ProMaster Master-Keying Mobile "PMM" is a service integrated with ProMaster Master-Keying 8 that allows jobs to be sent to mobile devices.
Your devices are paired to your PM8 with a device specific encryption key.
Both keys and doors may be sent to devices.
All design modules are supported.
PMM is available to PM8 users on all editions (Basic, Premium and Manufacturer).
PM8 version 8.16001.0.0 (20 April 2020) or later is required
It is a no-cost service that is available any time that your PM8 support and maintenance is active.
You may add 3 devices per user on your PM8 license.
Example
If you have 4 users on your PM8 license then you are able to add 12 mobile devices.
PMM is available for Android (From the Google Play Store) and iOS (from the Apple App Store). There is no cost to download and install ProMaster Master-Keying Mobile.
WH Software operates a publishing server through which published jobs are transferred. We host this service on Amazon EC2.
Each time you add a device in PM8 you are given a time limited 12 character pairing code to enter into the device and this establishes the authenticity of that device.
When you publish a job, you choose the destination device and also how long the job may live on the publishing server before it becomes unavailable and how long it may live on the device.
When the job expires it is no longer available, even if it is already on the device.
PM8 has three permissions to control who may configure publishing, who may configure devices and who may publish jobs.
Additionally, devices may be configured to be available on selected factories or system types if you prefer.
A device may be paired to multiple PM8 publishers.
All job information is encrypted to the specific device to which you sent it.
Each device encryption key is transferred securely and can be decoded only by knowing the ephemeral device pairing code.
At no time are the encryption keys available to us or anyone else so there is no way that the published job can ever be retrieved and read by any device other than the one to which you sent it.
Job information is encrypted using AES 256
Data transfer from PM8 to the publishing server and then to the device is encrypted again by using HTTPS data transfers.
There are three permissions in PM8 that control who may perform each part of the publishing process.
These are at the bottom of the security group list of permissions in the group Publishing.
| Permission | Description |
|---|---|
| Configure publishing | Allows PM8 to be configured as a publisher, thereby allowing devices to be configured. |
| Configure publishing devices | Allows devices to be created ready to receive jobs. |
| Publish jobs to devices | Allows jobs to be sent to devices from the job manufacturing screen. |
On the Setup and Admin menu choose Mobile services then choose Configure publishing.
You may choose if devices will be restricted to particular factories or system types.
You may choose the default duration for which the pairing code for a device is valid before it must be regenerated if the device has not fetched its encryption key.
You may choose the default length of time that a published job is available on the publishing server.
You may choose the default length of time that a published job is available on the device.
On the Setup and Admin menu choose Mobile services then choose Configure devices.
You may add multiple devices. The number of devices allowed is three per user on your PM8 license.
When you add a device, a 12 character pairing code is generated and this code must be entered into the device.
If you have turned on restrictions by factory or system type, you must configure those permissions for each device.
On the Manufacture Job window, there is a new button at the bottom Publish to device.
This lets you choose the device, override the job life if permitted by the device and publishing configuration and then send the job to the publishing service ready for collection by the device.