Enrolment Guide Fujitsuâ€™s Managed Mobile service for devices

Enrolment Guide/Fujitsu’s Managed Mobile service for devices with Android operating system

For: General

7.10.2016

Version 3.8

1 of 19 www.fujitsu.com/fi

© Copyright Fujitsu Finland Oy

Enrolment Guide Fujitsu’s Managed Mobile service for devices with Android operating system Tested against various android devices.

8/1/16

Set up and enrolment of Fujitsu’s Managed Mobile service from a link delivered via SMS or directly using the device’s play store application.

MDM Enrolment Guide Android eng / Fujitsu’s Managed Mobile service for devices with Android operating system

Page 2 of 19 www.fujitsu.com/fi


Contents

1 General 3

2 Before set up 3

3 Enrolment 4

3.1 Security policies and applications deployed to the device 9

3.1.1 Security policies – Screen lock with a pin code 9

3.1.2 F-Secure Mobile Antivirus 10

3.2 Email clients and configurations 11

3.2.1 TouchDown 11

3.2.2 Samsung Exchange ActiveSync 13

3.2.3 WorxMail 14

4 WorxWeb 15

5 Corporate Application Store 16

6 Xenmobile Self Help Portal 17

6 Appendix 1 / Worx Mail functionality chart 18


3 of 19 www.fujitsu.com/fi


1 General

Fujitsu’s Managed Mobile service manages customer's smartphones, tablets and other mobile devices, and the

applications and settings within them. The service ensures that users have consistent, reliable and secure access to

enterprise data and applications. It uses standardised services, management tools and methods to ensure corporate

security and compliance regardless of the user's location. Settings enabled on different device models and operating

system (OS) versions may vary as the configurations are dependent on the OS capabilities.

During the enrolment, the device is pre-configured for corporate use using the predefined pre-installation package. A

typical setup includes the enforcement of organization’s security policies on the mobile device (e.g. device lock

code/passcode and requirement of complex passwords), installation of an anti-virus software and setting up corporate

push email account for the user.

This document explains the typical set up and enrolment process for devices with Android operating system using

mobile data connection. The print screens illustrating the installation process are from Nexus 5 running Android 6.0.1

and Samsung Tab 4 running android 5.1.1.

If you have any questions about this service, or you need assistance during the set up process, please contact your

Service Desk.

2 Before set up

Make sure you have a working connection to the internet. You can try to browse the web with your mobile device to

check whether the web pages are available. If Internet connection is not available, please consult your network operator

to get the correct settings for your device.

Allow installation of non-Market applications

As we aren’t downloading the client from Google play store, we need to allow the installation of the app from an

“unknown source” by navigating to: Menu > Settings > Security > Unknown sources. Tap Unknown sources and then OK.

(This may differ slightly on makes and models of Android)




3 Enrolment

If you have received an SMS that invites you to Managed Mobile service and asks you to download the client, please click

the link https://play.google.com/store/apps/details?id=com.zenprise (section a) or

http://mobilestore.invianet.com/download/fmm (section b) on the SMS and proceed to step 2a or 2b depending which

link you used in this section.

1a. If you do not have the invitation SMS on your device, you can either search for Citrix Secure Hub from play store

2a. You will see the middle picture only on new android 6.x and above, it is standard notification on new android

devices.

After this you can jump to step 5.




1b, Type in the address http://mobilestore.invianet.com/download/fmm.htm directly in the mobile device’s browser. It is

recommended to use the default browser of the device

Select the correct device client according to your device Operating System.

You might see the warning notification of the file type if you use chrome browser for downloading the file.

A message starting downloading appears. You can see when download is complete by swiping down the notification bar

from the top of the screen. The download can take several minutes to complete, typically up to 15 minutes.

2b. Run the apk and complete the

action using package installer

(select “just once”), and then tap

Install

3b. Tap Install 4b. Tap Open.




