Tech Huddle 2025

breakout

dragon

's

The

dungeon

Start game

© 2025 A game by Tech Huddle team

Thank goodness you’ve come! We need your help!You need to find the 4 Elemental Gems so that the sword has enough power and then defeat the fearsome dragon that is terrorizing our people…

LEVEL 1 - pingid GEM

pingid GEM

Watch out, a wandering skeleton is in your way! Get the PingID gem by passing a quiz...

Start level

Is it necessary for IT agents to verify the user's identity prior to unpairing their devices from PingID?

Yes, following the standard procedure according to KB0067097

No, IT agents can unpair the devices without verifying the user's identity, as long as the request comes from the user's registered email.

What tools are available for unpairing a device from PingID?

CIDM, NHTT, PingOne

CIDM, NHTT, PingID Agent

How would you help a user transfer PingID mobile app from an old device to a new device while still working?

On the device, you want to unpair (your 'old' device), open the PingID mobile app, tap the "Settings" icon, and then tap "Change Device"

Escalate the case to Infra ISS Identity Management MSP Support Team

Congratulations!! Here is your reward, you have earned it

As per KB5049295: "Remote extended identity verification is required to prove a user is the person he/she claims to be"

Oh, I've lost my mind, give me another chance!

As per KB5020423 KB5020537 KB5049295, you can use: CIDM, NHTT, PingOne

Oh, I've lost my mind, give me another chance!

As per KB5020423:" On the device, you want to unpair (your 'old' device), open the PingID mobile app, tap the "Settings" icon, and then tap "Change Device"

Oh, I've lost my mind, give me another chance!

LEVEL 2 - SITE SPECIFICS GEM

SITE SPECIFICS GEM

Choose the correct answer to get out of the room alive and get the next gem

Start level

Should the IT department follow the standard ID verification process for Indianapolis Field users in order to issue their initial login password?

No, since they already completed the verification process during onboarding, there is no need to follow it again when issuing their initial passwords

Yes, since they have not logged in yet and set up a CIDM profile, you will need to follow the standard verification process

What tool is used to retrieve the initial password for Indianapolis Field users?

LAAM

CIDM

What are you expected to do in case no entry is found for a Indy user in LAAM when obtaining their initial password ?

Escalate the case to DIA Indianapolis Onsite Support Team

Escalate the case to Infra ISS Identity Management MSP Support Team

What is within the scope of Roche's support for Apple Watch?

Users can connect their Apple Watch locally to their devices via Bluetooth/GPS, but activating cellular service for the Apple Watch on the corporate account is unsupported.

Users can connect their Apple Watch to the corporate account through Wi-Fi and use all services without restrictions, including cellular activation.

If a Genentech user misplaces their device but later finds it, or determines that it is permanently lost, what should they do?

Notify the Service Desk and Genentech Mobility (mobility_ops-d@gene.com) to inform them that the device is found or permanently lost, as a wipe may be required

Only contact the Service Desk if the device is permanently lost; no action is necessary if it is found.

Where and how do you return old or unused Genentech iPhones, iPads, or MiFis?

Complete the form at go.gene.com/reclaim, do not wipe the device, request a return label and box, and drop off at B31-2, 310 DNA Way, South San Francisco, CA.

Make sure to reset the devices to factory settings and drop them off at your nearest local recycling center.

Can requests such as International Service, Switch carriers/providers, Re-activate Service and Change phone number be submitted via the Rose Portal?

Yes, you can use the form called "iPhone / iPad questions - Genentech mobility sites"

No, all these requests must be submitted via mymobile.gene.com

You got the Site Specifics Gem!

