1 Kaspersky Lab Mobile Device Management Deployment Guide Introduction With the release of Kaspersky Security Center 10.0 a new functionality has been implemented which allows centralized management of mobile devices running various operating systems (Apple ios, Android, Blackberry, Symbian, etc.) from one single location. Now, in addition to agent-based solution (called Kaspersky Security for Mobile), an agent-less MDM is available. This mobile device management (MDM) solution operates by integrating with existing IT infrastructure solutions like Exchange ActiveSync or Apple Push Notification service and making use of these technologies to provide a single place to manage thousands of devices. This document describes all steps required to setup a proper MDM-environment and integrate it with Kaspersky Lab solution. It is divided on 3 deployment parts: 1. Kaspersky Lab Mobile Device Management with Microsoft Exchange Active Sync (agentless) 2. Kaspersky Lab Mobile Device Management with Apple MDM Server (agentless) 3. Kaspersky Lab Mobile Device Management with Kaspersky Security for Mobile (agent-based) Each part has some milestones to complete to deploy MDM solution in a test-lab or production environment. The description of installation prerequisites (hardware and/or software requirements) is provided at the beginning of each part.
2 Kaspersky Lab Mobile Device Management with Microsoft Exchange Active Sync About Kaspersky Lab MDM through Exchange Active Sync The new feature introduced in Kaspersky Security Center 10 is the ability to see mobile devices in KSC console and to be able to manage Microsoft Exchange ActiveSync device profiles through Kaspersky Security Center. The actual enforcement of profile settings is done by Microsoft Exchange. Prerequisites You can use any virtualization software you wish to or deploy this solution to non-virtual environment, provided that your configuration meets the specifications described below. Also, due to some virtual environment constraints, an Android virtual device has been implemented on host machine (Microsoft Windows 7) in this configuration with Android SDK and Java being used for virtual android device deployment. It is recommended to use any supported non-virtualized Android device to test this deployment scenario. Hardware & software requirements: This deployment requires a minimum of 2 servers and 1 mobile device with hardware and software specifications provided below: 1) Microsoft Exchange host + Active Sync connector. The following software is recommended: Windows Server 2003 Standard/Enterprise R2 or Windows Server 2008 Standard/Enterprise R2, Microsoft Windows Server Microsoft Exchange 2007 SP3 / Exchange 2010 SP1 (with Hub Transport and Client Access roles). Install an Edge Server role for synchronizing mobile device profiles via Exchange Active Sync. Hardware specifications: CPU x64 processor, 2 GHz+, 4GB RAM, 100 Gb HDD (NTFS partitioned) 2) Kaspersky Security Center 10 Server + Domain Controller. The following software is recommended: Windows Server 2008 Standard/Enterprise R2, Microsoft Windows Server Active Directory Domain Services server role. 3) 1 or more mobile devices that support following operating systems: - Windows Phone - Apple ios - Android - BlackBerry - Symbian - etc. For the complete mobile devices list supported with Exchange Active Sync, please, see the following link or Please, note that this document addresses Kaspersky Lab products deployment and configuration only on Android and Apple ios devices. Other mobile OSs from the list above are also supported by Kaspersky Lab products mentioned in this document (where applicable) and have their configuration similar to what is described for Android and Apple ios devices.
3 Deployment 1. Kaspersky Security Center 10 server deployment. Before you begin your MDM deployment, ensure KSC10 is installed with all required MDM plugins and all necessary features: During installation ensure to select Mobile devices support as well as the following components: We will not describe all the rest KSC10 deployment steps here. Please, refer to KSC 10 Implementation Guide. If you don t have a KSC10 server deployed, please install it on a separate Microsoft Windows Server machine joined to local domain or install it to your DC instead. 2. Microsoft Exchange Server configuration. In this document, Microsoft Exchange Server bit platform is used for demo purpose. It is allowed to use any other available product version that supports ActiveSync. If there is no deployed Microsoft Exchange Server, install it with Client Access, Hub Transport and Mailbox roles. Install an Edge Role. If an existing Microsoft Exchange Server is used, please, re-configure it with the required roles. It is recommended to use Microsoft Exchange 2010 with Microsoft Windows Server 2008 Enterprise Edition 64bit. Create a new Microsoft Exchange server forest to provide services for your domain or use existing one. Add a test user mailbox mobile devices will connect to (i.e. used here). Enable Active Sync for this mailbox via Exchange Management Console (in either case, Kaspersky Lab product will not work). Create as many test user mailboxes as required, or use production ones.
