Mobile Device Manager. Android User Guide

Transcription

1 Mobile Device Manager Android User Guide September, 2013

2 Mobile Device Manager Android User Guide i Contents Overview... 1 Supported Devices... 1 System Capabilities... 2 Enrollment and Activation... 3 Download the Agent... 3 Enroll Your Device Using the Agent... 3 Using the Agent... 4 GPS... 4 NitroDesk TouchDown... 5 TouchDown Features... 5 Install NitroDesk TouchDown... 6 Securely Manage , Contacts, and Calendar... 8 Manage Advanced Settings... 9 Using the App Catalog App Catalog Navigation Using the Self-Service Portal Launching the Self-Service Portal Bookmark Logging In to the Self-Service Portal Using a Web Browser Selecting a Device in the Self-Service Portal Device Details Menus Device Information Menu Managing Personal Content with the Secure Content Locker Using the Secure Content Locker System Requirements Using the Secure Content Locker Authentication Navigating the Secure Content Locker Downloading and Viewing Content Managing Content Recommended Third Party Viewing Applications... 25

3 Guide Name ii Using the Browser Powered by

4 Mobile Device Manager Android User Guide 1 Overview Mobile Device Manager (MDM) provides complete mobility management solutions for enterprise deployments. This user guide describes these features from the perspective of the mobile device user and covers the following topics: Enrolling your Android device How to use the agent Configuring your on your device using NitroDesk Touchdown Downloading enterprise and public apps into your device Administrating your device(s) using the Self-Service Portal Using the Browser Using the Secure Content Locker Supported Devices Android management capabilities may differ depending on the model or operating system. Native Device Support MDM supports Android smart devices running operating system versions NOTE: If your Android device is not natively supported, you will be required to purchase and install TouchDown from the App Store. See page 5 for more information. The SAFE Solution: Samsung Approved For Enterprise In addition to the standard MDM management features, MDM provides the following advanced management capabilities for Samsung Approved for Enterprise (SAFE) devices (Samsung Galaxy Tab 7.7 and Samsung Galaxy Note ) through Samsung API integration: Security Policy Improvements Enterprise Integration Telecom Usage Tracking Secure Content Locker Advanced Security Lenovo Android Tablets There are additional management features on Lenovo Android Tablets. These features include: Enhanced Device Restrictions Require SD Card Encryption Other Supported Devices LG HTC Motorola

5 Mobile Device Manager Android User Guide 2 System Capabilities Once your mobile device has been enrolled in MDM, your organization will be able to communicate with and manage your device in a number of ways. Your device can be enabled with: Enterprise settings, policies, and restrictions through over-the-air configuration profiles o Allows your device to instantly connect to corporate Wi-Fi and VPN networks. Additional device security to protect your device and ensure compliance with corporate security policies Enterprise application access to internally developed or recommended public applications Secure mail, calendar and contacts to provide you with mail, and your administrator with a layer of visibility and control on top of the enterprise s existing infrastructure Secure corporate content access to documents deployed through the Secure Content Locker Personal Device Management to allow end-users to manage and monitor their own devices from a browser or other devices using either the agent or the Self-Service Portal Applications can be pushed to your device automatically, or made available to you through the App Catalog. These include recommended public applications, or even custom built, internal applications available only to devices specified by your organization. Your IT administrator will also be able to obtain the following information about your device: Asset Information such as platform, model, operating system, Serial, IMEI, and UDID Security Compliance Information such as compromised status, encryption status, and passcode and restrictions settings Network / Telecom Information such as Wi-Fi, Cellular, Bluetooth, and roaming status Additional Information such as GPS location, applications, profiles, and certificates

6 Mobile Device Manager Android User Guide 3 Enrollment and Activation Before you can enroll your device in MDM, you must have the following information: Enrollment URL: This URL brings you to the enrollment screen. It is specific to your organization s enrollment environment (e.g., mdm.acme.com ). Group ID: Your administrator determines your Group ID, which associates your device with your corporate role. User Credentials: This Username and Password can be the same as your network directory services credentials, or your administrator may define new credentials for you. Your administrator should have sent you this information via an or a text message to your device. If you have not received this information, contact your administrator. Download the Agent On your device, open the Google Play Store and search for "MDM Agent." Select the Agent from the search results screen and install it onto your device. NOTE: In order to download the Agent, you must have a Google account and access to the Google Play Store (Android Market). Enroll Your Device Using the Agent Open the agent on your mobile device. Enter in your Enrollment URL and your Group ID. After clicking Enroll Device, the user must enter the token received in the enrollment . On the next screen, enter your User Name and Password (provided by your administrator) and tap [Next]. Your device will begin to enroll under MDM. Choose if your device is employee owned, corporate shared or corporate dedicated. Read through and accept the rest of the prompts and notifications to complete the enrollment process.

