...
MobX uses WSO2 EMM to manage and monitor the employees mobile devices and applications. Kim joins as the new marketing Manager and needs to register her personal mobile device with WSO2 EMM, but she is concerned because she doesn't want to expose the personal data on the device to the Organization. On the other hand, MobX is concerned about not letting the other applications installed in Kim's device to access the confidential enterprise data. For example Kim has installed an application for enterprise docs on her device. This application has access to all the enterprise docs and the personal docs as they are all stored in the same location. Therefore, it is important to clearly separate the enterprise and personal data in a BYOD device enrollment scenario. Follow the steps given below to enable data containerization on your device.
...
| Infopanel | |||||
|---|---|---|---|---|---|
| Prerequisite | ||||
You need to have an Android device that supports the Lollipop OS version or upwards.
|
To begin the device registration process open the registration email you received using your mobile and click on the URL provided. The EMM Agent application will download to your mobile device.
| Info |
|---|
You will receive the registration email once the administrator invites you to register with EMM. |
Follow the instructions given below to register an Android device once the EMM agent application downloads:
...
Open the downloaded file, and tap INSTALL.
...
Tap Set Work-Profile to proceed with registering the Android device with data containerization.
...
Missing step and screenshot: Uninstall the agent.
...
Enter the server address based on your environment, in the text box provided. A confirmation message will appear.
- Developer Environment - Enter the server IP as your server address.
Example: 10.10.10.123:9443 Deployment Environment - Enter the domain as your server address.
Note The Android Agent app's default port is 80. If you are using any other port or using port offset in EMM, the server address should state the new port in the following format:
www.abc.com:<PORT>
For example, if the port offset is 1 and you are using the 9763 port, the port will change to 9764. Therefore, in such a scenario an example server IP is as follows: 110.100.7.123:9764
...
- Username - Enter the username provided in the email.
- Password - Enter the password provided in the email.
- Domain - Enter the domain only if the server is hosted with multi-tenant support.
- Ownership type - Select the corresponding device ownership option. This will customize the EMM behavior accordingly.
- BYOD - Bring your own device.
- COPE - Corporate owned personally enabled.
...
If you select BYOD go to step 7 - You will be shown a policy agreement, which you can either accept or reject.
Info You will get access to EMM only if you accept the policy agreement.
- If you select COPE go to step 10 - As its a corporate owned device, you will not be shown a policy agreement. You will have to adhere to the company policy.
...
Set a PIN code of your choice with a minimum of 4 digits. The PIN code will be used to secure your personal data. Thereby, the EMM server will not be able to carryout critical operations on your personal data without using this PIN.
Example: If the EMM admin needs to wipe your device or remove date from the device, he/she can not directly wipe it without the PIN code. You have to provide the PIN code to get your device wiped or you can log into the EMM Console and wipe your device by entering the PIN code. A confirmation message will appear.
| Info |
|---|
You will be prompted to provide a PIN code only if your device is a BYOD device. |
...
|
How it works
Data containerization for Android devices was implemented using the Managed Profile feature that is available on the Android devices that supports the Android Lollipop OS or upwards. Let's take a look at the how data containerization works on WSO2 EMM.