4 3. Kaspersky Network Agent (NA) deployment. Deploy Network Agent to dedicated Microsoft Exchange Server (which is used for MDM in your environment) through either of methods available (remote installation from KSC server, local installation, etc.). Run klcsngtgui.exe utility to ensure NA is connected to the correct KSC server from which you are planning to manage mobile devices. If NA points to wrong Kaspersky Security Center (KSC) server then MDM server will not be available in KSC console. 4. Exchange Mobile Devices Server component installation. Before installing the actual Kaspersky Lab MDM component for Exchange (used for integration), ensure you enable Windows Authentication for your Exchange 2010 server site. Start IIS Manager and drill-down to Default Web-Site. Enable Windows Authentication for PowerShell virtual directory. Copy the MDM installation files folder located in where KSC10 extracts installation files (usually C:\ksc10.0\en\MDM4Exchange) to Exchange Server and run setup.exe. Follow the on-screen instructions to setup Exchange MDM Server:
5 On Welcome screen click Next and accept the License Agreement. Click Next. Select Standard mode (default) if you run stand-alone server, or Cluster mode if you run Exchange cluster and click Next. Kaspersky Lab product supports installing on Exchange cluster: If you select Cluster Mode no further configuration is required, continue with steps described below. Provide the account for managing product with administrative permissions on Exchange Server. Click Next: Provide an URL for Remote PowerShell connection. Click Next.
6 Click the Install button to start the installation. Note: You can install Kaspersky Exchange MDM Server component by any other available means (i.e. creating a Kaspersky Lab application installation package in KSC10 Console or using 3 rd party deployment solution). After Exchange MDM component is installed, switch back to Kaspersky Security Center and start it. Under Mobile devices your new Mobile Device Server should appear. If it s not ensure you properly installed network agent and it successfully connects to KSC10 server with MDM. If NA points to another KSC server, which is unavailable, it will not transfer any MDM data to your KSC server. In this case, use klmover tool to point NA to the correct server. Note: If you don t see the Mobile Devices menu option, click the Administration Server in the left pane and select View -> Configure Interface. Select Display mobile devices management check-box. You can also validate successful MDM Server installation by browsing to Managed Computers, selecting the client with MDM server installed (if it s not in a Managed Computers group, move it there manually) and clicking Properties. Ensure that Applications - Managing mobile devices via Exchange server has status Running.
7 Click Properties and select Mailboxes. A list of Microsoft Exchange mailboxes will appear. You can now manage Exchange mailboxes and profiles. Start by creating a new profile and assigning it to test user mailbox - In this document we describe managing an Android virtual device via Microsoft Exchange Active Sync. Other OSs settings related to Active Sync deployment may depend on that specific OS, but these settings are similar and identical in most senses. 5. Configure Android device to connect to Exchange Active Sync. In this document Android version configured as a virtual device has been used. Start your Android device and launch application (install it if it is not already installed on Android device) Click . An Client will start. Account setup page will appear. Start typing account name and Manual setup button will appear shortly. Click Manual setup.
8 On next page click Exchange account: On next screen type the details Domain\Username, Password and provide Server name:
9 Click Next. Wait a few seconds until the following message appears: Click Ok and move on to the next page. Here you allow Exchange server to manage security settings on device. Click Next. Activate device Administrator screen will appear. Click Activate
10 Wait for the final screen to appear and click Next: After this step synchronization of Android device with Exchange ActiveSync is complete. Before proceeding to the next step, ensure your device is connecting to Exchange Server. A security warning may appear that states Could not open connection to server due to security error. Swipe down the screen and open this system message. Click Ok. If you already configured a profile with password settings, the following screen will appear:
11 Click Password and type a new password for your account Click Continue. Confirm your password and click Ok. After this step click on sync button in application interface and wait for initial sync to complete. You may notice the following warning: In this case, switch to your Exchange Server, open Exchange Management Shell, browse to Recipient Configuration and enable Active Sync for your test user mailbox After this you ll be able to sync user s . You can now successfully sync with Exchange Active Sync powered by Kaspersky Security Center Create Exchange ActiveSync profile using Kaspersky Security Center Next step is to set up a profile through the means of KSC10 server. Open KSC10 and navigate to Mobile Devices -> Mobile Device Servers. Click Assign profiles to mobile devices button.
