Administration Guide. BlackBerry Enterprise Service 12. Version 12.0

Size: px
Start display at page:

Download "Administration Guide. BlackBerry Enterprise Service 12. Version 12.0"

Transcription

1 Administration Guide BlackBerry Enterprise Service 12 Version 12.0

2 Published: SWD

3 Contents Introduction... 9 About this guide...10 What is BES12?...11 Key features of BES About BES12 Self-Service How to use this guide Steps to administer BES Examples of everyday administration scenarios How to use the management console Log in to BES Administrators...21 Setting up administrators Steps to set up administrators...22 How BES12 chooses which role to assign Creating and managing administrator groups Creating and managing administrators...24 Managing roles Secure Work Space Setting up Secure Work Space for ios and Android devices Managing devices that have a work space Upgrading work space apps...37 Test the Secure Work Space connection Recreating the Secure Work Space connection Work connections...39 Setting up work connections for devices Steps to set up work connections for devices...40 Managing work connections using profiles Best practice: Creating profiles Sending certificates to devices...43 Setting up work for devices Creating connection profiles... 52

4 Managing profiles Assigning profiles...63 How BES12 chooses which profiles to assign...64 Rank profiles View a profile Change profile settings Remove a profile from user accounts or user groups...66 Delete a profile Using variables Using variables in profiles Default variables...68 Custom variables Device standards...73 Setting your organization's standards for devices...74 Steps to set up your organization's standards for devices...74 Managing your organization's standards using profiles Enforcing compliance rules for devices Filtering web content on ios devices Limiting ios devices to a single app...79 Managing and web domains for ios 8 devices Creating organization notices to display on BlackBerry 10 devices...81 Displaying organization information on devices...82 IT policies...85 Controlling device capabilities using IT policies...86 Steps to manage IT policies...86 Restricting or allowing device capabilities...86 How BES12 chooses which IT policy to assign Creating and managing IT policies...88 Controlling BlackBerry OS device capabilities using IT policies...91 Steps to manage BlackBerry OS IT policies...91 Restricting or allowing BlackBerry OS device capabilities Preconfigured BlackBerry OS IT policies Assigning BlackBerry OS IT policies and resolving IT policy conflicts Deactivating BlackBerry OS devices that do not have IT policies applied Creating and managing BlackBerry OS IT policies...95 Apps... 99

5 Managing apps on devices Steps to manage apps Adding and deleting apps from the available app list Preventing users from installing specific ios, Android, and Windows Phone apps Managing app groups Managing Apple VPP accounts Change whether an app is required or optional View the status of apps and app groups assigned to user accounts View which apps are assigned to user groups Update the information in the available app list Set the organization name for BlackBerry World Managing apps on BlackBerry OS devices Managing apps on BlackBerry OS devices Preparing to distribute BlackBerry Java Applications Configuring application control policies Application control policies for unlisted applications Creating software configurations Install BlackBerry Java Applications on a BlackBerry OS device at a central computer View the users that have a BlackBerry Java Application installed on their BlackBerry OS devices Reconciliation rules for conflicting settings in software configurations Users and devices Managing user groups and user accounts Steps to create user groups and user accounts Creating and managing user groups Creating and managing user accounts Using filters to customize the users and devices view Managing device groups Steps to create and manage device groups Creating a device group View a device group Change the name of a device group Delete a device group Activating devices Steps to activate devices Requirements: Activation License requirements for activation types Controlling device activation settings using activation profiles...163

6 Manage default activation password expiration and length Turn off user registration with the BlackBerry Infrastructure Update the template for the activation Set an activation password and send an activation message Allowing users to set activation passwords Activate a BlackBerry 10 device Activate a BlackBerry OS device Activate an ios device Activate an Android device Activate a Windows Phone device Troubleshooting Managing devices Using dashboard reports Using IT administration commands to manage devices View and save a device report Verifying that a device is allowed to access work and organizer data Exchange Gatekeeping Deactivating devices Maintenance and monitoring Using log files Managing BES12 log files Finding log files Reading log files Auditing app activity on BlackBerry 10 and BlackBerry OS devices Viewing device actions Retrieving log files from devices Auditing actions in BES Configure audit settings View and filter the audit log Export the audit log to a.csv file Delete old audit records Using SNMP to monitor BES Profile settings profile settings Common settings BlackBerry 10 settings...203

7 ios settings Android settings Windows Phone settings SCEP profile settings Common settings BlackBerry 10 settings ios settings Wi-Fi profile settings Common settings BlackBerry 10 settings ios settings Android settings Windows Phone settings VPN profile settings BlackBerry 10 settings ios settings Product documentation Provide feedback Glossary Legal notice...263

8

9 Introduction Learn more about BES12 and how to use this guide.

10 Introduction About this guide 1 BES12 helps you manage the devices in your organization. This guide describes how to administer BES12, from creating administrators to getting your device users up and running to maintaining and monitoring BES12. This guide is intended for senior and junior IT professionals who are responsible for setting up and administering BES12. Before using this guide, a senior IT professional should configure the BES12 environment as described in the BlackBerry Enterprise Service 12 Configuration Guide. 10

11 Introduction What is BES12? 2 BES12 is an EMM solution from BlackBerry. EMM solutions help you do the following: Manage mobile devices for your organization to protect business information Keep mobile workers connected with the information that they need Provide administrators with efficient business tools With BES12, you can manage the following device types: BlackBerry 10 BlackBerry OS (version 5.0 to 7.1) ios Android Windows Phone You can manage these devices from a single, simplified UI with industry-leading security. Key features of BES12 Feature Management of many types of devices Single, unified UI Trusted and secure experience Balance of work and personal needs Description You can manage BlackBerry 10, BlackBerry OS (version 5.0 to 7.1), ios, Android, and Windows Phone devices. You can view all devices in one place and access all management tasks in a single, web-based UI. You can share administrative duties with multiple administrators who can access the management console at the same time. Device controls give you precise management of how devices connect to your network, what capabilities are enabled, and what apps are available. Whether the devices are owned by your organization or your users, you can protect your organization's information. BlackBerry Balance and Secure Work Space technologies are designed to make sure that personal information and work information are kept separate and secure on devices. If the device is lost or the employee leaves the organization, you can delete only work-related information or all information from the device. 11

12 Introduction About BES12 Self-Service 3 BES12 Self-Service is a web application that you can make available to users so that they can perform certain tasks such as creating activation passwords, locking devices, or deleting data from devices. Users do not need to install any software on their computers to use BES12 Self-Service. You must provide the BES12 Self-Service login information to users. You can send this information in an message, or edit the activation template to include the information. Users need the following information: Web address: The web address for BES12 Self-Service is displayed in the management console at Settings > Self- Service. Username and password: Company directory users can log in with their organization usernames and passwords. For local users, you must create the usernames and temporary passwords. Domain name: The domain name is required by Microsoft Active Directory users. 12

13 Introduction How to use this guide 4 The tasks in this guide are presented in a particular order to help get you up and running in the most efficient way, particularly if you are administering BES12 for the first time. You might not need to complete all of these tasks. You can choose to activate certain device types, separate work and personal data in different ways, or enforce different compliance rules, device capabilities, and connections. Steps to administer BES12 When you administer BES12, you perform the following actions. These actions are reflected in the sections of this guide. If you want to share administration work with other IT staff, set up administrators. Set up work connections (for example, , Wi-Fi, and VPN). Set up device standards (for example, compliance rules). Update the Default IT policy or create new IT policies. Determine which apps to send to devices. Create users and groups. Assign work connections, device standards, IT policies, and apps to users and groups. Help users activate their devices. Maintain and monitor BES12. 13

14 Introduction Examples of everyday administration scenarios The following scenarios provide examples of choices that you might make when setting up different devices for different users. Scenario Manage BlackBerry 10 devices for work and personal You might want to Create profiles for certificates Create a profile for single sign-on to secure work domains Create a profile for a proxy server Choose the "Work and personal - Corporate" or "Work and personal - Regulated" activation type Manage ios, Android, or Windows Phone devices with basic management Create profiles for work and work Wi-Fi Change the Default IT policy to enforce a device password Choose a work app to send to the device Choose the "MDM controls" activation type Manage BlackBerry OS (version 5.0 to 7.1) devices Change the Default BlackBerry OS IT policy to enforce a device password Resend the BlackBerry OS IT policy to devices Set up ios or Android devices with extra security for work data Create a profile for enterprise connectivity for extra security for data in transit Enable S/MIME for extra security Create a compliance profile to prevent access to work resources if the device is jailbroken or rooted Create a web content filter profile to limit the websites that the device user can access Set up Secure Work Space to separate and secure work data Secure an app to send to the device Set up BlackBerry 10 devices for work only Create profiles for certificates and VPN Enable S/MIME for extra security Create an IT policy to prevent the use of the device camera Choose the "Work space only" activation type Set up an ios device that is limited to one app for software demonstrations Create a single app mode profile 14