7 Mobile Device Manager Android User Guide 4 Using the Agent Once your device has been enrolled, you can use the agent to access and manage different types of device information and settings. You can use the tabs at the top of the screen or your device's menu key to access the following information: By tapping the Device Information tab, you will be provided with detailed information about your device, such as: o Device Details Includes hardware and software info, carrier info, network info, GPS info (see below), battery life info, and more o Profiles lists installed profiles o User Details User info from MDM o Installed Applications lists all installed applications o Managed Applications lists all applications installed and managed by MDM o Installed Certificates Lists all installed Security Certificates Use the Self Service tab to manage configurations such as: o VPN Connections o Wi-Fi Configurations o Agent settings o Device Encryption Settings The Notifications tab contains recent notifications from your administrator and from the agent. Use the Android Menu key to access additional options, including a link to the App Catalog (if enabled by your administrator). GPS One of the advanced data elements collected by MDM for enhanced device security and management is GPS Details. These details are very useful if your device is lost or stolen. The agent gathers GPS location data (subject to signal availability) and provides that information to the Web Console administrator. Additionally, your administrator may choose to display GPS information in the agent and/or in the Self-Service Portal. The ability to perform the following tasks is subject to the settings established by your administrator: To view the most recent GPS sample: o Tap the Device Information tab Device Details GPS Information. To manage GPS tracking settings: o Tap the Self Service tab Agent Settings Advanced Settings Interrogator Settings. Under the GPS Sampling Settings, you can view and edit the following GPS tracking details: GPS Sampling Frequency Time GPS Sampling Frequency Distance

8 Mobile Device Manager Android User Guide 5 NitroDesk TouchDown The NitroDesk TouchDown application is used to securely configure and access on your Android device. The TouchDown app is necessary for the following reasons: The native device mail client on most Android devices is not encrypted. NOTE: Touchdown is not necessary on certain devices such as Samsung SAFE devices. In addition to being a security risk, the native client does not provide the functionality needed for MDM s over-the-air configuration services. MDM integrates with NitroDesk TouchDown to provide a mail client that is securely encrypted, fully functional, and easy to use. Your administrator configures the integration between MDM and NitroDesk Touchdown, but you need to install the TouchDown application. Contact your administrator with any questions about configuration. TouchDown Features If you are not using a device with advanced security capabilities, you will need to use the TouchDown application for secure corporate access. The TouchDown app is compatible with Android Operating Systems 2.2 and higher. If you are using an older operating system, contact your administrator or Support. Some of the enhanced security and functionality provided by TouchDown include: Integration with multiple mail servers (including Exchange Server 2003+, Microsoft Office 365, and Novell GroupWise) Reliable end-user configuration Policy Enforcement Data Loss Prevention Compliance Monitoring Easy Licensing Advanced sync settings password protection Notification settings control Enforced encryption for data storage

9 Mobile Device Manager Android User Guide 6 Install NitroDesk TouchDown 1. After you have installed the agent, open the Android Market and search for TouchDown for Smartphones or TouchDown for Tablets (depending on your device). 2. Install the TouchDown application. 3. When the TouchDown app installation is complete, you should receive a notification that Configuration is Ready. If you receive this notification, continue to Step 4. If you do not receive this notification, open the agent and complete the steps below to finish the setup process. Tap the Notifications tab. Tap the Configuration message. 4. After selecting the Configuration notification, you are directed to a TouchDown Quick Configuration screen similar to the one shown below. Depending on the Security Settings deployed by your administrator, you may need to enter your login Username and Password to complete the process.

10 Mobile Device Manager Android User Guide 7 Your corporate access is now securely configured through NitroDesk TouchDown integration with the MDM solution. 5. To access your , open the TouchDown application.

11 Mobile Device Manager Android User Guide 8 Securely Manage , Contacts, and Calendar It is easy to manage and navigate through your inbox through TouchDown. While TouchDown integrates with the MDM solution and the native server to sync and configure access, you have control over many advanced settings through the TouchDown application. Manage Tap the Mail icon to view and manage your inbox. Manage Contacts All corporate contacts are synced to your device though the TouchDown application. Tap the Contacts icon to view and manage your contacts. Manage Calendar Tap the Calendar icon to view and edit your corporate calendar.