12 Use Change Profiles button to create a new profile. A window with Default Profile will appear. Click Add. A new window will appear. Provide a name for your profile and configure its settings Not all Exchange ActiveSync profile settings are copied to KSC server. Most settings that will definitely work on most devices are copied, but some features that are limited for use only on Windows-based mobile devices, will not be copied. Create a profile that will have password length complexity setting set to the minimum of 8 characters. Click Ok and this will save profile. Then on Mailboxes screen select the mailbox and click Assign profile. You will immediately see that Profile in use column populates with the profile you just assigned to this mailbox. Go to Android device and you will see that it is now managed. Open KSC console and go to Mobile devices->exchange ActiveSync mobile devices. You will see mailbox on the list connected
13 . You can view the detailed info on device by clicking Properties: This finishes the first deployment part. Kaspersky Lab MDM with Exchange Active Sync synchronization scenarios: Depending on IT infrastructure where Kaspersky Lab MDM is deployed there may be various options on how to synchronize mobile devices with Exchange Active Sync. Let s consider 3 of them: 1. Corporate users accessing local network resources through local wireless network 2. Mobile users connect to corporate resources via 3G network. 3. Mobile users connect to corporate resources from Wi-Fi hotspot. Mobile devices do not connect directly to KSC10 server. Mobile devices connect to Microsoft Exchange server instead, as usual. As long as there is connection with Exchange Server, KSC 10 will sync settings and apply it to devices via Exchange ActiveSync profiles. There s no need to separately route traffic from mobile device to KSC10 server in this deployment scenario. That is, when Exchange Active Sync is successfully configured to support all 3 described scenarios and KSC10 is able to reach Exchange Server the system is already setup, no further configuration is required here. If there s a firewall between mobile devices and Exchange server (like in scenario 2 and 3), some ports need to be open to allow connection. Please, see the following Microsoft article for details:
14 Kaspersky Lab Mobile Device Management with Apple MDM Server About Kaspersky Lab MDM with Kaspersky Apple ios MDM Server In addition to ActiveSync mobile device management, Kaspersky Security Center 10 now has the feature to manage Apple ios mobile devices, called Kaspersky Apple ios MDM Server. In comparison to managing Apple ios devices through Exchange Active Sync, this MDM technology provides more advanced security and management features especially for Apple ios devices. Kaspersky Apple ios MDM Server is required for this purpose, which can be deployed to Windows XP/Vista/7 machine or Windows Server-based OS (Microsoft Windows Server 2003/2008/2012). Prerequisites In order to manage Apple ios devices, a separate MDM server is deployed. This server can be deployed as standalone, or on the same server as KSC10. Basically, the environment is the same as in Part 1 of this guide. It is recommended, however, to create a standalone Mobile Device Management server on different hardware or VM, different from Kaspersky Security Center 10 server or domain controller (DC). Apple Configuration Utility (iphone Configuration Utility) is also required on host that is responsible for managing both KSC10 and MDM devices. Deployment 1. Preparation Install Network Agent on server acting as Kaspersky Apple MDM Server. It can be standalone, or mixed with other application servers. Proceed to the next step. 2. Local/Remote Apple MDM server installation Open Kaspersky Security Center console, navigate to Remote Installation -> Installation packages.
15 Click Create Installation package. A wizard will start. Provide a name for this package and click Next. Select.kud file with Apple MDM server. It is located in folder where KSC unpacks installation files by default. Upload the installation files to local server and start the remote deployment, selecting a separately configured Apple ios MDM server, which is already deployed on 1st step. If you deploy Apple MDM server manually (by copying files directly to remote host), follow the installation instructions provided here:
16 Launch the ios MDM Server installer on the host: Accept the Terms of License Agreement on next screen. Click Next. Provide the ports used for MDM connection. Provide an URL for connection to MDM server. Wait while the application installs. When installation finishes, ensure that MDM server is visible under Mobile Devices Servers in console:
17 3. Create an APN certificate signing request. APN stands for Apple Push Notification service a special Apple service acting as an intermediate between Apple device (iphone, ipad) and MDM server. When an MDM server wants to communicate with iphone or ipad, a silent notification is sent to the device via the Apple Push Notification service, prompting it to check in with the server. The process of notifying the device does not send any proprietary information to or from the Apple Push Notification service. The only task performed by the push notification is to wake the device so it checks in with the MDM server. All configuration information, settings, and queries are sent directly from the server to the ios device over an encrypted SSL/TLS connection between the device and the MDM server. In order to generate APN certificate you must have an access to Kaspersky CompanyAccount account and register Apple ID on Apple website. A detailed guide on how to generate APN is provided here: 4. Install APN certificate to Apple MDM server. Open Kaspersky Security Center console and navigate to Mobile devices -> Mobile Devices Servers subfolder. Select Apple ios MDM Server. Click Properties. On Certificates tab under Apple Push Notification certificate click Install. Select your new APN certificate and click Open. If everything is correct you should see the details with Name, Manufacturer and Expires on fields being populated. 5. Connecting ios mobile devices to Kaspersky Apple MDM Server After APN certificate is generated and installed users can connect their mobile device to Kaspersky Apple MDM Server. To allow them to do this, go to User Accounts tab in KSC10 Console, select mobile device users, rightclick and select Install ios MDM profile.
18 A new window will open with settings. Select your MDM server and choose notification methods (via SMS or via ). Provide a Notification message text: Now, the last thing to do is to install a profile on users devices. The user needs to open a link on his or her mobile device and proceed with steps to install it. After profile is installed, new MDM devices will appear under ios MDM mobile devices list in Mobile Devices pane in KSC10 console. 6. Manage Configuration and Provisioning profiles After you successfully setup APN certificate, you can start managing Apple ios devices from KSC10 console. This can be done via 2 types of profiles configuration profiles and provisioning profiles. For provisioning profiles see this article Both profile types are accessible by navigating to Mobile devices -> Mobile devices servers -> ios MDM mobile devices server.
