Abstract: Identities of mobile communications devices and subscription credentials are maintained by an enterprise server. The subscription credentials are operative to enable access to subscription services of a mobile network operator. Control of the subscription credentials is delegated from the mobile network operator to the enterprise server. The enterprise server determines which of the mobile communications devices are to be provisioned by the subscription credentials. Policies for use of the subscription credentials by the determined mobile communications devices are identified. The subscription credentials and policies are applied to the mobile communications devices.

Abstract: Identities of mobile communications devices and subscription credentials are maintained by an enterprise server. The subscription credentials are operative to enable access to subscription services of a mobile network operator. Control of the subscription credentials is delegated from the mobile network operator to the enterprise server. The enterprise server determines which of the mobile communications devices are to be provisioned by the subscription credentials. Policies for use of the subscription credentials by the determined mobile communications devices are identified. The subscription credentials and policies are applied to the mobile communications devices.

Abstract: Identities of mobile communications devices and subscription credentials are maintained by an enterprise server. The subscription credentials are operative to enable access to subscription services of a mobile network operator. Control of the subscription credentials is delegated from the mobile network operator to the enterprise server. The enterprise server determines which of the mobile communications devices are to be provisioned by the subscription credentials. Policies for use of the subscription credentials by the determined mobile communications devices are identified. The subscription credentials and policies are applied to the mobile communications devices.

Abstract: Identities of mobile communications devices and subscription credentials are maintained by an enterprise server. The subscription credentials are operative to enable access to subscription services of a mobile network operator. Control of the subscription credentials is delegated from the mobile network operator to the enterprise server. The enterprise server determines which of the mobile communications devices are to be provisioned by the subscription credentials. Policies for use of the subscription credentials by the determined mobile communications devices are identified. The subscription credentials and policies are applied to the mobile communications devices.

Abstract: Mobile communications devices are managed by an enterprise operating an enterprise server. The enterprise server receives data indicative of identities of mobile communications devices. Identifiers indicative of subscription credentials that are operative to enable access to subscription services of the mobile network operator are received. Control of deployment of the subscription credentials is delegated from the mobile network operator to the enterprise server. The enterprise server determines which of the plurality of mobile communications devices are to be provisioned by the subscription credentials. A process is initiated to transmit the subscription credentials to the selected mobile devices.

Abstract: Disclosed is a mechanism for securely provisioning a client by authenticating that client during a dynamic configuration process. Rather than relying on post-configuration authentication schemes, the present invention combines security and dynamic configuration into a unified scheme. Any client device attempting to access a network may request configuration information from a configuration server associated with that network, but the server does not comply with the request until the client has successfully authenticated itself as a device authorized to receive configuration information for the network. The configuration server may provide the client with temporary configuration information that allows the client to proceed with the authentication process but that denies the client full access to the network.

Abstract: A client quarantine agent requests bill of health from a quarantine server, and receives a manifest of checks that the client computer must perform. The quarantine agent then sends a status report on the checks back to the quarantine server. If the client computer is in a valid security state, the bill of health is issued to the client. If the client computer is in an invalid state, the client is directed to install the appropriate software/patches to achieve a valid state. When a client requests the use of network resources from a network administrator, the network administrator requests the client's bill of health. If the bill of health is valid, the client is admitted to the network. If the bill of health is invalid, the client is placed in quarantine.