5. On Android 6 and higher you will need to give some specific rights for the MDM to run. Choose Allow on all.




6. Enter your username as provided in the 7. If auto-discovery fails, you will get the following server error

welcome email and tap “Next”. message, in that case please press red X symbol and enter

If successful, you will be taken to step 8 the address provided in the welcome email

8. If you company is using premium 9. Fill in the MDM password that is 10. Choose Activate

services you will asked to enroll associated with the username.

your device. Choose Yes.

Note! the following screen(s) may appear out of sequence on your device and depending on the device model you may see

some or none of them.




11. If your company has the premium service in use you will be asked to define a Citrix Pin to ease access to premium

components. The password complexity requirements may differ from the example shown below.

12. The following screen appear only on Samsung Safe compliant devices running Android OS 4.3 or above and if your

organization have Samsung specific features enabled.

Tick the acknowledgement check box and tap Confirm

IMPORTANT

Although you have now successfully enrolled your device to the Managed Mobile service, your customer specific

applications and security policies will be automatically downloaded to your device. You will then need to follow the

appropriate sections below. PLEASE NOTE Only common applications and security policy examples are documented

from 3.2.1 onwards, so you may need to skip past sections which are not relevant and therefore not shown on your

device.

If your corporate applications and policies are not documented below, please contact your service desk.




3.1 Security policies and applications deployed to the device

If you already have a screen lock pincode on your device you will be asked to enter that first and change it if it does not

meet the corporate policies.

3.1.1 Security policies – Screen lock with a pin code

In this instruction the passcode is demonstrated by using a pin code. You are welcomed to use pattern or password if it

meets the requirements set.

1. Tap PIN 2. There will be a guide on the screen how many digits/character your passcode

must be. Enter a passcode that meets these requirements. Confirm the passcode

when prompted for it




3.1.2 F-Secure Mobile Antivirus

On some Samsung devices the F-Secure is installed silently in the background and you will not see steps 1 and 2 below,

and you will need to open F-Secure manually. You can find and activate Mobile Security under Apps if your organization

has the service available.

1. Tap Install 2. If the application doesn’t start

after install, you can open it from

apps menu

3. Tap Accept

4. Installation done, you may

enable anti-theft settings if so

desire




3.2 Email clients and configurations

Fujitsu Managed Mobile has several different Android E-mail clients available. We support

TouchDown which is a secure email client with advanced policies (section 3.2.1)

Native Android email client configuration for capable Samsung devices (section 3.2.2)

Citrix Worx Mail which is a secure E-mail client included in the Managed Mobile Premium service (section 3.2.3)

See below sections for configuration instructions. If you are unsure about what Managed Mobile email service your

organization is currently using, and you are not prompted for TouchDown installation, cannot see new email account

notification or cannot find Worx Mail under Secure Hub, please refer to your Welcome email for further instructions and

consult your service desk if needed.

3.2.1 TouchDown

If your organization have Touchdown in use, you will see the following screens after you have enrolled your device to the

Managed Mobile service.

1. Tap Install 2. Tap I Accept 3. Tap I Accept




4. A Device Configuration Wizard is displayed. Settings are preconfigured and you only need to enter your

email/Exchange password

The TouchDown configuration is completed when you see the synchronization progress bar above. Your organization

may enforce additional security policies via their Exchange environment, which will be enforced at this point. This could

include additional pin codes.

By tapping your device’s Back (arrow) you will return to uncompleted installations, if there are any, that you need to

finish.




3.2.2 Samsung Exchange ActiveSync

If your organization uses Touchdown email instead of Samsung native email application for corporate emails, the

following configuration will not appear. For Touchdown configuration, please see section 3.2.1.

1. Under notification you will find a

prompt of a new email account,

tap on the notification

2. Click OK 3. Fill in your Email password and

tap OK. The device will contact the

Server

4. Tap OK 5. Tap Activate 6. Device will shortly show new

messages in the inbox

By tapping your device’s Back (arrow) you will return to uncompleted installations, if there are any, that you need to

finish.




3.2.3 WorxMail

WorxMail is an enterprise email, calendar, and contacts client that provides secure access to corporate email and

attachments. WorxMail provides all the features and function of a world class email client, plus the added benefit of

ensuring that your company email and attachments are safe.