19 Profiles can be assigned to any ios device, provided that it is visible. Apple Configuration Utility Apple has enhanced and locked down the security of mobile devices. To be able to edit configuration profiles, a special utility is required on each host, which is used for MDM management (KSC Console), called Apple Configuration Utility. This utility can be found under following link: Profiles can be applied based on specific device s user. To apply a profile this way, navigate to User Accounts tab and select the mobile device user
20 Click Install ios MDM profile to user s mobile device. The following window will appear. Configure required settings and click Ok. The profile will be applied immediately. Apple Push Notification network setup When MDM servers and ios devices are behind a firewall, some network configuration may need to take place in order for the MDM Service to function properly. The following ports need to be open for firewall connections between Kaspersky MDM Server and APN Service: Port Protocol Description 9799 TCP Send notifications from APN Service to MDM Server NA 9899 TCP Send notifications from MDM Server NA to APN Service 443 TCP External port to connect mobile devices to APN Service.
21 Kaspersky Lab Mobile Device Management with Kaspersky Security 10 for Mobile *Not all features are supported in all versions of mentioned OS ANTI-MALWARE FEATURES Anti-virus scanning of files as they are opened, saved, or executed ANDROID IOS SYMBIAN WINDOWS MOBILE BLACKBERRY YES NO YES YES NO Scanning of new apps after installation YES NO NO NO NO Heuristic scanning during protection YES NO NO NO NO Mobile device protection against network attacks via TCP/IP PRIVACY AND ANTI-THEFT FEATURES Blocking of the unwanted incoming calls and SMS Possibility to get the current phone number via SMS or when the SIM card is replaced or ejected Possibility to lock the device remotely if it gets stolen or lost Possibility to wipe user data remotely if the device gets stolen or lost NO NO YES YES NO YES NO YES YES NO YES NO YES YES YES YES NO YES YES YES YES NO YES YES YES Possibility to wipe all device data remotely YES NO NO NO NO Possibility to determine device coordinates remotely YES NO YES YES YES Encryption of files NO NO YES YES NO CONTROL FEATURES Blocking of malicious and phishing web sites (by default) and web site filtering by administrator-specified categories Management of installed apps on devices via Kaspersky Security Center Creation of a list of allowed, prohibited apps and the required apps. Corporate data protection with the containers Detection of root privileges or jailbreak on devices DEPLOYMENT OPTIONS YES YES NO NO NO YES NO NO NO NO YES NO NO NO NO YES YES NO NO NO YES YES NO NO NO Via YES NO NO NO NO Via SMS YES NO NO NO NO Via App Store PLANNED PLANNED NO NO NO Via Workstation YES NO YES YES YES Via MDM NO YES NO NO NO Local installation on a device YES NO NO NO NO
22 About Kaspersky Lab MDM with Kaspersky Security 10 for Mobile In addition to agent-less features, provided by integrating KSC10 with Microsoft Exchange ActiveSync and Apple ios MDM Server, a legacy agent-based technology is still available through KS 10 for Mobile solution. Please, see the latest release notes regarding Kaspersky Security 10 for Mobile on the following link: In this document Android mobile device management with KS 10 for Mobile is described. Please, be aware that the latest product version supports other mobile OSs, like Symbian, Win Mobile, Apple ios, Blackberry. Installation on these OSs is beyond the scope of this document. We will consider 1 deployment model (see Application deployment models for Android devices on page 15 of KS 10 for Mobile Implementation Guide) here. For other deployment options (SMS) on other supported OSs (Win Mobile, Symbian, Blackberry), please see the documentation KS 10 for Mobile Implementation Guide. Prerequisites Agent-based MDM with KS for Mobile requires at least 2 servers for deployment: one is KSC10, the other is a domain controller. server with configured recipient list is also required (i.e. Exchange server used in previous setups). It is recommended to deploy the same server configuration as used in Kaspersky Lab Mobile Device Management with Exchange Active Sync part. KS for Mobile deployment via requires a configured server with recipients (mobile device users), who will receive an with a link to download KS for Mobile product distribution package and run the setup. For this document we used Android OS device installation. For other supported mobile OS versions, please, see the document: Deployment 1. Preparation. Start your domain controller (DC), KSC10 server and Exchange server. Download the distribution package from Kaspersky Website -> Package for Security Center. 2. Enable mobile devices support on KSC10 server Open KSC10 Server console and right click Administration Server -> Properties. On Settings tab ensure Open port for mobile devices setting is enabled. Leave the default port
23 3. Create KS 10 for Mobile installation package (Android) Open Remote Installation -> Installation packages. Click Create installation package. A new window will open. Click Create Installation package for a Kaspersky Lab application. Provide a name for this package (i.e. MDM Mobile) on next screen. Click Next. On Selecting the distribution package for installation page click Select and browse to the folder where you extracted sc_package_en.exe archive (C:\KAV\KSM10). Click kmlisten.kpd and click Open. Click Next and start the upload process. Wait until all necessary files are uploaded. You will then see the package in the list of all installation packages: After this initial package is created, configure its settings by double-clicking MDM Android package or clicking Show installation package properties window in the right pane. On Properties window click Settings in the
24 left pane. Specify Administration Server address (or DNS name) and SSL port number, as well as the name of the group to allocate computers in (this group will be created automatically after first sync with Administration Server). Select Request address if you want the user to be prompted for address when he installs application to mobile device. Click Ok. Now it is necessary to create a stand-alone installation package to deploy product to mobile devices. Select your newly created package MDM Android and click Create stand-alone installation package. A wizard will start in a new window. Follow the wizard and create stand-alone installation package. Go back to installation packages window and select View the list of stand-alone installation packages. The window similar to this will open Copy the URL to this package. Open your application (i.e. MS Exchange Outlook OWA) or similar.
