beem Hub

What is beem Hub?

beem Hub is the centralized management platform for administering your beem Security Edition. It serves as the inventory area within beem, providing a clear overview of your Security Edition, protected locations, and users.

Through beem Hub, you can:

• Customize your Security Edition
• Protect and manage users and locations
• Order new licenses
• Book Assisted Services
• ...and more.

You can access beem Hub via My Swisscom Business, which offers a unified interface to manage all your beem products and services, including the Security Edition, user licenses, Assisted Services, and more. Simply navigate to your inventory to find beem.

Accessing beem Hub

You can access beem Hub using one of the following methods:

Direct Access

1. Log in directly via the following URL: https://extranet.swisscom.ch/b2b/dashboard
2. Once logged in, go to: Inventory → beem → Company Services

Step-by-Step Access

1. Navigate to swisscom.ch
2. In the top-right menu, select: Business Customers → All Business Customers
3. Click Login → My Swisscom Business
4. Once logged in, go to: Inventory → beem → Company Services

Login Requirements

To access beem Hub, you must have a valid My Swisscom Business company login.

• If your organization already uses Swisscom services, use your existing credentials.
• If your organization is new to Swisscom, a login will be created and provided during the product ordering process.

ℹ️ For support on account creation and access rights, please refer to the My Swisscom Business Support Page

Navigating beem Hub

The beem Hub interface is structured into modular sections designed for intuitive navigation and efficient management. These sections are continuously enhanced to support evolving functionality and user needs.

Top Functions

This section provides quick access to the most frequently used features and administrative actions. It serves as a shortcut hub for essential tasks, enabling users to perform common operations with minimal navigation effort.

Company Services Tab

This section provides access to company-wide configuration options and service management features.

Get started with beem

This section provides comprehensive management of your initial required configurations, including company domain setup, user and device management, and security settings.

Device Management

Device Management simplifies the setup and administration of mobile devices used within your company. Instead of configuring each device manually, Swisscom automatically applies optimal settings tailored to your organization’s needs.

This feature is included with your beem Security Edition but can be activated optionally depending on your company’s requirements.

Enable Device Management

WARNING

Currently, Device Management is only available for Apple operating systems (iOS, iPadOS, macOS). Support for other operating systems will be introduced at a later stage.

To activate Device Management, click on Start setup and follow the guided steps.
During setup, you can:

• Choose whether to enable Device Management
• Define which operating systems your organization supports
• Select tailored security levels for both existing and new devices
• Automatically configure devices for optimal security
• Remotely erase lost or stolen devices to protect company data

If your organization already uses a third-party device management solution, you can choose to keep this feature switched off.

What happens on enrolled devices

When a device is enrolled into beem Device Management, the following changes are applied automatically:

• Security settings enforced: Device configurations are adjusted according to the security level defined by the administrator in the beem Hub.
• beem app installation: The beem app is set up on the device, enabling protection in unsecured networks and integration with zero trust access policies.

These actions are performed automatically during enrollment to ensure that devices comply with company security requirements and are ready to access business resources securely.

Notes on Apple setup

To enable iOS, iPadOS, and macOS devices in beem Basic Security Edition, you must create and configure an Apple Business Manager (ABM) account. If you do not yet have an ABM account, the wizard will guide you through the creation process. If you already have an ABM account, ensure that you create an ABM Admin User for Swisscom to enable integration.

How to add an ABM Admin User to your ABM account

1. Log in to your Apple Business Manager (ABM) account.
2. Navigate to Users and click Add.
3. Enter the required details and use the following email address: beem.device.management@swisscom.com
4. Assign the Administrator role and save the user.
5. Select the newly created user and click Create login information.
6. Choose Send as Email to deliver the login credentials.

Configure Apple Business Manager (ABM) Account

Once your ABM account is created, Swisscom will perform several additional setup steps to complete the integration:

1. Domain ownership: Confirms to Apple that your internet domain belongs to your organization and prevents unauthorized use.
2. User directory federation: Links your user directory with ABM so employees can log in using their beem credentials.
3. User provisioning setup: Creates managed Apple accounts automatically for all employees registered in MySB.
4. MDM connection: Establishes a secure connection between Ivanti MDM and ABM, enabling device enrollment and management.
5. beem app enablement: Allows the MDM platform to automatically install the beem app on user devices.

