Home
Using the Console
This section provides information about using the SOTI MobiControl console to perform the various management tasks.
Monitoring Devices
Using Microsoft Health Attestation Reports
The Health Attestation feature provides administrators with the security health overview of their Windows Modern devices. This involves capturing several security measurements during boot time and protecting the reported data in the device's Trusted Platform Module (TPM). The boot measurements are then forwarded to the Health Attestation Service (HAS) to confirm the reported measurement’s authenticity and integrity. If a device report fails to meet the enterprise security compliance criteria, administrators can take preventative actions. They can perform actions such as unenrolling the device or removing its Virtual Private Network (VPN) configurations.
Using Health Policies
Setting Up a Health Policy

Welcome to SOTI MobiControl 2025.0 Help
SOTI MobiControl is an enterprise mobile management solution dedicated to helping you manage your enterprise devices. Use SOTI MobiControl Help to learn about all the features available through SOTI MobiControl.
Setting Up SOTI MobiControl
This section provides instructions for installing, activating, and upgrading SOTI MobiControl instances.
What's New in SOTI MobiControl
Using the Console
This section provides information about using the SOTI MobiControl console to perform the various management tasks.
- About the SOTI MobiControl Console
- Managing Users
- Managing Devices
- Managing Configurations
- Managing Applications
- Managing Data
- Monitoring Devices
  - Using Data Collection Policies
  - Using Telecom Expense Management Policies
  - Restricting Device Usage While Roaming
  - Using Location Services
  - Using Custom Data
  - Using Email (SMTP) Notifications
  - Using Microsoft Health Attestation Reports
    The Health Attestation feature provides administrators with the security health overview of their Windows Modern devices. This involves capturing several security measurements during boot time and protecting the reported data in the device's Trusted Platform Module (TPM). The boot measurements are then forwarded to the Health Attestation Service (HAS) to confirm the reported measurement’s authenticity and integrity. If a device report fails to meet the enterprise security compliance criteria, administrators can take preventative actions. They can perform actions such as unenrolling the device or removing its Virtual Private Network (VPN) configurations.
    - Using Health Policies
      - Configuring the Health Attestation Service
      - Setting Up a Health Policy
    - Security Parameters
    - Searchable Health Attestation Properties
      Use SOTI Search to find devices with specific Health Attestation properties by creating search queries based on the following health properties. See console/start/search_bar_advanced.html for task details.
  - Using Windows Defender Advanced Threat Protection
  - Using Device Notes
  - Securing Devices
  - Checking Battery Health on Panasonic Devices
- Troubleshooting Device Issues
- Generating Reports
- Managing System Settings
- Other Features
- SOTI MobiControl Console Reference
System Health
View vital system stats in a variety of interactive, up-to-date charts and tables.
SOTI MobiControl Administration
This section provides information about how to perform various administrative tasks related to SOTI MobiControl. These tasks include monitoring your SOTI MobiControl system, changing deployment settings, integrating SOTI MobiControl with third-party applications, and performing various modifications that extend SOTI MobiControl beyond its standard configuration.
Using Package Studio
This section provides information about how to use SOTI MobiControl Package Studio to create data packages for devices.
Using Script Commands
Send scripts and execute commands on your devices with SOTI MobiControl. Script commands are supported on the following platforms:
Using SOTI MobiControl Stage
This section provides information about how to use SOTI MobiControl Stage to quickly and easily enroll devices.
SOTI Cloud Link
Glossary
Notices

Setting Up a Health Policy

About this task

Configure a health policy for your Windows 10 or later devices.

Procedure

Select a device name to open its Device Information panel.
Switch to the Configurations tab and scroll down to the Advanced Configurations table.
Open Health Attestation Policy.
Establish a Health Policy that suits your needs by selecting Any or All from the compliance drop-down and enabling the desired security parameters.
- Where Any means that once a single parameter from the selected options is met, the device is non-compliant
- Where All means that all the selected parameters must fail before a device is considered non-compliant.
Select OK to save and apply your Health Policy.

Results

You can also change Health Policies at the device group level by following the same general steps. Open a Group Information panel and edit Health Attestation Policy in the Advanced Configurations table of the Configurations section.