Abstract: A method for managing software on a device is provided. The method comprises: receiving, from a third party associated with the device, by a software administrator of an organization different from the third party, release information regarding software versions for the device; creating, by the software administrator, a profile that specifies whether or not at least one of the software versions is allowed on the device; and transmitting the profile, by the software administrator to a server computer associated with the third or other parties, to promote enforcement of the profile for the device.

Abstract: A method for managing software on a device is provided. The method comprises: receiving, from a third party associated with the device, by a software administrator of an organization different from the third party, release information regarding software versions for the device; creating, by the software administrator, a profile that specifies whether or not at least one of the software versions is allowed on the device; and transmitting the profile, by the software administrator to a server computer associated with the third or other parties, to promote enforcement of the profile for the device.

Abstract: A method for managing software on a device is provided. The method comprises: receiving, from a third party associated with the device, by a software administrator of an organization different from the third party, release information regarding software versions for the device; creating, by the software administrator, a profile that specifies whether or not at least one of the software versions is allowed on the device; and transmitting the profile, by the software administrator to a server computer associated with the third or other parties, to promote enforcement of the profile for the device.

Abstract: A method implemented by an enterprise server to facilitate activation of a virtual subscriber identity module (SIM) service on a mobile communication device. The method includes detecting a triggering event and in response to detecting the triggering event: determining that a SIM application on a physical universal integrated circuit card (UICC) currently inserted into the mobile communication device is associated with a mobile network operator (MNO) providing one or more virtual SIMs to which the enterprise server has access; determining whether the SIM application on the physical UICC is associated with one of the virtual SIMs provided by the MNO; and if the SIM application on the physical UICC is associated with a virtual SIM provided by the MNO, sending a message to the mobile communication device indicating that the mobile communication device is enabled for a virtual SIM service.

Abstract: A first-party vendor provides a licensed first-party service on one or more electronic devices, the first-party service associated with a licensed third-party service provided by a third-party vendor on the electronic devices. A cloud service of the first-party vendor may host one or more third-party license keys that are securely accessible to the first-party service, each third-party license key pointing to a corresponding global third-party license issued by the third-party vendor for access to the third-party service on the electronic devices. In some examples, distribution of a third-party license key to a particular device may be based on a current affinity of that device to a particular third-party license type, as determined from a mapping agreed upon by the first-party and third-party vendors between one or more types of first-party licenses and one or more types of third-party license, and from the first-party license type currently associated with the device.

Abstract: There is provided a method and apparatus for resetting a password for a device or managing the device, the device having an encryption perimeter. A device shares a public/private key pair with a server, the public key being on the device and the private key being on the server. An intermediate value is encrypted on the mobile device using the public key. If the password is lost or the device needs to be managed, the server can request the encrypted intermediate value, decrypt it, and send the decrypted value to the mobile device which may then resume operations. A new password may be provided by the server or the user may set a new password once the encryption key is recreated from the decrypted intermediate value.

Abstract: A method at a mobile device for creating a managed domain on the mobile device, the method initializing a container on the mobile device to house the managed domain; retrieving, from the mobile device, a management agent for the management domain; establishing policies to govern the creation of the managed domain; and configuring the container for the domain based on the established policies.

Abstract: A method at a user equipment to verify enablement of data billing splitting using a virtual subscriber identity module platform (‘VSP’) service, the method including receiving a credential at the user equipment, the credential including an international mobile subscriber identity (IMSI) from a physical universal integrated circuit card (UICC) subscriber identity module (SIM) application; storing the credential on the user equipment; checking, at a VSP service module on the user equipment, whether the credential matches an IMSI of a UICC currently inserted into the user equipment; if the checking determines a match, enabling the data billing splitting; and if the checking determines a mismatch, preventing enablement of the data billing splitting.

Abstract: A method implemented by an enterprise server to facilitate activation of a virtual subscriber identity module (SIM) service on a mobile communication device. The method includes detecting a triggering event and in response to detecting the triggering event: determining that a SIM application on a physical universal integrated circuit card (UICC) currently inserted into the mobile communication device is associated with a mobile network operator (MNO) providing one or more virtual SIMs to which the enterprise server has access; determining whether the SIM application on the physical UICC is associated with one of the virtual SIMs provided by the MNO; and if the SIM application on the physical UICC is associated with a virtual SIM provided by the MNO, sending a message to the mobile communication device indicating that the mobile communication device is enabled for a virtual SIM service.

Abstract: A method at a user equipment to verify enablement of data billing splitting using a virtual subscriber identity module platform (‘VSP’) service, the method including receiving a credential at the user equipment, the credential including an international mobile subscriber identity (IMSI) from a physical universal integrated circuit card (UICC) subscriber identity module (SIM) application; storing the credential on the user equipment; checking, at a VSP service module on the user equipment, whether the credential matches an IMSI of a UICC currently inserted into the user equipment; if the checking determines a match, enabling the data billing splitting; and if the checking determines a mismatch, preventing enablement of the data billing splitting.

Abstract: A method for managing software on a device is provided. The method comprises: receiving, from a third party associated with the device, by a software administrator of an organization different from the third party, release information regarding software versions for the device; creating, by the software administrator, a profile that specifies whether or not at least one of the software versions is allowed on the device; and transmitting the profile, by the software administrator to a server computer associated with the third or other parties, to promote enforcement of the profile for the device.

Abstract: A method at a mobile device for creating a managed domain on the mobile device, the method initializing a container on the mobile device to house the managed domain; retrieving, from the mobile device, a management agent for the management domain; establishing policies to govern the creation of the managed domain; and configuring the container for the domain based on the established policies.

Abstract: There is provided a method and apparatus for resetting a password for a device or managing the device, the device having an encryption perimeter. A device shares a public/private key pair with a server, the public key being on the device and the private key being on the server. An intermediate value is encrypted on the mobile device using the public key. If the password is lost or the device needs to be managed, the server can request the encrypted intermediate value, decrypt it, and send the decrypted value to the mobile device which may then resume operations. A new password may be provided by the server or the user may set a new password once the encryption key is recreated from the decrypted intermediate value.