Enrol Apple Devices

To enrol an Apple device (iOS, iPadOS, or macOS) into beem Basic Security Edition:

• On the device, open Settings.
• Navigate to VPN & Device Management.
• Select Sign in to Work or School account.
• Enter your managed Apple ID (e.g., username@customer.beem.swiss) and tap Continue.
• Review the Terms of Service page and tap Accept.
• Complete the login prompts using your Apple ID as the username.
• On the next screen, select Sign in to iCloud.
• Authenticate with your passkey.
• When prompted, tap Allow Remote Management to finish enrollment.

Apple Device Security Levels

Each enrolled device is assigned a Security Level that defines how strictly corporate security policies are applied. Security levels control system configurations related to device protection, data protection, and privacy and security.

For Apple operating systems (iOS, iPadOS, and macOS), there are four predefined security levels.

All Apple devices in your organization share one unified security level.

WARNING

If you manage multiple Apple devices (e.g., iPhone, iPad, and Mac), the selected level applies to all of them simultaneously. Changing the level in the beem Hub updates all managed Apple devices at once.

Device security levels

Each security level defines the strength and restrictiveness of the policies applied to the device.

iOS / iPadOS Security Levels

Security Level	Device Protection	Data Protection	Privacy & Security
Security Level 1	Basic passcode restrictions	- Block Voice dialing and Siri (Device locked) - Managed apps cannot store data in iCloud - Block managed data open-in unmanaged apps	- Block apps from alternative marketplace/websites
Security Level 2	More passcode restrictions	- Block untrusted TLS certificate - Block USB accessory access	- Force Apple Wrist watch detection - Fraud warning
Security Level 3	—	- Disallow Screenshots and Screen Recording - Block USB/Network drive access in Files app - Block pairing with non-configurator hosts - Restrict AirDrop - Block Hand-off	- Disable Personalized ads
Security Level 4	—	- iCloud backup and data sync - iCloud backup is encrypted - Factory reset - Disallow installation of non-MDM configuration profile - Block unmanaged data open-in managed apps	- Enforce re-authentication before auto-fill

macOS Security Levels

Security Level	Device Protection	Data Protection	Privacy & Security
Security Level 1	- Basic passcode restrictions   • Min. password length   • Max. failed attempts - Automatic OS/Security updates - Allow iCloud keychain sync - Allow Firewall	—	—
Security Level 2	- More passcode restrictions   • Max. passcode age   • Passcode history	- Basic Safari restrictions	- Restrict disabling FileVault
Security Level 3	- More passcode restrictions   • Require complex Alphanumeric Password - File and Folder level security - More Safari restrictions - Restrict AirDrop (iCloud Contacts only)	—	- Disable Personalized Ads - Gatekeeper remains enabled - Restrict mirroring
Security Level 4	- Block Touch ID & Face ID	- iCloud backup and data sync - Disable File Share - Disable Guest Account - Disable AirDrop	- Stealth Mode enabled - Disable Find My Mac - Enable Fraud Warning

Device Inventory

The Device Inventory section gives you visibility and control over devices, users, and settings related to Device Management. It also allows you to continue the onboarding flow if it was skipped earlier.

Get started with MDM

The onboarding wizard remains available until MDM onboarding is fully completed, ensuring that you can resume the setup at any time.

• Device Services: Add external devices to the company’s general device inventory.
• Users:
  • View an overview of all users, the number of their registered devices, and each user’s compliance status.
  • Open a user detail page to see device-specific information, including:
    • Device identifiers (e.g., IMEI, OS, device status).
    • Compliance details, including reasons for non-compliance.
    • Active sessions.
• Device Actions (available soon)
  • Lock device: Restrict device access in case of loss.
  • Retire device: Remove a device from inventory when a user leaves the company and takes the device.
  • Wipe device: Reset a device to factory settings if it is lost or reassigned to another user.
• Settings: Adjust Device Management settings, including:
  • Continuing OS-specific onboarding.
  • Changing security levels.
  • Disabling Device Management.

Company Domain

Before creating user accounts within your company, it's important to review the domain currently assigned to your organization. This domain will serve as the default for all newly created users. For optimal integration, we recommend linking your own company domain to beem.

