MDM: Enabling Productivity in the world of mobility. Sudhakar S Peddibhotla Director of Engineering, Good Technology

Transcription

1 MDM: Enabling Productivity in the world of mobility Sudhakar S Peddibhotla Director of Engineering, Good Technology

2 Disclaimer None of the content in this presentation can be consider Good Technology s official position or roadmap The content is for educational purpose only 2

3 The problem statement Smartphone and tablet usage has skyrocketed Basic access: , Contacts Business Apps: B2B, B2C, B2E Enterprises are concerned about Security: Data Leak, Enterprise Network/Resource Access Administration: Configuration, Support Regulatory compliance MDM tries to address these problems 3

4 How does MDM solve these problems? Set policies for password, device and application restrictions Security Administration Regulatory Compliance Configure enterprise resource access Distribute Certificates tied to enterprise CA (PKI) Configure and distributes enterprise and App Store Apps Query real-time device information and compliance status Generate various reports Take remote action such as lock and wipe Supports BYOD 4

5 MDM defined Mobile Device Management Gartner s definition Software that provides the following functions: software distribution, policy management, inventory management, security management and service management for smartphones and media tablets. MDM overlaps with (or also covers) many other areas Mobile Application Management (MAM) Enterprise Mobility Management (EMM) Mobile Content Management (MCM) 5

6 Topics Device Management App Management Secure Containers Service Management 6

7 DEVICE MANAGEMENT

8 Device Management A typical device life cycle MDM Admin (1) Enroll (4) Accept Policy (5) Access Enterprise (7) Retire Network (2) Set Policy (3) Configure (6) Support (7) Retire User enrolls device into MDM MDM Server sends policies and configures the device User accepts the policy User accesses enterprise resources: network, applications, data User may call in for support User or Admin retires the device from MDM use 8

9 Device Management Capabilities vary between platforms Device Enrollment may require an Agent App Android Agent App needs to become Device Administrator; multiple device administrators are possible ios and Windows have in-build MDM agents Specifications provided by Apple and Microsoft Most platforms have similar password policies Length, # Complex Chars, Age, Idle Timeout, History Device restrictions vary significantly cross platforms E.g: ios has ios specific restrictions Facetime, Airdrop, imessage, icloud, Siri, PhotoStream, itunes, Safari Android device management is fragmented Stock Android has traditionally supported only limited device management OEMs have created their device management extensions Samsung is the most notable one with Samsung SAFE and KNOX 9

10 Device Management Capabilities vary between platforms (con t) Notification servers help servers initiate communication with device APNS is the only way to reach the device GCM provides a way to the reach the App on device WNS is Windows provided way to reach Windows Phone and newer Windows devices ios and Samsung SAFE provide advanced enterprise configuration Extensive Wi-Fi 802.1X configuration covering all major EAP types All major VPNs configurable with ios MDM ActiveSync configuration including certificate based options ios has simple device retirement All restrictions, configurations and Apps get removed with one action 10

11 Device Management Philosophies varies across platforms With ios, end users have higher degree of control They can removed the MDM enrollment at will They need to be prompted for App installation They can remove unnecessary Apps any time If enterprise wants tighter control, Apple does provide Supervised Mode and Device Enrollment Program Android is open OEM solutions like Samsung SAFE/KNOX allowing high degree of enterprise control Silent App Installations Enforced Device Management Prevent App installs/running based on App permission Compromised Device Detection is significant challenge Rooted / Jail broken devices Blacklist/Whitelist Apps 11

12 APP MANAGEMENT

13 What is Mobile App Management? Allows an enterprise to build a private app store configure & distribute apps; solution optimized for app delivery track app usage Does not require MDM, though having MDM enables more features Allows users to choose Apps from a Catalog App 13

14 App Management App lifecycle Admin builds the Enterprise App Store Source: App Store, Google Play, Internal Apps, B2B Apps Target: OS, Version, Form Factor Group Required Vs. Optional Apps Admin Push Vs. User Pull User gets access to a App Catalog Each user may not get the same App Catalog Catalog App or Web URL App Ratings User downloads App App server applies App license for tracking purposes 14

15 App Management Capabilities vary by platform Apple provides two choices for enterprise Apps ios Developer Enterprise Account for internal App development B2B App Store for utilizing App from enterprise App vendors Apple supports Volume Purchase program Using redemption codes purchased from Apple, enterprises can distribute Apps from the B2B App store ios platform also supports App configuration Property dictionary that allows remote configuration by administrator; requires MDM relationship with device Installing Android App does not require special provisioning profiles (as in ios) 15

16 SECURE CONTAINERS

17 What are Secure Containers? Space within the mobile that is fully managed by the enterprise. The enterprise Owns the Apps in this space Owns the Data in this space Has Full admin rights to the space Maintains separation from user owned elements Device Attributes: Camera, WiFi, Bluetooth Device Content: Pictures, Videos, Documents Device Apps: Personal Apps that users used A core capability to address BYOD use cases 17

18 Secure Containers Key features Provides App-level Data Encryption Prevents data leakage to Apps outside container Enables easy access to enterprise resources Access Control Simplifies App development w/ App Wrapping Enables secure work flows : App Wrapping Vs. SDK Data sharing between trusted Apps Shared services between trusted Apps Single Sign On Management extensions 18

19 Secure Containers Example: Good Dynamics Marketplace 19

20 SERVICE MANAGEMENT

21 Service Management Key capability as Mobile becomes mission critical Focused on end-to-end mobile service delivery Devices, Apps, Connectivity, Back-end servers, Mobile Application Servers Focused on visibility and predictive analytics 21

22 THANK YOU 2014 Good Technology Corporation and its related entities. All use is subject to license terms posted at All rights reserved. GOOD, GOOD TECHNOLOGY, the GOOD logo, GOOD FOR ENTERPRISE, GOOD FOR GOVERNMENT, GOOD FOR YOU, GOOD APPCENTRAL, GOOD DYNAMICS, SECURED BY GOOD, GOOD MOBILE MANAGER, GOOD CONNECT, GOOD CONNECTED CONTAINER,GOOD SHARE, GOOD TRUST, GOOD VAULT, and GOOD DYNAMICS APPKINETICS are trademarks of Good Technology Corporation and its related entities. All third-party trademarks, trade names, or service marks may be claimed as the property of their respective owners. Good s technology and products are protected by issued and pending U.S. and foreign patents. ipad and iphone are trademarks of Apple, Inc., registered in the U.S. and other countries. Android is a trademark of Google Inc. The Android robot is reproduced or modified from work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License.