25 this link to users of mobile devices. 4. Install Kaspersky Security for Mobile on Android Start your Android device and wait while it loads. Open application, connect to Exchange server with your test user account If you ed an installation link on the previous step, you should now see a message with a hyperlink to download Kaspersky Security 10 for Mobile application. If not you can use KSC10 automated system to send s to specific user accounts. s can be sent by browsing to User Accounts tab, selecting an account and clicking Send message by Click the hyperlink to download Kaspersky Security 10 for Mobile product. Start the installer after download completes:
26 Wait while installation finishes: Start the application. Proceed with initial configuration. Click Continue Click Disable. You may notice the following message. It may appear if you already configured agentless ActiveSync. Click Deactivate. On next page configure Synchronization Settings
27 This completes the initial configuration wizard. Click Start App. You will see the default interface.
28 Ensure that device can see the KSC 10 Server and synchronize with it. Click Additional -> Synchronization to configure connection with KSC10 Server settings: There s no need to go and modify sync settings. Just click Synchronization and you will see the following on your mobile device screen: If synchronization attempt fails, please read the following article regarding sync with Kaspersky Security Center 10: As soon as synchronization occurs, configure the device and download necessary anti-malware updates. Ensure that this new mobile device is visible in KSC10. Login to Kaspersky Security Center Console and go to Managed Computers. Open Computers tab and click Add computers. Drill down to Unassigned computers, find KSM10 group and select
29 Your device should then be visible under Computers tab: 5. Configure and apply Kaspersky Security for Mobile 10 Policy. Now, go to Policies tab and create a new policy called Mobile Devices. Create this policy for Kaspersky Security 10 for Mobile product. This new policy will be immediately applied to your device. This Kaspersky Security 10 for Mobile policy is single for all types of mobile OSs supported by product. If connection to device is stopped for some reason the policy will be applied at next heartbeat. This finishes the deployment process for Kaspersky Security 10 for Mobile on Android device using an link. Using containerized application containers on Android device You can configure a container for your mobile device. Containerized application is application on mobile device that can be managed via security policy on Kaspersky Security Center server. For example, you can completely block application activities on all mobile devices. Let s see how it works. 1. Download application.apk file 2. Add.apk file to stand-alone installation packages list. Navigate to Installation packages and select Manage packages of mobile applications. A new window will open. Select new
30 A new package creation wizard will launch. Select this installation package you downloaded on first step and tick Create container with the selected app. Click Next. Wait while the package uploads and finish the wizard. This new package should now be visible. 3. Create a container policies for a containerized application Go to Managed Computers -> Policies tab. Double-click Mobile Policy. Click Containers on left pane
31 The following features are supported for security containers (Android and ios): Feature Description Options Authorization Data saving privileges Block copying data to other apps Internet Access This drop-down list lets you enable or disable authorization when an app is launched in a container on the user's mobile device The Data saving privileges section lets you restrict the rights to save data of a containerized app on the user's device. Restricts data copying by a containerized app on the user's device. Restrict Internet access of a containerized app. Disable. Kaspersky Security does not require the user to pass additional authorization when an app is started in a container. Domain credentials. When an app is started in a container, Kaspersky Security requires the user to pass authorization. The user must specify the domain login and password in Active Directory. The app will not start in the container without user authorization. User sets the password. When an app is started in a container, Kaspersky Security requires the user to pass authorization. The user must specify the password set at the first startup of this app in the container. The app will not start in the container without user authorization. Allow Allow before Exit Enabled/Disabled If enabled, the containerized app is unable to copy its data to other apps on the user's device. Allow. Containerized application has full Internet access with no restrictions Prompt. Kaspersky Security notifies the user that containerized application is attempting to access Internet. The user is prompted for action Messages Select a mode that restricts the sending of SMS by the containerized app. Calls Allows blocking a containerized app from receiving incoming calls Block. Containerized application is not allowed to access Internet Allow. The containerized app uses the SMS gateway to send messages without restrictions. Prompt. Kaspersky Security notifies the user of the device that the containerized app is attempting to send an SMS and prompts the user for further action. Block. The containerized app is not allowed to use the SMS gateway to send messages. Allow. The containerized app makes calls without restrictions. Prompt. Kaspersky Security notifies the user of the device that the containerized app is attempting to make a call and prompts the user for further action. Block. The containerized app is unable to make calls.