15 Introduction How to use the management console 5 The management console is the UI that you use to administer BES12. Set up administrators You can click Add user to add a user, and then use the settings to make the user an administrator. Set up work connections and device standards You can set up work connections and device standards using IT policies and profiles. Find users and devices 15

16 Introduction You can use filters to find the users and devices that you want to manage. Choose apps to send to devices You can add and manage apps and app groups, as well as view information about them. Create groups of users Groups simplify the management of users and devices. You can create groups to share IT policies, profiles, apps, and other configuration settings among similar users or devices. Assign IT policies, profiles, and apps to groups When you assign IT policies, profiles, and apps to a group, you assign the settings to all of the users in the group. 16

17 Introduction Help your users activate devices You can configure how you want devices to activate by using activation profiles and related settings. Users can then perform the activations themselves. Maintain and monitor BES12 With the dashboard, you can view information about BES12 and its users and devices. 17

18 Introduction When you view the details of a user's device, you can perform commands like resetting the password, locking the device, or deleting data. Log in to BES12 The management console allows you to perform administrative tasks for devices in your organization that are managed by BES12. Before you begin: Locate the web address (for example, and login information for the management console. You can find the information in the inbox of the account that is associated with your BES12 account. You must know the authentication method and the domain (applicable for Microsoft Active Directory authentication only). 1. In the browser, type the web address for the BES12 management console of your organization. 18

19 Introduction 2. In the Username field, type your username. 3. In the Password field, type your password. 4. If necessary, in the Sign in using drop-down list, do one of the following: Click Direct authentication. Click LDAP authentication. Click Microsoft Active Directory authentication. In the Domain field, type the Microsoft Active Directory domain. 5. Click Sign in. After you finish: You can change your login password by clicking the user icon in the top-right corner of the management console. 19

20

21 Administrators Set up administrators with permissions that are appropriate for their job responsibilities. Simple

22 Administrators Setting up administrators 6 Administrators are users that are assigned an administrative role by user group or user account. The actions that administrators can perform are defined in the role that is assigned to them. You can assign a preconfigured role or a custom role that you create. Each role has a set of permissions that specifies the information that administrators can view and the actions that they can perform in the BES12 management console. Roles help your organization to do the following: Reduce security risks associated with allowing all administrators to access all administrative options Define different types of administrators to better distribute job responsibilities Increase efficiency for administrators by limiting accessible options to their job responsibilities Steps to set up administrators When you set up administrators, you perform the following actions: If necessary, create a custom role. If necessary, rank the roles. Create a user group for administrators. Assign a role to a user group for administrators. Create a user account with an address and add it to an administrator group. How BES12 chooses which role to assign Only one role is assigned to each administrator. BES12 uses the following rules to determine which role to assign to an administrator: The role that is assigned directly to a user account takes precedence over a role that is assigned indirectly by a user group. If an administrator is a member of multiple groups that have been assigned a role, BES12 assigns the role that has a higher rank. You can specify the ranking of roles. 22

23 Administrators Creating and managing administrator groups Administrator groups are user groups that have a role assigned to them. You can assign a role to a directory-linked group or local group. A user can be a member of multiple administrator groups but is assigned only one role. For more information, see How BES12 chooses which role to assign. Only Security Administrators can add or remove members of a user group that has a role assigned to it. For more information about user groups, see Creating and managing user groups. Create an administrator group When you create an administrator group, you assign a role to a user group. Before you begin: You must be a Security Administrator to create an administrator group. Create a user group for administrators. Create a custom role, if necessary. 1. On the menu bar, click Settings. 2. In the left pane, expand Administrators. 3. Click Groups. 4. Click. 5. Search for and select the user group that you want to assign a role to. 6. In the Role drop-down list, click the role that you want to assign. 7. Click Save. BES12 sends the users an message with their username and a link to the management console. BES12 also sends the users a separate message with their password to the management console. If a user does not have a console password, BES12 generates a temporary password and sends it to the user. After you finish: To add users to the administrator group, add them to the user group that is assigned a role. For more information, see Creating and managing user groups Assign a different role to an administrator group Before you begin: You must be a Security Administrator to assign a different role to an administrator group. 1. On the menu bar, click Settings. 2. In the left pane, expand Administrators. 3. Click Groups. 4. Click the group of administrators whose role you want to change. 23

24 Administrators 5. In the Role drop-down list, click the role that you want to assign. 6. Click Save. Remove a role from an administrator group When you remove a role from an administrator group, the users in the group are no longer administrators (unless they have other roles assigned to them). The users and the user group remain in the management console. The users' devices are not affected. Before you begin: You must be a Security Administrator to remove a role from an administrator group. 1. On the menu bar, click Settings. 2. In the left pane, expand Administrators. 3. Click Groups. 4. Select the name of the administrator group that you want to remove a role from. 5. Click. 6. Click Delete. Creating and managing administrators You can create an individual administrator by assigning a role to a user account. Only one role can be assigned directly to a user account. For more information, see How BES12 chooses which role to assign. Create an administrator Before you begin: You must be a Security Administrator to create an administrator. Create a user account that has an address associated with it. Create a role, if necessary. 1. On the menu bar, click Settings. 2. In the left pane, expand Administrators. 3. Click Users. 4. Click. 5. Search for and select the user account that you want to assign a role to. 6. In the Role drop-down list, click the role that you want to assign. 7. Click Save. 24

25 Administrators BES12 sends the user an message with the username and a link to the management console. BES12 also sends the user a separate message with the password for the management console. If the user does not have a console password, BES12 generates a temporary password and sends it to the user. Assign a different role to an administrator You can change the role of another administrator. You cannot change your own role. Before you begin: You must be a Security Administrator to assign a different role to an administrator. 1. On the menu bar, click Settings. 2. In the left pane, expand Administrators. 3. Click Users. 4. Click the administrator whose role you want to change. 5. In the Role drop-down list, click the role that you want to assign. 6. Click Save. Remove a role from an administrator When you remove a role from an administrator, you remove the role that is assigned directly to the user account. If no other roles are assigned by user group, the user is no longer an administrator. The user can still be found in the management console and the user's devices are not affected. Before you begin: You must be a Security Administrator to remove a role from an administrator. 1. On the menu bar, click Settings. 2. In the left pane, expand Administrators. 3. Click Users. 4. Select the name of the administrator that you want to remove a role from. 5. Click. 6. Click Delete. Managing roles You can create roles and assign them to user accounts or user groups. When you assign a role, you grant administrator permissions to a user or user group. You must be a Security Administrator to create, view, change, rank, or assign roles. 25

26 Administrators Preconfigured roles In BES12, the Security Administrator role has full permissions to the management console, including creating and changing administrator users and roles. The Security Administrator role cannot be edited or removed. At least one administrator must be a Security Administrator. BES12 includes preconfigured roles in addition to the Security Administrator role. You can edit or remove all roles except the Security Administrator role. If you upgraded from BES5, the roles configuration from BES5 is copied to BES12. If you did not upgrade from BES5, the following preconfigured roles are available: Role Security Administrator Enterprise Administrator Senior HelpDesk Junior HelpDesk Description Full permissions All permissions except for creating and changing administrator users and roles Intermediate administrative tasks Basic administrative tasks Best practice: Reviewing the permissions of each role after upgrading from BES5 Review the permissions of each role after you upgrade from BES5. When you upgrade from BES5, the roles configuration in BES5 is copied to BES12. Because roles work differently in BES12, there may be permissions that you want to add or remove. Permissions for preconfigured roles The following tables list the permissions that are turned on for each preconfigured role in BES12. The Security Administrator role in BES12 has full permissions to the management console, including managing administrator users and roles. Note: If you upgrade from BES5, the role configuration from BES5 is copied to BES12. Roles that are copied may have similar names but different permissions. Users and devices Permission Enterprise Administrator Senior HelpDesk Junior HelpDesk View users and activated devices Create users Edit users Delete users Export user list 26

27 Administrators Permission Enterprise Administrator Senior HelpDesk Junior HelpDesk Generate an activation password and send Specify an activation password Specify console password Manage devices Specify device password Lock device and set message Unlock and clear password Delete only work data Delete all device data Specify work password and lock Groups Permission Enterprise Administrator Senior HelpDesk Junior HelpDesk View group settings Create and edit user groups Add and remove users from user groups Delete user groups Create and edit device groups Delete device groups Policies and profiles Permission Enterprise Administrator Senior HelpDesk Junior HelpDesk View IT policies and profiles Create and edit IT policies and profiles Delete IT policies and profiles Assign IT policies and profiles to users 27

28 Administrators Permission Enterprise Administrator Senior HelpDesk Junior HelpDesk Assign IT policies and profiles to user groups Assign IT policies and profiles to device groups Rank IT policies and profiles Apps Permission Enterprise Administrator Senior HelpDesk Junior HelpDesk View apps and app groups Create and edit apps and app groups Delete apps and app groups Assign apps and app groups to users Assign apps and app groups to user groups Assign apps and app groups to device groups View app licenses Create app licenses Edit app licenses Delete app licenses Assign app license to apps or app groups Restricted apps Permission Enterprise Administrator Senior HelpDesk Junior HelpDesk View restricted apps Create restricted apps Delete restricted apps 28

