CAPTOR for BlackBerry is for the secure capture and management of sensitive business content - specifically scanned documents, photos, videos, and audio. Following are the policies that can be configured within BlackBerry UEM.
Once CAPTOR for Blackberry has been published to your organization’s BlackBerry UEM environment, through an approved trial or license purchase, the policies can be set by first finding the application in the Apps section and then adding a Configuration. The following information describes each policy in the CAPTOR for BlackBerry app Configuration.
CAPTURE
Enable Video Capture: Enables or disables the user’s ability to record video.
Video Length: If video capture is enabled, this creates the maximum length (in seconds) of a recorded video.
Image Caption: Caption is a visible watermark applied to photos and videos containing the username, time/date of capture, location of capture, and a note up to 75 characters.
- Always Show: enforces the visible watermark on all shared photo and video content
- Always Hide: removes the visible watermark on all shared photo and video content
- Allow User Toggle: allows the user to determine whether the visible watermark will be applied to shared photo and video content
Watermark: Adds a semi-transparent watermark to images and documents using the alpha/numeric string entered into the field. There is a 50 character limit and the font size will adjust based on the length of the string.
Watermark Time/Date Stamp: Adds time and date of content capture to the watermark.
Speech Recognition: *New for iOS v3.6.4* If enabled, audio and video recordings will go through a speech recognition process (typically conducted on the device but may also use external Apple servers) so that content is searchable by speech detected in the recordings. The user will also have to accept the Speech Recognition permission in the app.
Image Recognition: When enabled, the system will apply an AI/ML model to identify objects within photos and label them. Labels are searchable and can be reviewed in the Photo Info screen.
CONFIGURATION
Use BlackBerry Access as the default browser: Establishes BlackBerry Access as the default browser for any links accessed within the app.
Delete Trash After (days): Establishes the length of time (in days) that content will survive within the app’s Deleted folder until being permanently deleted from the container. Requires a numerical entry 0 - 999. If set to “0”, trashed content will be permanently deleted at the beginning of each user session.
Filename Base: Sets the file nomenclature for captured content as an alpha-numeric string up to 20 characters with no spaces, or enter $USERID$ as a wildcard value (for example, if a user’s email is jsmith@company.com the filename base would be “jsmith”). The specified base will be appended with the date and time the content was captured. Example: If Filename Base is set to “CAPTOR”, a captured photo will be given the name “CAPTOR_YYYY-MM-DD_HH_MM_SS.jpg”.
Override PDF Export Version: Enables or disables the PDF version for exported documents and photos. If left unchecked, the app will generate PDF in the standard PDF version 1.3. If checked, all exported PDF files will be created and validated in the version selected.
(PDF) Version: Sets the PDF Version for all exported media matching the PDF file format. Options include PDF 1.3, 1.4, 1.5, 1.6, 1.7 and all PDF/A subtypes. The app will validate PDF/A types as a step in the creation of the file.
File Size Limit (MB): Sets the maximum size of a shared file (in MB). Values entered may be 1 - 30. Please note, this does not impact the backup service.
Prompt for Location Services: Determines whether the application will prompt to allow location services and tag media with location information. Selecting User allows the user to decide. Selecting No will disable location services completely for the app. Location information is applied to the caption for photos and videos (if enabled), and the metadata.
Location Type: Requires location services enabled by policy and accepted by app user. Sets the type of location data the app records in the metadata and caption. Values selected may be: City (to display the City/State/Country), Lat/Long (to display the precise latitude and longitude coordinates), or Address (to display the entire address where the content was captured)
Camera Quality: Locks the CAPTOR camera in either High or Low quality capture modes. A value of High would lock the camera in the mode to capture the highest resolution photos. Setting this to Low would result in lower quality photos however the camera performance will be improved (for rapidly capturing photos). A value of User would allow the user to switch between modes.
Default Capture Mode: Sets the capture mode the app will launch to. If set to User, the user can select the default. Other options include Photo, Video, Doc Scan, or Audio.
Disable Capture Mode: Selecting a mode will disable and remove the functionality from the app.
ADVANCED SETTINGS
Override Device Default Language: For situations where the overall device language is not supported by CAPTOR, enabling this policy will allow selecting a language that is supported. This is very rare and should only be set in that unique situation.
Language: Overrides the app language to Dutch, English, French, German, Italian, or Spanish.
Disable Crash Reporting: Inkscreen collects and analyzes automated crash reports from CAPTOR to better respond to issues users may experience. Crash reports are anonymous and confidential. This insight helps to improve the stability and overall functionality of CAPTOR and we strongly urge all customers to leave this unchecked.
Disable App Analytics: Inkscreen utilizes occasional event-based logging (ex. aggregate times a specific button is pressed) to better understand how users interact with CAPTOR. All analytics data are anonymous and confidential and tied to any specific user or customer. This feature helps drive development decisions by indicating how popular certain features are.
BACKUP
Before setting up the service, you must establish a server on your network to receive and host the content. The server must be configured to include folders for each CAPTOR user which can be mapped to (the “path”). The folder names should match the userid (the characters before @ in their email address). For assistance please contact support@inkscreen.com.
Enable Backup: Master switch to enable the backup service.
Data Transfer Protocol: Establishes the data transfer protocol used to transfer content from employee devices to the backup server. Options include WebDAV, SMB, Microsoft OneDrive, BlackBerry Docs, or User. Selecting User would enable the employee to select their own protocol and enter settings of their choosing.
*Note 1. Selecting a specific data transfer protocol will automatically disable the alternative protocols. In other words, only one protocol can be configured for any specific user and/or device.
*Note 2. If any of the selected data transfer protocol settings are left blank (empty), the end user will be able to enter the value within the CAPTOR app settings.