32 Configure these features similar to this screenshot: 4. Deploy containerized application to the device Now open Android device, open Browser application and follow the link to installation package on KSC server (usually it is like Click Install and wait while it finishes. Launch application after installation. See what happens when you start application and what happens when you open websites. Also ensure that container policy is applied. If it is necessary re-sync policy with server by clicking Synchronization in Kaspersky Security 10 for Mobile Application. Using containerized application on Apple ios device. Prerequisites: a client must be a member of the Apple Developer Program (up to 100 devices) or the ios Developer Enterprise Program. To install a containerized application to Apple ios, use KSC 10 server and KS 10 for Mobile product. To deploy application, you first need to sign a distribution package for this application (in comparison to Android OS, where no signing is required). Detailed information on how to sign a distribution package and upload an application to mobile device, using containerized application is described in the following article: The configuration and features are similar to container configuration on Android devices. Note: Not all Android and ios applications can support containerization feature.
Kaspersky Security 10 for Mobile Implementation Guide APPLICATION VERSION: 10.0 MAINTENANCE RELEASE 1 Dear User, Thank you for choosing our product. We hope that you will find this documentation useful
Sophos Mobile Control Installation guide Product version: 2.5 Document date: July 2012 Contents 1 Introduction... 3 2 The Sophos Mobile Control server... 4 3 Set up Sophos Mobile Control... 13 4 Running
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the product, please review the readme files,
Configuration Guide BES12 Cloud Published: 2016-04-08 SWD-20160408113328879 Contents About this guide... 6 Getting started... 7 Configuring BES12 for the first time...7 Administrator permissions you need
BlackBerry Enterprise Service 10 Secure Work Space for ios and Android Version: 10.1.1 Security Note Published: 2013-06-21 SWD-20130621110651069 Contents 1 About this guide...4 2 What is BlackBerry Enterprise
Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the product, please review the readme files,
Sophos Mobile Control Installation guide Product version: 3 Document date: January 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...4 3 Set up Sophos Mobile Control...16 4 External
Active Directory Management Agent Deployment Guide Document Revision Date: June 12, 2014 Active Directory Management Deployment Guide i Contents System Requirements...1 Hardware Requirements...1 Installation...3
Sophos Mobile Control SaaS startup guide Product version: 6 Document date: January 2016 Contents 1 About this guide...4 2 About Sophos Mobile Control...5 3 What are the key steps?...7 4 Change your password...8
Kaspersky Security for Mobile Administrator's Guide APPLICATION VERSION: 10.0 SERVICE PACK 1 Dear User, Thank you for choosing our product. We hope that you will find this documentation useful and that
Creating an Apple APNS Certificate 4/20/2012 Creating an Apple APNS Certificate Created by Britt Womelsdorf Edited by Mark S. Ciminello, MBA, PMP The purpose of this document is to outline the steps necessary
Novell Filr Mobile Client 0 Table of Contents Quick Start 3 Supported Mobile Devices 3 Supported Languages 4 File Viewing Support 4 FILES THAT CANNOT BE VIEWED IN THE FILR APP 4 FILES THAT GIVE A WARNING
Configuration Guide BES12 Version 12.3 Published: 2016-01-19 SWD-20160119132230232 Contents About this guide... 7 Getting started... 8 Configuring BES12 for the first time...8 Configuration tasks for managing
Avalanche Remote Control User Guide Version 4.1.3 ii Copyright 2012 by Wavelink Corporation. All rights reserved. Wavelink Corporation 10808 South River Front Parkway, Suite 200 South Jordan, Utah 84095
BlackBerry Enterprise Service 10 Version: 10.2 Configuration Guide Published: 2015-02-27 SWD-20150227164548686 Contents 1 Introduction...7 About this guide...8 What is BlackBerry Enterprise Service 10?...9
UP L18 Enhanced MDM and Updated Email Protection Hands-On Lab Description The Symantec App Center platform continues to expand it s offering with new enhanced support for native agent based device management
Vodafone Secure Device Manager Administration User Guide Vodafone New Zealand Limited. Correct as of September 2014. Do business better Contents Introduction 3 Help 4 How to find help in the Vodafone Secure
APNS Certificate generating and installation Quick Guide for generating and installing an Apple APNS Certificate Version: x.x MobiDM Quick Guide for APNS Certificate Page 1 Index 1. APPLE APNS CERTIFICATE...
Installing GFI MailArchiver Introduction This chapter highlights important points you should take into consideration before installing GFI MailArchiver on your network, so that you can make the best decisions
Manual Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: email@example.com Information in this document is subject to change without notice. Companies names and data used in examples herein are fictitious
Sophos Mobile Control Startup guide Product version: 3.5 Document date: July 2013 Contents 1 About this guide...3 2 What are the key steps?...5 3 Log in as a super administrator...6 4 Activate Sophos Mobile
Sophos Mobile Control Administrator guide Product version: 3 Document date: January 2013 Contents 1 About Sophos Mobile Control...4 2 About the Sophos Mobile Control web console...7 3 Key steps for managing
NSi Mobile Installation Guide Version 6.2 Revision History Version Date 1.0 October 2, 2012 2.0 September 18, 2013 2 CONTENTS TABLE OF CONTENTS PREFACE... 5 Purpose of this Document... 5 Version Compatibility...