29 Administrators Settings Permission Enterprise Administrator Senior HelpDesk Junior HelpDesk View general settings Edit activation defaults Edit activation Edit console password settings Edit self-service console settings Edit default variables Edit custom variables View app management Edit BlackBerry World for Work Edit internal app storage Edit internal app distribution View external integration settings ios management Edit SMTP server settings Company directory settings Microsoft Exchange configuration View administrator users and roles View licensing summary Manage subscriptions Edit licensing settings View servers Edit servers Delete servers Manage servers 29

30 Administrators Permission Enterprise Administrator Senior HelpDesk Junior HelpDesk View audit settings Edit audit settings and purge data View migration settings Edit migration settings View BlackBerry Work Connect Notification Service settings Edit BlackBerry Work Connect Notification Service settings View server certificates Update server certificates Dashboard Permission Enterprise Administrator Senior HelpDesk Junior HelpDesk View dashboard Auditing Permission Enterprise Administrator Senior HelpDesk Junior HelpDesk View audit information BlackBerry OS permissions If you upgrade from BES5, the following additional permissions are available: View BlackBerry OS IT policies Create and edit BlackBerry OS IT policies Delete BlackBerry OS IT policies View jobs Edit jobs View default distribution settings for jobs Edit default distribution settings for jobs Manage job tasks 30

31 Administrators Change status of job tasks Custom roles If the preconfigured roles do not meet the needs of your organization, you can create custom roles for administrators. You can also create custom roles to restrict administrative tasks to a defined list of user groups. For example, you can create a role for new administrators that restricts their permissions to a user group for training only. Create a custom role Before you begin: You must be a Security Administrator to create a role. 1. On the menu bar, click Settings. 2. In the left pane, expand Administrators. 3. Click Roles. 4. Click. 5. Type a name and description for the role. 6. To copy permissions from another role, click a role in the Permissions copied from role drop-down list. 7. Perform one of the following tasks: Task Allow administrators in this role to search all company directories Allow administrators in this role to search selected company directories Steps 1. Select the All company directories option. 1. Select the Selected company directories only option. 2. Click Select directories. 3. Select one or more directories and click. 4. Click Save. 8. Perform one of the following tasks: Task Allow administrators in this role to manage all users and groups Allow administrators in this role to manage selected groups Steps 1. Select the All groups and users option. 1. Select the Selected groups only option. 2. Click Select groups. 3. Select one or more groups and click. 31

32 Administrators Task Steps 4. Click Save. 9. Select the permissions for administrators in this role. 10. Click Save. After you finish: If necessary, adjust the ranking of the role that you created. View the settings of a role Before you begin: You must be a Security Administrator to view the settings of a role. 1. On the menu bar, click Settings. 2. In the left pane, expand Administrators. 3. Click Roles. 4. Click the role that you want to view. Change the settings of a role You can change the settings of all roles except the Security Administrator role. Before you begin: You must be a Security Administrator to change the settings of a role. 1. On the menu bar, click Settings. 2. In the left pane, expand Administrators. 3. Click Roles. 4. Click the role that you want to change. 5. Click. 6. Type a name and description for the role. 7. Perform one of the following tasks: Task Allow administrators in this role to search all company directories Allow administrators in this role to search selected company directories Steps 1. Select the All company directories option. 1. Select the Selected company directories only option. 2. Click Select directories. 3. Select one or more directories and click. 32

33 Administrators Task Steps 4. Click Save. 8. Perform one of the following tasks: Task Allow administrators in this role to manage all users and groups Allow administrators in this role to manage selected groups Steps 1. Select the All groups and users option. 1. Select the Selected groups only option. 2. Click Select groups. 3. Select one or more groups and click. 4. Click Save. 9. Change the permissions for administrator users in this role. 10. Click Save. Delete a role You can delete all roles except the Security Administrator role. Before you begin: You must be a Security Administrator to delete a role. You must remove all administrators and administrator groups from the role that you want to delete. 1. On the menu bar, click Settings. 2. In the left pane, expand Administrators. 3. Click Roles. 4. Click the role that you want to delete. 5. Click. Ranking roles When an administrator belongs to more than one administrator group, the role that is ranked higher is assigned to the administrator. For example, if an administrator belongs to both Director and Supervisor administrator groups, and the Director role is ranked higher, the administrator is assigned the Director role. 33

34 Administrators After you create a custom role, the role is ranked lowest by default. You can adjust the ranking of roles to help BES12 choose which role to assign. For more information, see How BES12 chooses which role to assign. Rank roles Before you begin: You must be a Security Administrator to rank roles. 1. On the menu bar, click Settings. 2. In the left pane, expand Administrators. 3. Click Roles. 4. Use the arrows to move the roles up or down the ranking. 5. Click Save. 34

35 Secure Work Space Separate work data and personal data on ios and Android devices. Secure

36 Secure Work Space Setting up Secure Work Space for ios and Android devices 7 Secure Work Space is an option for providing extra security for work data on ios and Android devices. Secure Work Space is similar to the BlackBerry Balance feature on BlackBerry devices. Using containerization and app wrapping, Secure Work Space separates personal information from work information by creating a personal space and a work space on devices. You can choose whether you want administrative control of the entire device, or only the work space on a user's device. To set up Secure Work Space so that users can activate devices with a work space, you must complete the following tasks: Purchase Gold - Secure Work Space licenses Create an activation profile with the appropriate activation type and assign it to users or groups Send activation information to users When users activate their devices, they are prompted to set up a work space, create a work space password, and install the default work space apps. Managing devices that have a work space Having a work space on devices helps to keep work information separate and secure, and allows you to manage the work data on devices. Data that any of the apps in the work space use is saved securely and cannot be accessed outside of the work space. For more information about work space security, visit docs.blackberry.com/bes12 to see the BlackBerry Enterprise Service 12 Security Guide for ios, Android, and Windows Phone. If you assign the "Work and personal - full control" or "Work and personal - user privacy" activation type to user accounts, a work space is installed on the devices during activation and users are prompted to create work space passwords. To complete the work space setup, users must download the following apps on their devices: Device type Apps ios Work Connect: for , calendar, contacts, notes, and tasks Work Browser: for browsing Documents To Go: for securely viewing and editing work documents Android Work Space Manager: required to run the other work space apps on the device Secure Work Space: for , calendar, contacts, and browsing Documents To Go: for securely viewing and editing work documents 36

37 Secure Work Space The work space allows you to take advantage of the following features: Convert your organization's internal apps into secured apps that can be installed and run in the work space, or obtain secured apps from the App Store or Google Play. Use app lists and app groups to install and manage secured apps. For more information, see Adding and deleting apps from the available app list. Control specific behaviors of the work space on devices, such as password requirements and connection preferences, by applying an IT policy to user accounts. Use IT administration commands to reset the work space password or delete the work space on devices. Upgrading work space apps To support new features and more operating systems, BlackBerry posts new versions of the work space apps in the App Store and Google Play. Users should upgrade the work space apps when new versions become available. If users upgrade their device operating system and do not upgrade to the latest version of the work space apps, the work space may not function as expected. For more information about the supported device operating systems, visit docs.blackberry.com/bes12 to see the BlackBerry Enterprise Service 12 Compatibility Matrix. Test the Secure Work Space connection You can test the connection between BES12 and the Secure Work Space infrastructure at any time to verify that Secure Work Space is enabled. 1. On the menu bar, click Settings. 2. In the left pane, in the External integration section, click Secure Work Space. 3. Verify that Secure Work Space is enabled and the connection to the Secure Work Space infrastructure is Successful. 4. Optionally, click Test connection to test the work space connection. Recreating the Secure Work Space connection If the Secure Work Space connection to the BlackBerry Infrastructure is disabled, you must recreate the connection. For example, if you create a BES12 test environment that includes a virtual computer, BES12 instance, Secure Work Space, and BES12 database using an SRP ID and you decide to uninstall the BES12 test environment and create a BES12 production environment using the same SRP ID, you must recreate the Secure Work Space connection in the production environment because it contains a new virtual computer, BES12 instance, Secure Work Space, and BES12 database. The new production environment cannot connect to the BlackBerry Infrastructure because the original Secure Work Space connection that used the SRP ID used in the test environment still exists in the BlackBerry Infrastructure. 37

38 Secure Work Space Recreate the Secure Work Space connection 1. On the menu bar, click Settings. 2. In the left pane, in the External integration section, click Secure Work Space. 3. Click Recreate Secure Work Space tenant. In the Recreate Secure Work Space connection window, you are notified of the number of devices that require reactivation when you recreate the Secure Work Space connection. 4. Click Recreate. 5. Verify that Secure Work Space is enabled. After you finish: Make sure that users reactivate their ios and Android devices that use Secure Work Space. 38