Add new domain

To add a new domain, navigate to Company domain abd click on Add New Domain and follow the onscreen prompts.

After adding the domain, your DNS settings will need to be updated with a unique text key. This may take up to 48 hours to complete.

Manage Users

The section Manage Users provides tools for user overview and management of beemNet protection at both individual and group levels. The user management wizard enables efficient adjustment of user-related settings.

Create Users

Creating individual user accounts ensures secure, personalized access and enables employees to perform their designated roles effectively within the system.

User Groups

You can organize users into groups to simplify the management of settings and policies.
To add a new user group:

• Navigate to Company Services
• Under 'Gets started with beem', select Manage users
• Click on Assign User Groups
• Select the users you want to include in this group, based on their roles. This helps you control access and set different security settings for different user groups.

You can also add more users later by selecting the already created group and choosing additional users to include.

Assign User Licenses

In the final step, you need to assign the appropriate license to each newly created user. Choose between 'Protect' or 'Protect & Connect'.

Security Settings

Security settings are determined by the selected Security Edition:

• Essential Security Edition: Select the ideal set of protective measures for your company or temporarily disable all beemNet protection and privacy.

• Basic, Plus and Premium Security Edition: Access a dedicated configuration dashboard to define custom security policies. This includes device-specific rules, access controls, and advanced threat protection settings.

For an overview of the specific Concerto settings available in the Basic, Plus, and Premium Security Editions based on supported use cases, please refer to the Concerto Features Matrix.

Company Services Section

Security Edition

In the Security Edition section, it is possible to Change edition or Cancel edition for the current beem Security Edition.

Swisscom offers four beem Security Editions:

• Essential: Secure surfing in beemNet

• Basic: Secure access to business applications

• Plus: Flexible protection and networking

• Premium: Preventing data loss and protecting data with AI

For a detailed comparison, refer to beem Security Editions.

Change Security Edition

This page will guide you through the steps to switch your Security Edition.
You can choose between Basic, Plus, and Premium Security Editions.

Switching to the Essential Security Edition is not available.

Select the desired Security Edition and choose your preferred activation date. Your selection will be added to the shopping cart for review. Follow the onscreen instructions to complete the process.

Cancel Security Edition

Cancelling the beem Security Edition cannot be completed entirely through self-service in My Swisscom Business.

The cancellation process can be initiated online by entering the desired cancellation date, reason, and other relevant details. After submission, the request is forwarded to the support team, who will follow up to confirm the cancellation and provide information regarding the contract and any applicable cancellation costs.

Capacity profile

The capacity profile determines how much simultaneous data flow is protected by beem, optimizing performance across users and locations.

Change profile is only available in the Basic, Plus, and Premium Security Editions.

How it works:

• Based on the number of active user licenses and locations, the expected data throughput is calculated.
• This helps determine the most suitable capacity profile for your company.

You can use the recommended profile or select one that best fits your needs.

Support Time: Choose your preferred support time to receive expert assistance from our IT specialists, who will help troubleshoot all contracted services during this period.

beemNet Settings

Concerto can be accessed directly through the beemNet Settings button.

For an overview of the specific Concerto settings available in the Basic, Plus, and Premium Security Editions based on supported use cases, please refer to the Concerto Features Matrix.

Assisted Services

Swisscom offers Assisted Services for organizations requiring expert guidance. These services include tailored packages aligned with the selected service and provide additional support options, such as:

• Personalized consultations
• Configuration support
• Administrative and technical assistance

These consultations enable customized configuration of security settings and address various administrative and technical requirements. Swisscom specialists provide support throughout the process.

Assisted Services can be booked directly via the beem Hub. Follow the onscreen prompts.

Location Services Tab

Location Services

The Locations tab displays all registered sites and allows for location-specific configurations, such as:

• Internet access
• Security & IT services
• Telephony
• blue TV

Apply changes independently per location to align with local operational needs.

User Services Tab

User Services

The User Services tab provides an overview of each user's mobile plan and associated settings.

To view or manage a user's details, go to the Mobile Plans Overview and click the arrow icon under the Action column next to the relevant user. This opens a detailed view where you can access and update the following settings:

• Account information
• Product details
• SIM devices
• Loyalty offer
• Roaming and blocking settings
• Links and documents