Preparing for GO!Enterprise MDM On-Demand Service This guide provides information on...... An overview of GO!Enterprise MDM... Preparing your environment for GO!Enterprise MDM On-Demand... Firewall rules
Live Maps for System Center Operations Manager 2007 R2 v6.2.1 Installation Guide CONTENTS Contents... 2 Introduction... 4 About This Guide... 4 Supported Products... 4 Understanding Live Maps... 4 Live
QuickStart Guide for Mobile Device Management Version 8.5 Inventory Configuration Security Management Distribution JAMF Software, LLC 2012 JAMF Software, LLC. All rights reserved. JAMF Software has made
Virtual Data Centre User Guide 2 P age Table of Contents Getting Started with vcloud Director... 8 1. Understanding vcloud Director... 8 2. Log In to the Web Console... 9 3. Using vcloud Director... 10
OVERVIEW The Office of Information Technology is migrating its messaging infrastructure from Microsoft Exchange 2003 to Microsoft Exchange 2010. Moving to the latest technology will provide many enhancements
ManageEngine IT360 (Division of ZOHO Corporation) ) www.manageengine.com/it360 ManageEngine IT360 Professional Edition Installation Guide [firstname.lastname@example.org] [This document is a guideline for installing
Cloud Services MDM ios User Guide 10/24/2014 CONTENTS Overview... 3 Supported Devices... 3 System Capabilities... 3 Enrollment and Activation... 4 Download the Agent... 4 Enroll Your Device Using the Agent...
Installing GFI MailArchiver Introduction This chapter highlights important points you should take into consideration before installing GFI MailArchiver on your network, so that you can make the best decisions
Mobile Device Management Version 8 Last updated: 17-10-14 Copyright 2013, 2X Ltd. http://www.2x.com E mail: email@example.com Information in this document is subject to change without notice. Companies names
How to Obtain an APNs Certificate for CA MDM Contents How to Obtain an APNs Certificate for CA MDM Verify Prerequisites Obtaining Root and Intermediate Certificates Create a Certificate Signing Request
Sophos Mobile Control Installation guide Product version: 3.6 Document date: November 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...5 3 Set up Sophos Mobile Control...11 4 External
Team Foundation Server 2012 Installation Guide Page 1 of 143 Team Foundation Server 2012 Installation Guide Benjamin Day firstname.lastname@example.org v1.0.0 November 15, 2012 Team Foundation Server 2012 Installation
Pearl Echo Installation Checklist Use this checklist to enter critical installation and setup information that will be required to install Pearl Echo in your network. For detailed deployment instructions
QuickStart Guide for Mobile Device Management Version 8.6 JAMF Software, LLC 2012 JAMF Software, LLC. All rights reserved. JAMF Software has made all efforts to ensure that this guide is accurate. JAMF
Configuration Guide BES12 Version 12.2 Published: 2015-07-07 SWD-20150630131852557 Contents About this guide... 8 Getting started... 9 Administrator permissions you need to configure BES12... 9 Obtaining
GE Measurement & Control Remote Comms System Installation and User Reference Guide Contents BENEFITS OF REMOTE COMMS SYSTEM... 1 HOW THE REMOTE COMMS SYSTEM WORKS... 3 COMPONENTS OF REMOTE COMMS SYSTEM...
university STaff Email - android How to... Access your University Staff email on your Android device introduction The University of South Wales offers members of staff the use of an e-mail account which
GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios Devices GO!Enterprise MDM for ios Devices, Version 3.x GO!Enterprise MDM for ios Devices 1 Table of Contents GO!Enterprise
Configuration Guide BlackBerry Enterprise Service 12 Version 12.0 Published: 2014-12-19 SWD-20141219132902639 Contents Introduction... 7 About this guide...7 What is BES12?...7 Key features of BES12...
Veeam Backup Enterprise Manager Version 7.0 User Guide August, 2013 2013 Veeam Software. All rights reserved. All trademarks are the property of their respective owners. No part of this publication may
BTC STUDENT EMAIL GUIDE All students have a BTC email account. If you are unable to access your account, please contact your instructor. Student Email Each student has an email account. Your email address
Installing Kaspersky Security Center 10.0 on Microsoft Windows Server 2012 Core Mode Version Date Editor Comments 1.0 17 th January 2012 Pavel Polyansky Initial version. Introduction Server Core is a minimal
Feature List for Kaspersky Security for Mobile Contents Overview... 2 Simplified Centralized Deployment... 2 Mobile Anti-Malware... 3 Anti-Theft / Content Security... Error! Bookmark not defined. Compliance
Generating an Apple Push Notification Service Certificate for use with GO!Enterprise MDM This guide provides information on...... APNs Requirements Tips on Enrolling in the ios Developer Enterprise Program...