39 Work connections Use profiles to configure work connections for BlackBerry 10, ios, Android, and Windows Phone devices. Multiplatform

40 Work connections Setting up work connections for devices 8 You can use profiles to set up and manage work connections for devices in your organization. A profile contains configuration information for devices and each profile type supports a particular configuration, such as settings, network settings, or certificates. You can specify settings for BlackBerry 10, ios, Android, and Windows Phone devices in the same profile and then distribute the configuration information to devices by assigning the profile to user accounts, user groups, or device groups. BES12 supports profiles and different types of certificate and connection profiles. You can use certificate profiles to specify the certificates that devices can use for authentication, and you can use and connection profiles to configure how devices connect to work resources, such as a work mail server and work Wi-Fi network. Steps to set up work connections for devices When you set up work connections for devices, you perform the following actions: If devices use certificate-based authentication to connect to work resources, create certificate profiles. Create and connection profiles to configure how devices connect to work resources in your organization's environment. If necessary, rank profiles. Assign profiles to user accounts, user groups, or device groups. Managing work connections using profiles You can manage work connections using the profiles available in the Policies and Profiles library. Certificate profiles You can use the following profiles to send certificates to devices: Profile CA certificate SCEP Description A CA certificate profile specifies a CA certificate that devices can use to establish trust with a work network or server. A SCEP profile specifies how devices obtain certificates used for authentication with a work network or mail server from your organization's CA using a SCEP service. 40

41 Work connections Profile Shared certificate Description A shared certificate profile specifies a client certificate that ios and Android devices can use to authenticate users with a work network or server. BES12 sends the same client certificate to every user that the profile is assigned to. To specify a different client certificate for each user, you can add a client certificate to a user account on the User summary tab and BES12 sends the certificate to the user's ios and Android devices. For more information, see Add a client certificate to a user account. and connection profiles You can use the following profiles to configure how devices connect to work resources: Profile Certificate retrieval OCSP CRL Single sign-on Proxy Enterprise connectivity Description An profile specifies how devices connect to a work mail server and synchronize data. A certificate retrieval profile specifies how BlackBerry 10 devices retrieve certificates from LDAP servers. An OCSP profile specifies the OCSP responders that BlackBerry 10 devices can use to check the status of certificates. A CRL profile specifies the CRL configurations that BES12 can use to check the status of certificates. A single sign-on profile specifies how devices authenticate with secure domains automatically after users type their username and password for the first time. A proxy profile specifies how devices use a proxy server to access web services on the Internet or a work network. An enterprise connectivity profile specifies whether secured apps on ios and Android devices with Secure Work Space must connect to a work network through the BlackBerry Infrastructure. Work apps on BlackBerry 10 devices use the BlackBerry Infrastructure if a work VPN or Wi-Fi connection is not available. BES12 includes a Default enterprise connectivity profile. VPN Wi-Fi A VPN profile specifies how devices connect to a work VPN. A Wi-Fi profile specifies how devices connect to a work Wi-Fi network. 41

42 Work connections Best practice: Creating profiles Some connection profiles can include one or more associated profiles. When you specify an associated profile, you link an existing profile to a connection profile, and devices must use the associated profile when they use the connection profile. Consider the following guidelines: Determine which work connections are required for devices in your organization. Create profiles that you can associate with other profiles before you create the connection profiles that use them. Use variables where appropriate. For more information, see Using variables in profiles. The following table lists profiles in the order that you should create them. You can associate profiles listed earlier with profiles listed later. For example, if you create a Wi-Fi profile first, you cannot associate a proxy profile with the Wi-Fi profile when you create it. After you create a proxy profile, you must change the Wi-Fi profile to associate the proxy profile with it. Profile Can associate with Applicable devices CA certificate VPN (BlackBerry 10 only) Wi-Fi BlackBerry 10 ios Android Windows Phone SCEP VPN Wi-Fi BlackBerry 10 ios Shared certificate VPN (ios only) Wi-Fi ios Android BlackBerry 10 ios Android Windows Phone Certificate retrieval BlackBerry 10 OCSP BlackBerry 10 CRL BlackBerry 10 42

43 Work connections Profile Can associate with Applicable devices Single sign-on BlackBerry 10 ios Proxy Enterprise connectivity VPN (BlackBerry 10 and ios) Wi-Fi (BlackBerry 10 and ios) BlackBerry 10 ios Android with Secure Work Space Enterprise connectivity BlackBerry 10 ios with Secure Work Space Android with Secure Work Space VPN Wi-Fi (BlackBerry 10 only) BlackBerry 10 ios Wi-Fi BlackBerry 10 ios Android Windows Phone Sending certificates to devices A certificate is a digital document issued by a CA that verifies the identity of certificate subject and binds the identity to a public key. Each certificate has a corresponding private key that is stored separately. The public key and private key form an asymmetric key pair that can be used for data encryption and identity authentication. A CA signs the certificate to verify that entities that trust the CA can also trust the certificate. Devices can use certificates to: Authenticate using SSL/TLS when connecting to webpages that use HTTPS Authenticate with a work mail server Authenticate with a work Wi-Fi network or VPN Encrypt and sign messages using S/MIME protection Many certificates used for different purposes can be stored on a device. You can use certificate profiles to send CA certificates and client certificates to devices. Related information Creating CA certificate profiles, on page 44 43

44 Work connections Creating SCEP profiles, on page 45 Creating shared certificate profiles, on page 46 Add a client certificate to a user account, on page 151 Creating CA certificate profiles You might need to distribute CA certificates to devices if your organization uses S/MIME or if the devices use certificate-based authentication to connect to a network or server in your organization s environment. When you send a CA certificate to a device, the device trusts the identity associated with any client or server certificate signed by the CA. When the certificate for the CA that signed your organization's network and server certificates is stored on devices, the devices can trust your networks and servers when they make secure connections. When the CA certificate that signed your organization's S/MIME certificates is stored on devices, the devices can trust the sender's certificate when a secure message is received. Many CA certificates that are used for different purposes can be stored on a device. You can use CA certificate profiles to send CA certificates to devices. Create a CA certificate profile Before you begin: You must obtain the CA certificate file that you want to send to devices. It must have a.der file name extension. 1. On the menu bar, click Policies and Profiles. 2. Click beside CA certificate. 3. Type a name and description for the profile. Each CA certificate profile must have a unique name. Some names (for example, ca_1) are reserved. 4. In the Certificate file field, click Browse to locate the certificate file. 5. If the CA certificate is sent to BlackBerry devices, specify one or more of the following certificate stores to send the certificate to on the device: Browser certificate store VPN certificate store Wi-Fi certificate store Enterprise certificate store 6. Click Add. Related information Assign a profile to a user account, on page 150 Assign a profile to a user group, on page

45 Work connections CA certificate stores on BlackBerry 10 devices CA certificates that are sent to BlackBerry 10 devices can be stored in different certificate stores, depending on the purpose of the certificate. Store Browser certificate store Description The work browser on BlackBerry 10 devices uses the certificates in this store to establish SSL connections with servers in your organization's environment. Devices that are running BlackBerry 10 OS version 10.0 also use the certificates in this store to authenticate S/MIME-protected messages that are received. VPN certificate store Wi-Fi certificate store Enterprise certificate store BlackBerry 10 devices use certificates in this store for VPN connections. You must set the "Trusted certificate source" setting in the VPN profile to "Trusted certificate store" to use the certificates in this store for work VPN connections. BlackBerry 10 devices use certificates in this store for Wi-Fi connections. You must set the "Trusted certificate source" setting in the Wi-Fi profile to "Trusted certificate store" to use certificates in this store for work Wi-Fi connections. Devices that are running BlackBerry 10 OS version 10.1 and later use certificates in this store to authenticate S/MIME-protected messages that are received. Creating SCEP profiles You can use a SCEP profile to specify how BlackBerry 10 and ios devices obtain certificates from your organization's CA through a SCEP service. SCEP is an IETF protocol that simplifies the process of enrolling certificates to a large number of devices without any administrator input or approval required to issue each certificate. Devices can use SCEP to request and obtain client certificates from a SCEP-compliant CA that is used by your organization. The CA that you use must support challenge passwords. The CA uses challenge passwords to verify that the device is authorized to submit a certificate request. Devices can use the certificates obtained using SCEP to connect to a work Wi-Fi network, work VPN, or work mail server. Android and Windows Phone devices do not support SCEP. Create a SCEP profile The required profile settings vary for each device type and depend on the SCEP service configuration in your environment. For more information about the profile settings for each device type, see SCEP profile settings. 1. On the menu bar, click Policies and Profiles. 2. Click beside SCEP. 3. Type a name and description for the profile. 4. In the URL field, type the URL for the SCEP service. The URL should include the protocol, FQDN, port number, and SCEP path. 45