12 Mobile Device Manager Android User Guide 9 Manage Advanced Settings To manage advanced settings for your , calendar, tasks, and other related data, select Settings > Advanced. From this menu, you can view and change the following: Past number of days for mail and calendar to sync Mail folder sync management Signature settings Notification settings Maximum size Attachment settings

13 Mobile Device Manager Android User Guide 10 Using the App Catalog MDM enables enterprises to securely deploy public and internal applications to users of managed devices via a Custom Enterprise App Catalog. The App Catalog allows you to quickly access recommended public applications and internally deployed applications from a single centralized location. In certain situations, your administrator might chose to push some applications directly to your device. The App Catalog provides you with the following abilities: View the details of public, internal, purchased, or web applications. Install recommended public, internal, purchased, or web applications. Browse and filter apps by type and category. View applications that your organization has blacklisted. Search applications by name. Receive notifications on application updates for both managed and unmanaged applications. Install application updates for managed applications. Search for a managed application. Authenticating into App Catalog using user name and password. Add ratings and comments for public, internal or purchased applications. View overall rating for the applications based on ratings provided by other users and view specific comments provided by other users. View application status whether an application is Not Installed, Installed, Needs Update, or is Blocked. To open the App Catalog on your device: 1. Open the Agent. 2. Press the Menu key on the phone and then tap the App Catalog. The device defaults to opening the Internal screen as shown below:

14 Mobile Device Manager Android User Guide 11 App Catalog Navigation Once opened, you can use the icons in the screen to navigate to the different sections of the App Catalog. You can browse an application by: Internal Tapping on Internal shows all the Enterprise Internal applications developed specifically for users within your organization. Since these apps were designed for the enterprise and are proprietary, the apps cannot be used by anyone outside of the enterprise. You may perform the following: 1. If the application is installed on your device, tap on the app icon to open the app. 2. If there is an [Install] button next to the app, tap the button to install the app on your device. 3. To uninstall an app, tap [Uninstall]. All Categories The All Categories page provides a categorized list (as determined by your administrator) of applications in the App Catalog (if no apps appear on this page, then your administrator has not created any app categories). Click All Categories to view, open and install applications in the defined category. Detailed Information Additional details available to you before installing the applications on the list: Tap the application to view: o App Name Shows the application name. o App Categories Shows the application category. o App type Displays the application type public or internal or purchased. o Description Delineates briefly about the application. o Version Displays application version. o App rating Shows the application rating given by users. o Reviews Displays comments on application provided by both administrator and other users. NOTE: You can add your ratings and comments on your device for approved internal, public, and purchased applications from the Application Catalog. To install the application tap [Install] button next to the app, tap the button to install the app on your device. You can search the App Catalog to quickly locate a specific app. o To search for an app in the App Catalog, enter the Name of the app in the search field. Blacklisted apps are prohibited applications, as determined by your enterprise or administrator that should not be installed on your device.

15 Mobile Device Manager Android User Guide 12 o Click X to view the number of blacklisted apps detected on your device. NOTE: Your administrator may take action, such as removing corporate access or un-enrolling your device from MDM. Application status indicators helps to identify whether an application is Not Installed, Installed, Needs Update or is Blocked. Not Installed No version of the Application is currently installed on the device. Installed The latest assigned version is currently installed on the device. Needs Update The latest version of the application is installed, but a previous version of the application is installed. Blocked The application is blocked due to compliance.

16 Mobile Device Manager Android User Guide 13 Using the Self-Service Portal MDM offers the ability for you to remotely administer devices enrolled under your user account through the Self- Service Portal (SSP). The administrator must enable the appropriate settings in order for you to access the Self-Service Portal. There are two ways to access the Self-Service Portal: Login through a browser. Launch the Self-Service Portal by opening a bookmark deployed to your device by your administrator. NOTE: Your administrator must push the web clip to your device in order for this option to work. Launching the Self-Service Portal Bookmark The administrator can push down a Self-Service Portal bookmark to your Android device that will appear as an icon on one of your home pages (if no shortcut displays, see Logging In to the Self-Service Portal Using a Web Browser). To access the SSP through this shortcut: Tap the SSP icon to open the web clip. o A browser opens and automatically directs you to your Self-Service Portal URL. Enter your credentials (the Group ID, Username, and Password you used to enroll in MDM). Continue to Selecting a Device in the Self-Service Portal. Logging In to the Self-Service Portal Using a Web Browser You can log into the Self-Service Portal through a web browser (you can use a computer or your device browser). Follow the steps below: 1. Navigate to the Self-Service Portal website using the URL provided to you by your console administrator. 2. Enter in your Group ID, Username, and Password. These are the same credentials you used to enroll your device in the MDM. Selecting a Device in the Self-Service Portal Upon successful login to the Self-Service Portal, the Select a Device homepage appears and displays all the devices enrolled under your user account. 1. Take the appropriate action depending on if you are logging into the SSP as a single or multiple device user: Single Device Users: Click the device you want to manage. Multiple Device Users: To show all devices enrolled under your user account, click the [All Devices] button. 2. The Device Details screen displays. The default screen is the Security tab.