WorxMail is part of the Fujitsu Managed Mobile Premium service, and may be available for you to download from the

Enterprise Application Store or as an automated push to your device. (see section 4 for downloading instructions).

After launching the WorxMail client, you will be taken to the account setup screen.

In the first screen, you should have your username and domain prepopulated (fig 1), and you only need to fill in your

email (domain) password. After authentication the WorxMail application is ready to use and you will be taken to the

inbox view (fig 2). For a detailed schematic of the functionality, see appendix 1.

Account setup (fig 1.) Inbox view (fig 2.)




4 WorxWeb

WorxWeb is a consumer-like, locally installed mobile browser that enables secure access to internal web resources

including external SaaS, and HTML5 web applications.

WorxWeb is part of the Fujitsu Managed Mobile Service, and may be available for you to download from the Enterprise

Application Store (see section 4 for downloading instructions).

WorxWeb internet/intranet

browsing (fig. 1)

Bookmarks button (fig. 2) Tab switcher button (fig. 3)

WorxWeb leverages MDX technologies to create a secure method for accessing your organization’s internal network via

micro-VPN and additional security features to ensure that you can access all of your internal websites (fig. 1), including

those with sensitive information. WorxWeb offers a seamless user experience in its integration with WorxMail and allows

you to click links, such as "mailto," and have the native apps open inside the secure container on the mobile device.

WorxMail client may include predefined intranet links or web applications in the bookmarks tab, which is accessed from

the bookmark sign in the lower right-hand corner (fig. 2). WorxWeb browser also allows tabbed browsing, the icon

displayed on the right side of the address bar displays the number of open tabs, and by clicking on it, you can either

switch tabs, or open a new tab by clicking the plus “+” sign.




5 Corporate Application Store

Secure Hub client has an in-built application store. Your organization can use the store to offer applications to be

downloaded to your device. Applications in the store can be either in-house corporate applications, links to intranet

resources, links to applications in Play Store or applications running in a container with policy restrictions (MDX

wrapping). If your organization has opted to utilize this feature that is available in the Fujitsu Managed Mobile

Premium, you can access the store selecting it from menu. Upon clicking, you will receive a list of applications that you

have access to. If there are more applications than can fit the view, you can browse for more by swiping the screen

down. You can also browse the apps based on different app categories by choosing the categories option from the top.

You can then install the application to your device by clicking on the appropriate icon and the device will display a

message that it has created a shortcut for you on your home screen and the application is then ready for use. A

checkmark beside the application icon indicates that the application is installed to the device.




6 Xenmobile Self Help Portal

Once you have enrolled your device you can use your workstation’s browser to manage your mobile device. Open you

workstation’s web browser and type in the self-service portal URL address given in the Welcome email. A login screen is

displayed.

Type in your Username and Password. Click Sign in.

Xenmobile Self Help Portal loads up. On the right top corner you can see that you are logged in. Press Sign out when you

want to leave the portal.

On the portal you can view your mobile device (e.g. GT-i9505) information. You can lock, wipe or locate your device.

Locking is an action that will send a lock command to the device.

Wiping is an action that will wipe all data stored on the device and restore the factory settings.

Locating is an action that will locate the device using GPS.




6 Appendix 1 / Worx Mail functionality chart




Contact

FUJITSU FINLAND OY

Address: PL 100, 00012 FUJITSU

Phone: +358 45 7880 00

Website: www.fujitsu.com/fi

© Copyright 2011 Fujitsu, the Fujitsu logo are trademarks or registered trademarks of Fujitsu Limited in Japan and other countries. Other company, product and service names may be trademarks or registered trademarks of their respective owners. Technical data subject to modification and delivery subject to availability. Any liability that the data and illustrations are complete, actual or correct is excluded. Designations may be trademarks and/or copyrights of the respective manufacturer, the use of which by third parties for their own purposes may infringe the rights of such owner.

Date post:	03-Feb-2022
Category:	Documents
Upload:	others
View:	2 times
Download:	0 times

Enrolment Guide Fujitsuâ€™s Managed Mobile service for devices

Documents