As per KB0094625: "Since they have not logged in yet and set up a CIDM profile, you will need to follow the standard verification process"

Try Again

As per KB0094625: "Service Desk login to LAAM using the Second Factor Authentication option, at the top of the window (after login) there is a search box where you can type in the customer's User ID"

Try Again

since they have not logged in yet and set up a CIDM profile, you will need to follow the standard verification process

As per KB0094625: "If you are unable to find an entry for the customer, send a ticket to DIA Indianapolis Onsite Support Team"

Try Again

As per KB0094625: "Once they are logged into the laptop and their desktop is showing, proceed with walking them through connecting to Global Protect. Once connected to Global Protect, proceed to CIDM and walk the customer through setting up their security questions, and changing their password"

Try Again

As per KB0123999, they are in charge of overseeing the entire lifecycle of hardware assets, including deployment, support, repair, and refresh

Try Again

As per KB0100402: "They can connect an Apple watch locally to their devices via Bluetooth/GPS, however we are currently unable to activate service for an Apple Watch on the corporate account"

Try Again

As per KB5023010: "Inform the customer to notify the Service Desk and Genentech Mobility (mobility_ops-d@gene.com) when they find the device or if they have determined that it is permanently lost as a wipe will be required"

Try Again

As per KB0115548: "Please complete the following form: go.gene.com/reclaim. We request that you do not wipe your device as you might be subject to a legal hold"

Try Again

As per KB5028685, KB5006531, KB5006526 and KB0094761, all these requests must be submitted via mymobile.gene.com

Try Again

LEVEL 3 - Applocker GEM

Applocker GEM

Select the correct answer to get to the next level

Start level

Which of the following are examples of forbidden applications?

Box, Monday, Synthesia

AnyDesk, MS Visio, DropBox

If the end-user requires to exclude an entire directory from the Applocker policy, they must provide the full path of the application. Which of the following are valid paths?

C:\Users\<USERNAME>\Desktop\HostPackageInstaller\, C:\Program Files\<APPLICATION NAME>

C:\Program Files (x86), C:\Program Files\<APPLICATION NAME>

An application is blocked by AppLocker. It isn't on the forbidden list and is on the correct path. What is the next step to assist?

Open a request using iCare request Application Control - AppLocker management (Windows)

Escalate the case to Device Experience - Engineering Team Level 1 Support

You got the Applocker gem!

As per KB5047962: You can validate if the blocked software is included in the list of explicitly forbidden tools https://sites.google.com/roche.com/application-control/policies/list-of-explicitly-forbidden-tools

Try Again

As per KB5047962: Invalid Paths Examples: C:\, C:\Program Files, C:\Program Files (x86), C:\Users\Public, C:\Users\<USERNAME>Valid Paths Examples: C:\ETAX\PIOV\BIN\, C:\Program Files\<APPLICATION NAME>, C:\Program Files (x86)\<APPLICATION NAME>, C:\Users\<USERNAME>\Desktop\HostPackageInstaller\

Try Again

As per KB5047962: "If the issue persists after following all the steps above, please proceed to open an ICARE request for Windows - Application Control - AppLocker Management: https://roche.service-now.com/icare?id=sc_cat_item&sys_id=9b2ca82087fdc6501f3c63560cbb351b"

Try Again

LEVEL 4 - epicx GEM

EPICX GEM

Select the correct answer to earn the EpiCX gem

Start level

What elements should be in an EpiCX ticket before escalating?

Steps Performed, Related Records, State

Configuration item, Correct Service and Service Offering

Customer needs to install OCE-P in their device, what are the requirements prior installation?

Android 15

Updated Apple Device

Where can a customer create a new account in OCE-P?

Escalate the ticket to EpiCX Level 1.5 End User Support GCX with the account details so they can create it in the back end and inform the user once ready.

"Create New Account” button, select the Account Type and Record Types, fill in account details.

You got the EpiCX Gem!

As per EpiCX Guides for Service Desk (Slides 48,49 and 50):"Configuration item, Correct Service and Service Offering"

Try Again

As per EpiCX Guides for Service Desk (Slide 14):"OCE-P apps are only compatible with iOS; Android is not supported"

Try Again

As per EpiCX Guides for Service Desk (Slide 24):"Select the “Create New Account” button in the Advanced Search page, select the Account Type and Record Types. Fill in account details and then select create account"

Try Again

FINAL LEVEL - DRAGON

Defeat the dragon!

How dare you bother me!

THE END

You defeated the dragon. Everything returned to peace. And you’ve become became a legend!

© 2025 A game by Tech Huddle team

What will become of us!

SURE YOU WANT TO GO OUT?

Stay

Exit