17 Mobile Device Manager Android User Guide 14 Device Details Menus There are two menus on the Device Details screen you can use to manage devices enrolled under your user account. Remote Actions Menu This menu is located at the top of the screen and allows you to perform actions to all devices enrolled under your user account. NOTE: All remote action permissions are determined by your administrator and therefore you may not be able to perform all listed actions. Device Query: Manually requests the device to send a comprehensive set of MDM information to the Web Console. Send Message: Sends an , text message, or Push Notification over-the-air to the selected device. Lock Device: Locks the selected device so that an unauthorized user cannot access it. This feature is useful if the device is lost or stolen. Find Device: Sets the frequency and tempo of a sound emitted by your device in the instance that it is lost. The sound is intended to help you locate the misplaced device.

18 Mobile Device Manager Android User Guide 15 Clear Passcode: Clears the passcode on the selected device and will prompt for a new passcode. This is useful if a user forgets their device passcode and is locked out of their device. Device Wipe: Wipes all data from the selected device, including all data, , profiles, and MDM capabilities and returns the device to factory default settings. Enterprise Wipe: Wipes all corporate data from the selected device and removes the device from MDM. All of the enterprise data contained on the device is removed, including MDM profiles, policies, and internal applications. The device will return to the state it was in prior to the installation of MDM. Sync Device: Syncs device to the console. Device Information Menu Device Details allows you to view categorized information about all devices enrolled under your user account. The ability to view all information in the Device Details, in addition to the ability to perform any actions in the Profiles and Apps screens are subject to the permissions established by your administrator. The Security tab is the default view for the SSP. Security The Security screen shows the following general security information about a particular device enrolled under your user account: Hardware: Whether or not that device has been compromised. Encryption: Level of encryption for that device. Certificates: If certificates are installed, how many, and number of days remaining until certificate(s) expire. MDM: Whether or not the device is enrolled in MDM. Passcode: Whether or not a passcode is present and if it meets the passcode requirements. Network: Status of the SIM card, if the device is roaming, and if roaming is enabled. Profiles: Whether or not the device has a profile and if it has been installed. Applications: The total number of apps currently installed on the device.

19 Mobile Device Manager Android User Guide 16 Compliance The Compliance view shows the compliance status of the device, including the name and level of all compliance policies that apply to the device. Since the administrator can perform certain actions to non-compliant devices, it is important to make a note of the policies in effect to ensure that your device remains compliant. The primary fields to take note of are the following: Status Lists whether or not the device is compliant with the compliance policies (listed in the next column) Policy Name Lists all compliance policies in effect for the device Last Compliance Lists the last compliance action taken on the device. Next Compliance Shows the next compliance action if the device does not come into compliance. Actions Taken Lists compliance actions taken on the device. Profiles The Profiles section shows all of the MDM profiles sent to the devices enrolled under your user account and the status of each profile: Status: Shows the profile installation status: o o o o o o o Installed Pending install Not installed Pending removal Removed Blocked (by a Compliance Policy) Failed for latest version (installed profile is out of date) Type: Shows the profile type, which can be set to automatic or optional. Name: Shows the name of the profile. Description: Shows the description of the profile. Location Group: Shows the location group to which the profile is assigned. Actions: Provides the ability to remotely install or remove the profile. NOTE: To refresh the Device Details Profiles data at any time, click [Refresh Data].

