow the in-app setup prompts.
Tips for the best experience:
- Disable battery optimization for the beem app to ensure uninterrupted background activity.
- Allow display over other apps to enable important overlays and alerts.
- Enable notifications to stay informed about security updates and app activity.
- Grant location access to support full app functionality.
2. Install the Security Certificate
To establish a secure connection:
- Download the Swisscom beemNet Root CA certificate file: SwisscombeemNetRootCA.crt
- Open your device Settings and search for CA certificate (this may vary slightly by device).
- Locate and install the downloaded file: SwisscombeemNetRootCA.crt
- Confirm the installation when prompted.
- Return to the beem app.
3. Allow VPN Connection
When prompted, allow the VPN connection to enable secure and encrypted communication.
4. You're All Set!
Follow these steps to set up beem and ensure a secure, seamless experience on your macOS device.
1. Initial App Setup
- Launch the download file and follow the on-screen installation prompts.
- When prompted, enter your macOS password to authorize the installation.
- Proceed with the installation of the required package scripts.
- Enter your password again to confirm.
- Once the installation is complete, close the installer.
2. You're All Set!
1. Install beem
- Launch the downloaded beem installer file.
- Follow the setup prompts:
- Click Next to proceed.
- Click Install to begin the installation.
- When prompted, click Allow to authorize changes.
- Wait while the Setup Wizard completes the installation.
- Click Finish to launch the beem app.
2. You're All Set!
beem Device Management Enrollment
beem Device Management simplifies the policy management of mobile devices used within your company. Instead of configuring each device manually, beem automatically applies security settings to all enrolled devices as defined by the administrator. You can activate beem Device Management in the beem Hub.
For detailed information about this feature, visit the beem Device Management page.
INFO
Currently, beem Device Management is available for Apple (iOS, iPadOS, macOS) and Samsung (Android One UI) devices. Support for other devices and operating systems is in development.
Apple devices
Enrolling iOS, iPadOS, and macOS devices into beem Device Management requires Device Management for Apple to be activated, an active Apple Business Manager (ABM) account and an activated security policy for the device OS. If you do not have an ABM account, the beem Device Management setup guide in the beem Hub will take you to the creation process. Once you have an ABM account, you need to create an additional ABM Admin User for Swisscom to enable beem integration.
- Log in to your Apple Business Manager (ABM) account.
- Navigate to Users and click Add.
- Enter the requested details (such as your Managed Apple Account and e-mail address) according to the provided instructions.
- Assign the Administrator role and save the user.
- Select the newly created user and click Create Sign-In.
- Choose Send as an Email to deliver the login credentials.
Once this ABM Admin User account is created, Swisscom will perform several additional setup steps to complete the integration:
- Domain ownership: Confirms to Apple that your internet domain belongs to your organization and prevents unauthorized use.
- User directory federation: Links your user directory with ABM so employees can log in using their beem credentials.
- User provisioning setup: Creates managed Apple accounts automatically for all employees registered in MySB.
- MDM connection: Establishes a secure connection between Ivanti MDM and ABM, enabling device enrolment and management.
- beem app enablement: Allows the MDM platform to automatically install the beem app on user devices.
To enrol an Apple device (iOS, iPadOS, or macOS):
- On the device, open Settings.
- Navigate to General and VPN & Device Management.
- Select Sign in to Work or School account.
- Enter your managed Apple ID (e.g., username@customer.beem.swiss) and tap Continue.
- Complete the login prompts using your Apple ID as the username.
- Authenticate with your passkey and select Sign In to iCloud.
- When prompted, tap Allow and Allow Remote Management.
- Confirm with the passcode to finish enrolment.
Samsung devices
Enrolling Samsung devices (Android One UI) into beem Device Management requires Device Management for Samsung to be activated, an activated security policy for the device OS and the installation of the At Work EMM (Ivanti Inc) app. Once downloaded, it will guide you through the enrollment process.
- On your device, open the Google Play Store.
- Search for the At Work EMM app and install it.
- Once the installation is complete, open the app.
- In the Username field, enter your corporate e-mail address and tap Continue.
- You will be redirected to your organization's sign-in page.
- Enter your corporate e-mail address again and tap Continue.
- You will be prompted to set up a Passkey for future logins on this device.
- After signing in with the passkey, a "Registration has begun" message will appear. Tap Ok.
- You will then be redirected to a privacy disclaimer page. Tap Continue.
- Your phone will prompt you to create a "Work Profile". Tap Continue.
- On the next screen, review the Work Profile terms and tap Accept & Continue.
- Follow any additional on-screen prompts to allow the setup to finish.
- Set your new Work PIN when prompted.
- Swipe up to open your app drawer and tap the Work tab to view your secure apps.