46 Work connections 5. In the Instance name field, type the instance name for the CA. 6. In the SCEP challenge type list, select Static or Dynamic, and then specify the required settings for the challenge type. 7. Optionally, clear the check box for any device type that you do not want to configure the profile for. 8. Perform the following actions: a. Click the tab for a device type. b. Configure the appropriate values for each profile setting to match the SCEP service configuration in your environment. 9. Repeat step 8 for each device type in your organization. 10. Click Add. After you finish: If devices will use the certificate to authenticate with a work Wi-Fi network, work VPN, or work mail server, associate the SCEP profile with a Wi-Fi, VPN, or profile. Creating shared certificate profiles If your organization uses certificate-based authentication for connections to networks or servers in your environment, you may need to use BES12 to send client certificates to devices. Shared certificate profiles send a client certificate to all of the assigned users' ios and Android devices. The devices can present the client certificate for authentication to a network or server in your organization's environment. You should use shared certificate profiles only if you need to allow more than one user to share a client certificate. If your organization has a SCEP service, you can use SCEP profiles to distribute client certificates to BlackBerry 10 and ios devices. Alternatively, if you want to send a client certificate to Android or ios devices associated with only one user account, you can add a client certificate to a user account. Related information Add a client certificate to a user account, on page 151 Create a shared certificate profile Before you begin: You must obtain the client certificate file that you want to send to devices. It must have a.pfx or.p12 file name extension. 1. On the menu bar, click Policies and Profiles. 2. Click beside Shared certificate. 3. Type a name and description for the profile. Each shared certificate profile must have a unique name. Some names (for example, ca_1) are reserved. 4. In the Password field, type a password for the shared certificate profile. 5. In the Certificate file field, click Browse to locate the certificate file. 6. Click Add. 46

47 Work connections Related information Assign a profile to a user group, on page 138 Assign a profile to a user account, on page 150 Setting up work for devices You can use profiles to specify how devices connect to your organization's mail server and synchronize messages, calendar entries, and organizer data using Exchange ActiveSync or IBM Notes Traveler. If you want to use Exchange ActiveSync, you should note the following: If you require support for extended security, you can enable S/MIME for ios devices and S/MIME or PGP for BlackBerry 10 devices. PGP is supported by versions later than BlackBerry 10 OS version If you enable S/MIME for BlackBerry 10 devices, you can use additional profiles to allow devices to automatically retrieve S/MIME certificates and check certificate status. If you want to use Notes Traveler, you should note the following: To use Notes Traveler with ios or Android devices, you must enable Secure Work Space. To use Notes Traveler with BlackBerry 10 or Windows Phone devices, you must configure the appropriate settings in the profile. To Do data synchronization is only supported on BlackBerry 10 devices. It uses the SyncML communication protocol on the Notes Traveler server. If you require support for extended security on BlackBerry 10 devices, only IBM Notes encryption is supported (S/MIME is not supported). Create an profile The required profile settings vary for each device type and depend on the settings that you select. For more information about the profile settings, see profile settings. Before you begin: If you use certificate-based authentication for BlackBerry 10 or ios devices, create a CA certificate profile and assign it to users. For ios devices, you may also need to create a shared certificate profile or SCEP profile and associate it with the profile. BlackBerry 10 devices support SCEP profiles. ios devices support SCEP profiles and shared certificate profiles. To automatically apply an profile to Android devices, use any of the following options. If you do not use one of these options, BES12 still sends the profile to Android devices, but the user must manually configure the connection to the mail server: Set up Secure Work Space by activating Android devices using the "Work and personal - full control" or "Work and personal - user privacy" activation type. Install the TouchDown app on Android devices. For more information about the TouchDown app, visit nitrodesk.com. 47

Administration Guide BES12. Version 12.3

Administration Guide BES12. Version 12.3 Administration Guide BES12 Version 12.3 Published: 2015-10-30 SWD-20151028105551254 Contents Introduction... 11 About this guide...12 How to use this guide... 13 Steps to administer BES12... 13 Examples

More information

BlackBerry Enterprise Service 10. Universal Device Service Version: 10.2. Administration Guide

BlackBerry Enterprise Service 10. Universal Device Service Version: 10.2. Administration Guide BlackBerry Enterprise Service 10 Universal Service Version: 10.2 Administration Guide Published: 2015-02-24 SWD-20150223125016631 Contents 1 Introduction...9 About this guide...10 What is BlackBerry

More information

Advanced Administration

Advanced Administration BlackBerry Enterprise Service 10 BlackBerry Device Service Version: 10.2 Advanced Administration Guide Published: 2014-09-10 SWD-20140909133530796 Contents 1 Introduction...11 About this guide...12 What

More information

Configuration Guide. BlackBerry Enterprise Service 12. Version 12.0

Configuration Guide. BlackBerry Enterprise Service 12. Version 12.0 Configuration Guide BlackBerry Enterprise Service 12 Version 12.0 Published: 2014-12-19 SWD-20141219132902639 Contents Introduction... 7 About this guide...7 What is BES12?...7 Key features of BES12...

More information

Configuration Guide BES12. Version 12.1

Configuration Guide BES12. Version 12.1 Configuration Guide BES12 Version 12.1 Published: 2015-04-22 SWD-20150422113638568 Contents Introduction... 7 About this guide...7 What is BES12?...7 Key features of BES12... 8 Product documentation...

More information

Security Guide. BlackBerry Enterprise Service 12. for ios, Android, and Windows Phone. Version 12.0

Security Guide. BlackBerry Enterprise Service 12. for ios, Android, and Windows Phone. Version 12.0 Security Guide BlackBerry Enterprise Service 12 for ios, Android, and Windows Phone Version 12.0 Published: 2015-02-06 SWD-20150206130210406 Contents About this guide... 6 What is BES12?... 7 Key features

More information

Licensing Guide BES12. Version 12.1

Licensing Guide BES12. Version 12.1 Licensing Guide BES12 Version 12.1 Published: 2015-04-02 SWD-20150402115554403 Contents Introduction... 5 About this guide...5 What is BES12?...5 Key features of BES12... 5 About licensing...7 Steps to

More information

Configuration Guide BES12. Version 12.3

Configuration Guide BES12. Version 12.3 Configuration Guide BES12 Version 12.3 Published: 2016-01-19 SWD-20160119132230232 Contents About this guide... 7 Getting started... 8 Configuring BES12 for the first time...8 Configuration tasks for managing

More information

Architecture and Data Flow Overview. BlackBerry Enterprise Service 10 721-08877-123 Version: 10.2. Quick Reference

Architecture and Data Flow Overview. BlackBerry Enterprise Service 10 721-08877-123 Version: 10.2. Quick Reference Architecture and Data Flow Overview BlackBerry Enterprise Service 10 721-08877-123 Version: Quick Reference Published: 2013-11-28 SWD-20131128130321045 Contents Key components of BlackBerry Enterprise

More information

Configuration Guide BES12. Version 12.2

Configuration Guide BES12. Version 12.2 Configuration Guide BES12 Version 12.2 Published: 2015-07-07 SWD-20150630131852557 Contents About this guide... 8 Getting started... 9 Administrator permissions you need to configure BES12... 9 Obtaining

More information

BlackBerry Enterprise Service 10. Secure Work Space for ios and Android Version: 10.1.1. Security Note

BlackBerry Enterprise Service 10. Secure Work Space for ios and Android Version: 10.1.1. Security Note BlackBerry Enterprise Service 10 Secure Work Space for ios and Android Version: 10.1.1 Security Note Published: 2013-06-21 SWD-20130621110651069 Contents 1 About this guide...4 2 What is BlackBerry Enterprise

More information

BlackBerry Enterprise Service 10. Version: 10.2. Configuration Guide

BlackBerry Enterprise Service 10. Version: 10.2. Configuration Guide BlackBerry Enterprise Service 10 Version: 10.2 Configuration Guide Published: 2015-02-27 SWD-20150227164548686 Contents 1 Introduction...7 About this guide...8 What is BlackBerry Enterprise Service 10?...9

More information

Configuration Guide. BES12 Cloud

Configuration Guide. BES12 Cloud Configuration Guide BES12 Cloud Published: 2016-04-08 SWD-20160408113328879 Contents About this guide... 6 Getting started... 7 Configuring BES12 for the first time...7 Administrator permissions you need

More information

Getting Started Guide

Getting Started Guide BlackBerry Web Services For Microsoft.NET developers Version: 10.2 Getting Started Guide Published: 2013-12-02 SWD-20131202165812789 Contents 1 Overview: BlackBerry Enterprise Service 10... 5 2 Overview:

More information

Reference Guide. What's New in BES12 Cloud

Reference Guide. What's New in BES12 Cloud Reference Guide What's New in BES12 Cloud 711-60712-123 Published: 2016-06-20 SWD-20160620151902701 Contents What's new in BES12 Cloud...5 Supported features by device type... 5 Compatibility and requirements...11