20 Mobile Device Manager Android User Guide 17 Apps The Apps screen displays all applications that have been installed on the selected device, in addition to providing basic application information. NOTE: Information displayed is dependent on the permissions determined by your administrator and therefore you may not be able to see all information displayed on the screen above. Status: Shows the application installation status: o o o o o o Installed Pending install Not installed Pending removal Removed Blocked (by a Compliance Policy) Type: Shows whether it is an internal or public application. Name: Shows the name of the internal or public application. Version: Shows the version of the internal or public application. Identifier: Provides an identifying URL. App Size: Displays the size of the app. NOTE: To refresh the Device Details Profiles data at any time, click [Refresh Data]. Content Displays the content located on your device. Status: Shows the application installation status: o Installed o Pending install o Not installed o Pending removal o Removed o Blocked (by a Compliance Policy)

21 Mobile Device Manager Android User Guide 18 Type: Shows whether it is an internal or public document. Name: Shows the name of the internal or public document. Priority: Displays the level of importance of the document. Deploy: Displays if deployment is automatic or on demand. Actions: Provides the ability to remotely install or remove content. Certificates This section displays the identity, name, issuant, expiration date, and status of certificates on the device, as well as an action bar to add or delete certificates. GPS The GPS screen displays the coordinates of the selected device. Select the span of time to view coordinates in the toolbar named Period. NOTE: GPS information displayed is dependent on many factors, such as permissions determined by your administrator, GPS availability, signal, etc.; therefore, you may not be able to locate selected devices as shown below. Event Log The Event Log contains a comprehensive log of all interactions between the Web Console and the device. Important fields to note in the Event Log, include the following: Severity Ranks the event severity level based on the event definition. Source Shows the source of the event (for example, "server"). Event Provides a brief categorization/summary of the event. Examples of events might include: o MDM Enrollment Complete o Install Profile Requested o Security Information Refused NOTE: To refresh the Event Log data at any time, click [Refresh Data].

22 Mobile Device Manager Android User Guide 19 Support The Support section contains the following: Contact information for your organization s support representative(s). Detailed device information (for example, the serial number) that will be helpful in resolving any support incidents. Managing Personal Content with the Secure Content Locker The Self Service Portal also provides a centralized space to access, upload, and manage personal content to and from a device via the Secure Content Locker. The Secure Content Locker is accessed by navigating to the Manage Content tab in the top left menu bar. Once in the personal content space, manage the current files with the following actions: View and sort current files along with details, such as size, type, and date last modified. Download available files to your computer by clicking the "down arrow" icon on the right side of a file. Search all personal files by entering a keyword in the Filter Grid field on the top right menu. Delete files from the managed content space by clicking the "X" icon on the right side of a file or by checking a file and clicking the [Delete] button in the top menu. Group files into folders for optimized organization. Upload a single file or files in bulk by clicking the [Files Upload] button in the top menu. Reorganize a single file or multiple files at a time by checking the file(s) and clicking the [Move] button in the top menu. NOTE: Administrators apply default settings for security, assignment and deployment at a folder level depending on users' privileges.

23 Mobile Device Manager Android User Guide 20 Using the Secure Content Locker MDM introduces enterprise level Mobile Content Management (MCM) for Android tablet devices through a native Secure Content Locker application. This feature gives the administrator the ability to provide you with needed electronic files at your fingertips, as you need them, as well as the ability to remove the files when they are no longer necessary. System Requirements The Secure Content Locker is designed to run on Android Devices meeting these minimum requirements: The device must be a tablet Minimum OS: Android v3.0+ Using the Secure Content Locker This guide provides instructions on the following processes: Logging In Finding Content Downloading and Viewing Content Managing Content Authentication To use the Secure Content Locker (SCL) on an Android tablet, you need to log in with your MDM credentials: 1. Open the Secure Content Locker application. NOTE: The first time you use the Secure Content Locker, enter in the host URL of the MDM environment you are using. To do so, simply click the Configure link in the upper right corner and input the environment URL provided by your administrator. When finished, click Search; returning to the login page once the URL is authenticated. 2. Enter the Group ID, Username, and Password which you used to enroll your device. 3. Accept the application's terms of service. 4. Tap [Login]. 5. View the Secure Content Locker home screen. NOTE: Alternatively, you may have been provided with a QR code you can use to authenticate the Secure Content Locker. In this case, tap the [QR Config] button and scan the provided QR code.