Sophos for Microsoft SharePoint startup guide Product version: 2.0 Document date: March 2011 Contents 1 About this guide...3 2 About Sophos for Microsoft SharePoint...3 3 System requirements...3 4 Planning
Netwrix Auditor for Active Directory Quick-Start Guide Version: 7.1 10/26/2015 Legal Notice The information in this publication is furnished for information use only, and does not constitute a commitment
GFI MailArchiver for Exchange 4 Manual By GFI Software http://www.gfi.com Email: email@example.com Information in this document is subject to change without notice. Companies, names, and data used in examples
Kaspersky Security Center 10 Getting Started A P P L I C A T I O N V E R S I O N : 1 0 M A I N T E N A N C E R E L E A S E 1 Dear User, Thank you for choosing our product. We hope that this document will
Chapter Title Time Warner Cable Business Class Cloud Solutions Control Panel User Guide Hosted Microsoft Exchange 2007 Hosted Microsoft SharePoint 2007 Version 1.1 Table of Contents Table of Contents...
NETWRIX EVENT LOG MANAGER QUICK-START GUIDE FOR THE ENTERPRISE EDITION Product Version: 4.0 July/2012. Legal Notice The information in this publication is furnished for information use only, and does not
Trial environment setup Exchange Server Archiver - 3.0 Introduction This document describes how you can set up a trial environment for using Exchange Server Archiver with Exchange Server 2007. You do not
Installing and Configuring vcenter Multi-Hypervisor Manager vcenter Server 5.1 vcenter Multi-Hypervisor Manager 1.1 This document supports the version of each product listed and supports all subsequent
StruxureWare Power Monitoring 7.0.1 Installation Guide 7EN02-0308-01 07/2012 Contents Safety information 5 Introduction 7 Summary of topics in this guide 7 Supported operating systems and SQL Server editions
efolder BDR for Veeam Cloud Connection Guide Setup Connect Preload Data uh6 efolder BDR Guide for Veeam Page 1 of 36 INTRODUCTION Thank you for choosing the efolder Cloud for Veeam. Using the efolder Cloud
AKRUTO AkrutoSync 4.0 User Guide Welcome Thank you for choosing AkrutoSync. AkrutoSync can synchronize your Contacts, Calendar and Tasks between Outlook on your computer and your Windows Phone. AkrutoSync
Team Foundation Server 2013 Installation Guide Page 1 of 164 Team Foundation Server 2013 Installation Guide Benjamin Day firstname.lastname@example.org v1.1.0 May 28, 2014 Team Foundation Server 2013 Installation Guide
Administration Guide BlackBerry Enterprise Service 12 Version 12.0 Published: 2015-01-16 SWD-20150116150104141 Contents Introduction... 9 About this guide...10 What is BES12?...11 Key features of BES12...
Microsoft Corporation Project Server 2010 Installation Guide Office Asia Team 11/4/2010 Table of Contents 1. Prepare the Server... 2 1.1 Install KB979917 on Windows Server... 2 1.2 Creating users and groups
LepideAuditor Suite for File Server Installation and Configuration Guide Table of Contents 1. Introduction... 4 2. Requirements and Prerequisites... 4 2.1 Basic System Requirements... 4 2.2 Supported Servers
JWCL031_appB_467-475.indd Page 467 5/12/08 11:02:46 PM user-s158 Appendix B Lab Setup Guide The Windows Server 2008 Applications Infrastructure Configuration title of the Microsoft Official Academic Course
Business mail Instructions for configuration of Outlook, 2007, 2010, 2013 and mobile devices CONTENT 1 MS OUTLOOK CONFIGURATION... 2 1.1 Outlook 2007, 2010 and 2013 adding new exchange account, automatic
Nexio Connectus with Nexio G-Scribe 2.1.2 3/20/2014 Edition: A 2.1.2 Publication Information 2014 Imagine Communications. Proprietary and Confidential. Imagine Communications considers this document and
Introduction EASYLABEL 6 has several new features for saving the history of label formats. This history can include information about when label formats were edited and printed. In order to save this history,
Mobility Manager 9.5 Users Guide LANDESK MOBILITY MANAGER Copyright 2002-2013, LANDesk Software, Inc. and its affiliates. All rights reserved. LANDesk and its logos are registered trademarks or trademarks
Ekran System Help File Table of Contents About... 9 What s New... 10 System Requirements... 11 Updating Ekran to version 4.1... 13 Program Structure... 14 Getting Started... 15 Deployment Process... 15
Remote Application Server Version 14 Last updated: 25-02-15 Information in this document is subject to change without notice. Companies, names, and data used in examples herein are fictitious unless otherwise
Getting Started Guide: Getting the most out of your Windows Intune cloud service Contents Overview... 3 Which Configuration is Right for You?... 3 To Sign up or Sign in?... 4 Getting Started with the Windows
NETWRIX FILE SERVER CHANGE REPORTER ADMINISTRATOR S GUIDE Product Version: 3.3 April/2012. Legal Notice The information in this publication is furnished for information use only, and does not constitute