More information

Installation and Administration Guide

Installation and Administration Guide Installation and Administration Guide BlackBerry Enterprise Transporter for BlackBerry Enterprise Service 12 Version 12.0 Published: 2014-11-06 SWD-20141106165936643 Contents What is BES12?... 6 Key features

More information

Configuration Guide BES12. Version 12.4

Configuration Guide BES12. Version 12.4 Configuration Guide BES12 Version 12.4 Published: 2016-04-13 SWD-20160413171027740 Contents About this guide... 8 Getting started... 9 Configuring BES12 for the first time...9 Configuration tasks for managing

More information

Troubleshooting BlackBerry Enterprise Service 10 version 10.1.1 726-08745-123. Instructor Manual

Troubleshooting BlackBerry Enterprise Service 10 version 10.1.1 726-08745-123. Instructor Manual Troubleshooting BlackBerry Enterprise Service 10 version 10.1.1 726-08745-123 Instructor Manual Published: 2013-07-02 SWD-20130702091645092 Contents Advance preparation...7 Required materials...7 Topics

More information

Sophos Mobile Control Super administrator guide. Product version: 3

Sophos Mobile Control Super administrator guide. Product version: 3 Sophos Mobile Control Super administrator guide Product version: 3 Document date: January 2013 Contents 1 About Sophos Mobile Control...3 2 Super administrator accounts...4 3 The super administrator customer...5

More information

Administration Guide. BlackBerry Resource Kit for BlackBerry Enterprise Service 10. Version 10.2

Administration Guide. BlackBerry Resource Kit for BlackBerry Enterprise Service 10. Version 10.2 Administration Guide BlackBerry Resource Kit for BlackBerry Enterprise Service 10 Version 10.2 Published: 2015-11-12 SWD-20151112124107981 Contents Overview: BlackBerry Enterprise Service 10... 8 Overview:

More information

BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 Service Pack: 2. Feature and Technical Overview

BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 Service Pack: 2. Feature and Technical Overview BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 Service Pack: 2 Feature and Technical Overview Published: 2010-06-16 SWDT305802-1108946-0615123042-001 Contents 1 Overview: BlackBerry Enterprise

More information

Installation and Configuration Guide

Installation and Configuration Guide Installation and Configuration Guide BlackBerry Resource Kit for BlackBerry Enterprise Service 10 Version 10.2 Published: 2015-11-12 SWD-20151112124827386 Contents Overview: BlackBerry Enterprise Service

More information

Secure, Centralized, Simple

Secure, Centralized, Simple Whitepaper Secure, Centralized, Simple Multi-platform Enterprise Mobility Management 2 Controlling it all from one place BlackBerry Enterprise Service 10 (BES10) is a unified, multi-platform, device, application,

More information

Sophos Mobile Control Installation guide. Product version: 3

Sophos Mobile Control Installation guide. Product version: 3 Sophos Mobile Control Installation guide Product version: 3 Document date: January 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...4 3 Set up Sophos Mobile Control...16 4 External

More information

Sophos Mobile Control Startup guide. Product version: 3.5

Sophos Mobile Control Startup guide. Product version: 3.5 Sophos Mobile Control Startup guide Product version: 3.5 Document date: July 2013 Contents 1 About this guide...3 2 What are the key steps?...5 3 Log in as a super administrator...6 4 Activate Sophos Mobile

More information

Sophos Mobile Control Installation guide. Product version: 3.5

Sophos Mobile Control Installation guide. Product version: 3.5 Sophos Mobile Control Installation guide Product version: 3.5 Document date: July 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...4 3 Set up Sophos Mobile Control...10 4 External

More information

Sophos Mobile Control Administrator guide. Product version: 3

Sophos Mobile Control Administrator guide. Product version: 3 Sophos Mobile Control Administrator guide Product version: 3 Document date: January 2013 Contents 1 About Sophos Mobile Control...4 2 About the Sophos Mobile Control web console...7 3 Key steps for managing

More information

Managing BlackBerry Enterprise Service 10 version 10.2

Managing BlackBerry Enterprise Service 10 version 10.2 Managing BlackBerry Enterprise Service 10 version 10.2 Course details Course code 726-08882-123 Approximate duration Labs 3 days Labs are included in this course Course overview This course explains how

More information

Sophos Mobile Control SaaS startup guide. Product version: 6

Sophos Mobile Control SaaS startup guide. Product version: 6 Sophos Mobile Control SaaS startup guide Product version: 6 Document date: January 2016 Contents 1 About this guide...4 2 About Sophos Mobile Control...5 3 What are the key steps?...7 4 Change your password...8

More information

Sophos Mobile Control Startup guide. Product version: 3

Sophos Mobile Control Startup guide. Product version: 3 Sophos Mobile Control Startup guide Product version: 3 Document date: January 2013 Contents 1 About this guide...3 2 What are the key steps?...5 3 Log in as a super administrator...6 4 Activate Sophos

More information

Advanced Configuration Steps

Advanced Configuration Steps Advanced Configuration Steps After you have downloaded a trial, you can perform the following from the Setup menu in the MaaS360 portal: Configure additional services Configure device enrollment settings

More information

Sophos Mobile Control Installation guide

Sophos Mobile Control Installation guide Sophos Mobile Control Installation guide Product version: 2.5 Document date: July 2012 Contents 1 Introduction... 3 2 The Sophos Mobile Control server... 4 3 Set up Sophos Mobile Control... 13 4 Running

More information

BlackBerry Business Cloud Services. Administration Guide

BlackBerry Business Cloud Services. Administration Guide BlackBerry Business Cloud Services Administration Guide Published: 2012-07-25 SWD-20120725193410416 Contents 1 About BlackBerry Business Cloud Services... 8 BlackBerry Business Cloud Services feature overview...

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android GO!Enterprise MDM for Android, Version 3.x GO!Enterprise MDM for Android 1 Table of Contents GO!Enterprise MDM

More information

http://docs.trendmicro.com

http://docs.trendmicro.com Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the product, please review the readme files,

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown GO!Enterprise MDM for Android, Version 3.x GO!Enterprise MDM for Android with TouchDown 1 Table

More information

Android App User Guide

Android App User Guide www.novell.com/documentation Android App User Guide ZENworks Mobile Management 2.7.x August 2013 Legal Notices Novell, Inc., makes no representations or warranties with respect to the contents or use of

More information

Configuration Guide. BES12 Cloud

Configuration Guide. BES12 Cloud Configuration Guide BES12 Cloud Published: 2016-07-20 SWD-20160718120737425 Contents About this guide... 6 Getting started... 7 Configuring BES12 for the first time...7 Administrator permissions you need

More information

COMMUNITAKE TECHNOLOGIES MOBILE DEVICE MANAGEMENT FROM BELL USER GUIDE

COMMUNITAKE TECHNOLOGIES MOBILE DEVICE MANAGEMENT FROM BELL USER GUIDE COMMUNITAKE TECHNOLOGIES MOBILE DEVICE MANAGEMENT FROM BELL USER GUIDE Mobile Device Management, User Guide Copyright 2013, CommuniTake Technologies Ltd., Yokneam, Israel. All rights reserved. For a hard-copy

More information

WatchDox Administrator's Guide. Application Version 3.7.5

WatchDox Administrator's Guide. Application Version 3.7.5 Application Version 3.7.5 Confidentiality This document contains confidential material that is proprietary WatchDox. The information and ideas herein may not be disclosed to any unauthorized individuals

More information

BlackBerry Enterprise Server for Microsoft Exchange Version: 4.1 Service Pack: 7. Administration Guide

BlackBerry Enterprise Server for Microsoft Exchange Version: 4.1 Service Pack: 7. Administration Guide BlackBerry Enterprise Server for Microsoft Exchange Version: 4.1 Service Pack: 7 Administration Guide Published: 2009-11-9 SWD-907816-1109013225-001 Contents 1 Creating administrator accounts... 13 Administrative

More information

Product Manual. MDM On Premise Installation Version 8.1. Last Updated: 06/07/15

Product Manual. MDM On Premise Installation Version 8.1. Last Updated: 06/07/15 Product Manual MDM On Premise Installation Version 8.1 Last Updated: 06/07/15 Parallels IP Holdings GmbH Vordergasse 59 8200 Schaffhausen Switzerland Tel: + 41 52 632 0411 Fax: + 41 52 672 2010 www.parallels.com

More information

Sophos Mobile Control Administrator guide. Product version: 3.6

Sophos Mobile Control Administrator guide. Product version: 3.6 Sophos Mobile Control Administrator guide Product version: 3.6 Document date: November 2013 Contents 1 About Sophos Mobile Control...4 2 About the Sophos Mobile Control web console...7 3 Key steps for

More information

Sophos Mobile Control Installation guide. Product version: 3.6

Sophos Mobile Control Installation guide. Product version: 3.6 Sophos Mobile Control Installation guide Product version: 3.6 Document date: November 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...5 3 Set up Sophos Mobile Control...11 4 External