24 Mobile Device Manager Android User Guide 21 Navigating the Secure Content Locker Once you have completed authentication and logged in, you will have access to the corporate content stored within the Secure Content Locker. Content Groupings The Content tab is the main screen for finding content. Navigate through content by selecting an option from the All Documents pane on the left side of the Secure Content Locker screen. There are two ways to find content: Views and Categories. Views Users can quickly locate content by using the available views defined in the application: All Content: View a comprehensive list of all content in all categories. New Content: See the latest documents made available by administrators. Recent Activity: Revisit your most recently viewed and updated documents. Favorite Content: View content you added to your favorites for quick access. Categories The categories you see within the Secure Content Locker have been custom created by your organization as a way of grouping content. Much like with folders, subcategories may exist, allowing for several layers in an organization. Repositories There are two main types of repositories. All Content: View a comprehensive list of all content in all categories. NOTE: When connecting to an external repository, you may be asked to provide additional credentials. For instance, you may need to provide your Active Directory credentials in order to connect to a SharePoint server repository.

25 Mobile Device Manager Android User Guide 22 Search Tool The Secure Content Locker also features a built-in document search that can be used to quickly locate content by name and description. To search for content, follow these steps: 1. Click inside the Search box on the top right of the Secure Content Locker menu. 2. Enter your criteria in the search bar at the top and press <Enter>. 3. Select the document to open it. Downloading and Viewing Content When you first select a document, you may need to download the document to your device. Some documents may be automatically downloaded to your device by your administrator. To Download Content 1. Tap on the content you wish to view. A document information menu containing the Name, Description, and Document details displays. 2. Tap Download. A green checkmark displays next to the document name to indicate that the document has been downloaded. 3. Tap the document again. 4. Click [Open]. A pop-up box similar to the one below displays. Select a viewing application for the document. To select a default viewing application for this document, check the Use by default for this action check box before selecting the viewing application.

26 Mobile Device Manager Android User Guide 23 Managing Content The menu at the top of the screen provides you with several options: Content This is the default view of the Secure Content Locker. Activity To view Content Activity such as downloaded notifications, tap the Activity tab. Use the sliding panes on the left to see activity from Today, Yesterday, Last Week, or Older. Updates To view any Content Updates sent by your administrator, tap the Updates tab. Downloads Tap Downloads to only view content that has been downloaded to your device. You have the option to cancel active/queued downloads. The Sort Button The [Sort] button can be used to sort the displayed documents either alphabetically or by update status.

27 Mobile Device Manager Android User Guide 24 The Content Filter The [Content Filter] button can be used to filter documents. Tap this button to view: All documents Downloaded documents Deleted documents The Settings Menu Open the Settings menu to accomplish any of the following: Sync Content To sync the list of available contents with the latest updates sent by your administrator, select the Sync icon. This action only refreshes the list of available updates and does not automatically update the content. To update a document, download the new document version from the content list or select Update All Content from the Settings menu. Update Content To update the content on your device with any document content updates sent by your administrator, tap the Settings icon in the upper right and then tap Update All Content. View Account Information Log Out View Application Information Google Cloud Messaging Messages are integrated with Google Cloud Messaging and can be displayed in SCL by tapping on the Messages icon. All communication is passed from the application to the agent. Other Options Deleting Content Deleting content is also very easy with the Secure Content Locker. To delete content, simply select the document and then tap the [Delete] button. NOTE: Deleting content only removes the downloaded document from your device. It is still available for download on the content list. If you want to view the document after you have deleted it, you must select and download the document again. Adding a Document to Favorites To add a document to "favorites," select the document and tap Add to Favorites. To remove a document from "favorites," select the document and tap Remove Favorite.

28 Mobile Device Manager Android User Guide 25 Recommended Third Party Viewing Applications In order to view certain document formats in the Secure Content Locker, you must have a compatible viewing application installed on your tablet. Here are some recommended apps: App Name Word Docs PDF's PowerPoint Excel Adobe Reader Quickoffice Pro* Documents To Go Kingsoft Office ereader Applications *Paid App Using the Browser The browser application provides a secure alternative to open internet browsing. There are two modes of operation for the browser. Restricted: Depending on how the administrator has chosen to configure this feature, the browser may operate very much like standard internet browser, or it may be more restricted. Typical restrictions might include: o Whitelist: Your administrator may limit browsing to a list of allowed websites. Attempts to navigate to a website that is not whitelisted will fail. o Blacklist: Alternatively, there may be a list of blacklisted websites. In this case, surfing is permitted anywhere except to a blacklisted website. Kiosk mode: In this mode, the secure browser defaults to a specified home screen after a period of inactivity (determined by your administrator). Additional restrictions may be applied to the Browser, such as limiting the ability to copy/paste or disabling the ability to print a webpage.