If SMB is selected as the Data Transfer Protocol, please review the following settings:
**SMB iOS NOTES: CAPTOR for BlackBerry iOS supports SMB2 and SMB3. SMB3 encrypts all data traffic. iOS devices require the use of a VPN unless sharing over a local network and do not leverage BlackBerry Dynamics networking.
**SMB Android NOTES: CAPTOR for BlackBerry Android supports SMB2 and can either be used with a VPN or leverage BlackBerry Dynamics networking.
SMB Host: Assigns the IP address of the backup server.
SMB Path: Assigns the directory path for the user’s folder on the backup server. *Please note, the user folders must be created on the server by the IT Admin prior to setting this configuration. For most customers, the value entered should be $USERID$.
SMB User: Assigns the username for authentication to backup server. For most customers the value entered should be $USERID$.
SMB Password: Assigns the password for authentication to backup server. Most organizations will leave this field empty and notify employees of their individual passwords, which they would enter in the CAPTOR app settings.
SMB Share: Assigns the SMB share name. This field may not be required for all implementations.
**For more detailed instructions on setting up SMB backups please visit the following knowledge base article: https://inkscreen.freshdesk.com/support/solutions/articles/1000316184-captor-smb-backup-configuration-guide
If WebDAV is selected as the Data Transfer Protocol, please review the following settings:
WebDAV URL: Assigns the URL to the backup server. Value entered should be a valid URL and include the entire URL except for the user path. For example, if a user “dsmith” folder can be found at https://23-22.companynet.com/captorserver/dsmith, then the WebDAV URL entered should be: https://23-22.companynet.com/captorserver
WebDAV Path: Assigns the directory path for the user’s folder on the backup server. *Please note, the user folders must be created on the server by the IT Admin prior to setting this configuration. For most customers the value entered should be: /$USERID$/
WebDAV User: Assigns the username for authentication of backup server. For most customers the value entered should be $USERID$
WebDAV Password: Assigns the password for authentication to backup server. Most organizations will leave this field empty and notify employees of their individual passwords, which they would enter in the CAPTOR app settings.
If OneDrive is selected as the Data Transfer Protocol, please review the following setting:
**NOTE: The current implementation of OneDrive leverages MSAL. OneDrive authorization may require the user to have Microsoft Authenticator app installed on the device. Please ensure Microsoft Entra/AD Admin has granted permission to CAPTOR to access MS Graph, a requirement to write folders and files to a OneDrive account. Also review the Microsoft Entra/AD Conditional Access policies to ensure that they will not block the CAPTOR backup service to OneDrive.
OneDrive Path: Assigns the path to the intended folder within OneDrive. If left empty the user will be able to enter the value. The Path can be a single / or any value desired. The Path will add a folder to the user's OneDrive, and then write the CAPTOR folders and content within that main folder. **Please note, for this protocol, the user will have to enter their own username and password by opening CAPTOR and go to Settings>Backup Config>OneDrive and tap Authorize.
If DOCS is selected as the Data Transfer Protocol, the app will connect to a BEMS server to copy content to. Please review the following settings and refer to this blog post for more details.
URL: Address of the BEMS server. If left blank this will automatically populate for the user.
Path: Assigns the path for the user's folder on the backup server.
User: Assigns the username for authentication to backup server.
Password: Assigns the password for authentication to backup server.
Domain: Assigns the named domain (ex. INKSCREEN)
Repository: If left blank this will auto-populate for the user after selecting the BEMS server.
Automate Backup: The backup process can be automated or run manually by the end user. If Automate Backup is not checked, the end user will be able to backup content on demand. The manual backup process is enacted with a button found in the CAPTOR folder screen. An automated backup occurs on a schedule established with the next policy, and can only occur when CAPTOR is opened by the end user.
Automate Backup After (Days): Establishes the age of content before it is backed up. A value of 0 will instruct the system to backup content the first session after it is captured. A value of 3, for example, will instruct the system to backup content that was captured at least three days prior. A value of -2 will instruct the system to prompt the user to run backups at various
Delete After Backup: Content can be automatically moved to the trash folder in CAPTOR after it has been backed-up. Content in the Trash folder remains accessible to the user until the Delete Trash After (Days) policy has deleted the trash contents.
Delete Backed-up Content After (Days): Establishes the number of days after content is backed-up that it will be moved to the trash folder. A value of 0 will instruct the system to trash content immediately after it's been backed-up.
Notes 3. If your organization desires to have content completed deleted from the device container as soon as it is backed-up to the server, enter a value of “0” for both Delete Trash After (Days) and Delete Backed-up Content After (Days).
Content Quality: Establishes the quality of content to be backed-up. A value of Low will result in smaller files, for example.
Backup PDF Page Size: Sets PDF page aspect ratio for backed-up documents. Enter value us for US-based legal and letter standards, or eu for European-based A4 and A5 standards.
Show Captions on Backed Up: Determines if captions are included on photos and videos that go through the backup process.
To test the backup settings, launch CAPTOR and go to Settings>Backup Config and tap on the data transfer protocol your organization is using (WebDAV or SMB). Confirm all settings are entered (any setting entered in UEM will be locked in the app), and tap Test Configuration. An alert will confirm a successful test or identify where the backup process failed. Any failure will be identified with one of the following alerts and error codes:
- Could not reach server (09)
- Could not connect to server (19)
- Could not open directory at path (29)
- Invalid SFTP host or port (39)
- Invalid SMB share (49)
- Invalid WebDAV URL (59)
- Invalid SMB host (69)
- Directory not found at path (79)
- The request timed out (89)
- Unauthorized: Bad username or password (99)
###
For assistance, please contact Inkscreen:
(512) 888-9090