More information

Mobile Device Management Version 8. Last updated: 17-10-14

Mobile Device Management Version 8. Last updated: 17-10-14 Mobile Device Management Version 8 Last updated: 17-10-14 Copyright 2013, 2X Ltd. http://www.2x.com E mail: info@2x.com Information in this document is subject to change without notice. Companies names

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for BlackBerry

GO!Enterprise MDM Device Application User Guide Installation and Configuration for BlackBerry GO!Enterprise MDM Device Application User Guide Installation and Configuration for BlackBerry GO!Enterprise MDM Version 4.11.x GO!Enterprise MDM for BlackBerry 1 Table of Contents GO!Enterprise MDM for

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios with TouchDown

GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios with TouchDown GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios with TouchDown GO!Enterprise MDM for ios Devices, Version 3.x GO!Enterprise MDM for ios with TouchDown 1 Table of

More information

NotifyMDM Device Application User Guide Installation and Configuration for Windows Mobile 6 Devices

NotifyMDM Device Application User Guide Installation and Configuration for Windows Mobile 6 Devices NotifyMDM Device Application User Guide Installation and Configuration for Windows Mobile 6 Devices End-of-Life Notice Please note that GO!Enterprise MDM server version 3.6.3 is the last to officially

More information

Enterprise Mobility Management Migration Migrating from Legacy EMM to an epo Managed EMM Environment. Paul Luetje Enterprise Solutions Architect

Enterprise Mobility Management Migration Migrating from Legacy EMM to an epo Managed EMM Environment. Paul Luetje Enterprise Solutions Architect Enterprise Mobility Management Migration Migrating from Legacy EMM to an epo Managed EMM Environment Paul Luetje Enterprise Solutions Architect Table of Contents Welcome... 3 Purpose of this document...

More information

Upgrade Guide BES12. Version 12.1

Upgrade Guide BES12. Version 12.1 Upgrade Guide BES12 Version 12.1 Published: 2015-02-25 SWD-20150413111718083 Contents Supported upgrade environments...4 Upgrading from BES12 version 12.0 to BES12 version 12.1...5 Preupgrade tasks...5

More information

Building a BYOD Program Using the Casper Suite. Technical Paper Casper Suite v9.4 or Later 17 September 2014

Building a BYOD Program Using the Casper Suite. Technical Paper Casper Suite v9.4 or Later 17 September 2014 Building a BYOD Program Using the Casper Suite Technical Paper Casper Suite v9.4 or Later 17 September 2014 JAMF Software, LLC 2014 JAMF Software, LLC. All rights reserved. JAMF Software has made all efforts

More information

BlackBerry Enterprise Service 10 version 10.2 preinstallation and preupgrade checklist

BlackBerry Enterprise Service 10 version 10.2 preinstallation and preupgrade checklist BlackBerry Enterprise Service version.2 preinstallation and preupgrade checklist Verify that the following requirements are met before you install or upgrade to BlackBerry Enterprise Service version.2.

More information

User Guide. Time Warner Cable Business Class Cloud Solutions Control Panel. Hosted Microsoft Exchange 2007 Hosted Microsoft SharePoint 2007

User Guide. Time Warner Cable Business Class Cloud Solutions Control Panel. Hosted Microsoft Exchange 2007 Hosted Microsoft SharePoint 2007 Chapter Title Time Warner Cable Business Class Cloud Solutions Control Panel User Guide Hosted Microsoft Exchange 2007 Hosted Microsoft SharePoint 2007 Version 1.1 Table of Contents Table of Contents...

More information

Overview and What's New Guide

Overview and What's New Guide Overview and What's New Guide BES12 Version 12.3 Published: 2015-11-16 SWD-20151116083107902 Contents About this guide... 4 What is BES12?... 5 What's new in BES12... 6 Key BES12 features...11 Key features

More information

McAfee Enterprise Mobility Management 11.0 Software

McAfee Enterprise Mobility Management 11.0 Software Product Guide McAfee Enterprise Mobility Management 11.0 Software For use with epolicy Orchestrator 4.6.5-5.0 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS

More information

UP L18 Enhanced MDM and Updated Email Protection Hands-On Lab

UP L18 Enhanced MDM and Updated Email Protection Hands-On Lab UP L18 Enhanced MDM and Updated Email Protection Hands-On Lab Description The Symantec App Center platform continues to expand it s offering with new enhanced support for native agent based device management

More information

BlackBerry Internet Service. Version: 4.5.1. Administration Guide

BlackBerry Internet Service. Version: 4.5.1. Administration Guide BlackBerry Internet Service Version: 4.5.1 Administration Guide Published: 2014-01-22 SWD-20140122155744258 Contents 1 Getting started...6 Administrative feature availability... 6 Availability of features

More information

Delegated Administration Quick Start

Delegated Administration Quick Start Delegated Administration Quick Start Topic 50200 Delegated Administration Quick Start Updated 22-Oct-2013 Applies to: Web Filter, Web Security, Web Security Gateway, and Web Security Gateway Anywhere,

More information

BlackBerry Enterprise Server Version: 5.0. Monitoring Guide

BlackBerry Enterprise Server Version: 5.0. Monitoring Guide BlackBerry Enterprise Server Version: 5.0 Monitoring Guide SWD-567890-0331093029-001 Contents 1 BlackBerry Enterprise Server monitoring solution... 5 BlackBerry Monitoring Service... 5 Web address and

More information

Mobile Iron User Guide

Mobile Iron User Guide 2015 Mobile Iron User Guide Information technology Sparrow Health System 9/1/2015 Contents...0 Introduction...2 Changes to your Mobile Device...2 Self Service Portal...3 Registering your new device...4

More information

GETS AIRWATCH MDM HANDBOOK

GETS AIRWATCH MDM HANDBOOK GETS AIRWATCH MDM HANDBOOK October 2014 Abstract Using AirWatch, a mobile device management tool, within the public sector. GTA Product and Services Group EXECUTIVE SUMMARY.. 2 INTRODUCTION TO THE GETS

More information

Authentication in XenMobile 8.6 with a Focus on Client Certificate Authentication

Authentication in XenMobile 8.6 with a Focus on Client Certificate Authentication Authentication in XenMobile 8.6 with a Focus on Client Certificate Authentication Authentication is about security and user experience and balancing the two goals. This document describes the authentication

More information

Mobile Configuration Profiles for ios Devices Technical Note

Mobile Configuration Profiles for ios Devices Technical Note Mobile Configuration Profiles for ios Devices Technical Note Mobile Configuration Profiles for ios Devices Technical Note December 10, 2013 04-502-197517-20131210 Copyright 2013 Fortinet, Inc. All rights

More information

BlackBerry Mobile Voice System. Version: 5.3. Administration Guide

BlackBerry Mobile Voice System. Version: 5.3. Administration Guide BlackBerry Mobile Voice System Version: 5.3 Administration Guide Published: 2013-06-27 SWD-20130627112233808 Contents 1 Overview...7 2 Preparing to manage BlackBerry MVS user accounts... 8 3 Managing user

More information

Preparing for GO!Enterprise MDM On-Demand Service

Preparing for GO!Enterprise MDM On-Demand Service Preparing for GO!Enterprise MDM On-Demand Service This guide provides information on...... An overview of GO!Enterprise MDM... Preparing your environment for GO!Enterprise MDM On-Demand... Firewall rules

More information

Administration Guide. WatchDox Server. Version 4.8.0

Administration Guide. WatchDox Server. Version 4.8.0 Administration Guide WatchDox Server Version 4.8.0 Published: 2015-11-01 SWD-20151101091846278 Contents Introduction... 7 Getting started... 11 Signing in to WatchDox... 11 Signing in with username and

More information

http://docs.trendmicro.com

http://docs.trendmicro.com Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the product, please review the readme files,

More information

MaaS360 Cloud Extender

MaaS360 Cloud Extender MaaS360 Cloud Extender Installation Guide Copyright 2013 Fiberlink Communications Corporation. All rights reserved. Information in this document is subject to change without notice. The software described

More information

MaaS360 On-Premises Cloud Extender

MaaS360 On-Premises Cloud Extender MaaS360 On-Premises Cloud Extender Installation Guide Copyright 2014 Fiberlink Communications Corporation. All rights reserved. Information in this document is subject to change without notice. The software

More information

Sophos Mobile Control as a Service Startup guide. Product version: 3.5

Sophos Mobile Control as a Service Startup guide. Product version: 3.5 Sophos Mobile Control as a Service Startup guide Product version: 3.5 Document date: August 2013 Contents 1 About this guide...3 2 What are the key steps?...4 3 First login...5 4 Change your administrator

More information

Bell Mobile Device Management (MDM)

Bell Mobile Device Management (MDM) Bell MDM Technical FAQs 1 Bell Mobile Device Management (MDM) Frequently Asked Questions INTRODUCTION Bell Mobile Device Management provides business customers an all in one device administration tool

More information

Sophos Mobile Control user help. Product version: 6.1

Sophos Mobile Control user help. Product version: 6.1 Sophos Mobile Control user help Product version: 6.1 Document date: May 2016 Contents 1 About this help...4 2 About Sophos Mobile Control...5 3 Login to the Self Service Portal...6 3.1 First login...6

More information

Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: info@3cx.com

Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: info@3cx.com Manual Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: info@3cx.com Information in this document is subject to change without notice. Companies names and data used in examples herein are fictitious

More information

Server Software Installation Guide

Server Software Installation Guide Server Software Installation Guide This guide provides information on...... The architecture model for GO!Enterprise MDM system setup... Hardware and supporting software requirements for GO!Enterprise

More information

Symantec Mobile Management 7.2 SP3 MR1 Release Notes

Symantec Mobile Management 7.2 SP3 MR1 Release Notes Mobile Management 7.2 SP3 MR1 Release Notes Mobile Management 7.2 SP3 MR1 Release Notes This document includes the following topics: About What's new in 7.2 SP3 MR1 Fixed issues in 7.2 SP3 MR1 Known issues

More information

Sophos Mobile Control Technical guide

Sophos Mobile Control Technical guide Sophos Mobile Control Technical guide Product version: 2 Document date: December 2011 Contents 1. About Sophos Mobile Control... 3 2. Integration... 4 3. Architecture... 6 4. Workflow... 12 5. Directory

More information

OnCommand Performance Manager 1.1

OnCommand Performance Manager 1.1 OnCommand Performance Manager 1.1 Installation and Setup Guide For Red Hat Enterprise Linux NetApp, Inc. 495 East Java Drive Sunnyvale, CA 94089 U.S. Telephone: +1 (408) 822-6000 Fax: +1 (408) 822-4501

More information

Kaspersky Lab Mobile Device Management Deployment Guide

Kaspersky Lab Mobile Device Management Deployment Guide Kaspersky Lab Mobile Device Management Deployment Guide Introduction With the release of Kaspersky Security Center 10.0 a new functionality has been implemented which allows centralized management of mobile

More information

What's New in BlackBerry Enterprise Server 5.0 SP4 for Novell GroupWise

What's New in BlackBerry Enterprise Server 5.0 SP4 for Novell GroupWise What's New in BlackBerry Enterprise Server 5.0 SP4 for Novell GroupWise Upgrade paths Enhancements to the setup application Administrators can upgrade to BlackBerry Enterprise Server 5.0 SP4 for Novell

More information

CA Mobile Device Management 2014 Q1 Getting Started

CA Mobile Device Management 2014 Q1 Getting Started CA Mobile Device Management 2014 Q1 Getting Started This Documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as the Documentation ) is

More information

APNS Certificate generating and installation

APNS Certificate generating and installation APNS Certificate generating and installation Quick Guide for generating and installing an Apple APNS Certificate Version: x.x MobiDM Quick Guide for APNS Certificate Page 1 Index 1. APPLE APNS CERTIFICATE...

More information

Lepide Active Directory Self Service. Configuration Guide. Follow the simple steps given in this document to start working with

Lepide Active Directory Self Service. Configuration Guide. Follow the simple steps given in this document to start working with Lepide Active Directory Self Service Configuration Guide 2014 Follow the simple steps given in this document to start working with Lepide Active Directory Self Service Table of Contents 1. Introduction...3

More information

Security Technical. Overview. BlackBerry Enterprise Service 10. BlackBerry Device Service Solution Version: 10.2

Security Technical. Overview. BlackBerry Enterprise Service 10. BlackBerry Device Service Solution Version: 10.2 BlackBerry Enterprise Service 10 BlackBerry Device Service Solution Version: 10.2 Security Technical Overview Published: 2014-09-10 SWD-20140908123239883 Contents 1 About BlackBerry Device Service solution

More information

BlackBerry Internet Service. Version: 4.5.1. User Guide

BlackBerry Internet Service. Version: 4.5.1. User Guide BlackBerry Internet Service Version: 4.5.1 User Guide Published: 2014-05-22 SWD-20140522173857703 Contents 1 Getting started...7 About the messaging service plans for the BlackBerry Internet Service...7

More information

Installation and Upgrade Guide

Installation and Upgrade Guide Installation and Upgrade Guide BES12 Version 12.4 Published: 2016-05-31 SWD-20160531105238577 Contents Planning...6 Steps to plan your BES12 environment...6 Identifying your organization's needs...6 EMM

More information

AVG Business SSO Partner Getting Started Guide

AVG Business SSO Partner Getting Started Guide AVG Business SSO Partner Getting Started Guide Table of Contents Overview... 2 Getting Started... 3 Web and OS requirements... 3 Supported web and device browsers... 3 Initial Login... 4 Navigation in

More information

Development Guide. BlackBerry Web Services. Microsoft.NET. Version 12.1

Development Guide. BlackBerry Web Services. Microsoft.NET. Version 12.1 Development Guide BlackBerry Web Services Microsoft.NET Version 12.1 Published: 2015-02-25 SWD-20150507151709605 Contents BlackBerry Web Services... 4 Programmatic access to common management tasks...

More information

UNI EMAIL - WINDOWS. How to... Access your University email on your Windows Computer. Introduction. Step 1/1 - Setting Up Your Windows Computer

UNI EMAIL - WINDOWS. How to... Access your University email on your Windows Computer. Introduction. Step 1/1 - Setting Up Your Windows Computer UNIVERSITY EMAIL - WINDOWS How to... Access your University email on your Windows Computer Introduction The University of South Wales offers all enrolled students the use of a free personal e-mail account

More information

Copyright 2012 Trend Micro Incorporated. All rights reserved.

Copyright 2012 Trend Micro Incorporated. All rights reserved. Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the software, please review the readme files,

More information

UNIFIED COMMUNICATIONS POST-MIGRATION INSTRUCTIONS

UNIFIED COMMUNICATIONS POST-MIGRATION INSTRUCTIONS UNIFIED COMMUNICATIONS POST-MIGRATION INSTRUCTIONS (PURPOSE): The purpose of this document is to prepare the email user for post email migration activities to ensure a successful email migration with no

More information

Migration User Guides: The Console Email Application Setup Guide

Migration User Guides: The Console Email Application Setup Guide Migration User Guides: The Console Email Application Setup Guide Version 1.0 1 Contents Introduction 3 What are my email software settings? 3 Popular email software setup tutorials 3 Apple Mail OS Maverick

More information

ManageEngine Desktop Central. Mobile Device Management User Guide

ManageEngine Desktop Central. Mobile Device Management User Guide ManageEngine Desktop Central Mobile Device Management User Guide Contents 1 Mobile Device Management... 2 1.1 Supported Devices... 2 1.2 What Management Operations you can Perform?... 2 2 Setting Up MDM...

More information

BlackBerry Universal Device Service. Demo Access. AUTHOR: System4u

BlackBerry Universal Device Service. Demo Access. AUTHOR: System4u Demo Access AUTHOR: System4u BlackBerry Universal Device Service Revisions Date Version Description Author June 26 th 2012 1.0 Roman Přikryl September 25 th 2012 1.5 Revision Roman Přikryl October 5 th

More information

Introduction to the EIS Guide

Introduction to the EIS Guide Introduction to the EIS Guide The AirWatch Enterprise Integration Service (EIS) provides organizations the ability to securely integrate with back-end enterprise systems from either the AirWatch SaaS environment

More information

Hosted Microsoft Exchange Client Setup & Guide Book

Hosted Microsoft Exchange Client Setup & Guide Book Hosted Microsoft Exchange Client Setup & Guide Book Section 1 Microsoft Outlook Web Access (OWA) access directions Section 2 Windows 10 Mail App setup & configuration Section 3 Windows Mobile Phone ActiveSync

More information

BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0. Administration Guide

BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0. Administration Guide BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 Administration Guide SWDT487521-635336-0528040852-001 Contents 1 Overview: BlackBerry Enterprise Server... 21 Getting started in your BlackBerry

More information

Installation and Administration Guide

Installation and Administration Guide Installation and Administration Guide BlackBerry Collaboration Service Version 12.1 Published: 2015-02-25 SWD-20150225135812271 Contents About this guide... 5 Planning a BlackBerry Collaboration Service

More information

Feature and Technical

Feature and Technical BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 Service Pack: 4 Feature and Technical Overview Published: 2013-11-07 SWD-20131107160132924 Contents 1 Document revision history...6 2 What's

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios Devices

GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios Devices GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios Devices GO!Enterprise MDM for ios Devices, Version 3.x GO!Enterprise MDM for ios Devices 1 Table of Contents GO!Enterprise

More information

User's Guide. Product Version: 2.5.0 Publication Date: 7/25/2011

User's Guide. Product Version: 2.5.0 Publication Date: 7/25/2011 User's Guide Product Version: 2.5.0 Publication Date: 7/25/2011 Copyright 2009-2011, LINOMA SOFTWARE LINOMA SOFTWARE is a division of LINOMA GROUP, Inc. Contents GoAnywhere Services Welcome 6 Getting Started

More information