VMware AirWatch Integration with Smart Glasses

Transcription

1 VMware AirWatch Integratin with Smart Glasses Multiple AirWatch versins Have dcumentatin feedback? Submit a Dcumentatin Feedback supprt ticket using the Supprt Wizard n supprt.air-watch.cm. This prduct is prtected by cpyright and intellectual prperty laws in the United States and ther cuntries as well as by internatinal treaties. VMware prducts are cvered by ne r mre patents listed at VMware is a registered trademark r trademark f VMware, Inc. in the United States and ther jurisdictins. All ther marks and names mentined herein may be trademarks f their respective cmpanies. 1

2 Revisin Table The fllwing table displays revisins t this guide since the release f Multiple AirWatch versins. Date Reasn April 2017 Initial uplad. 2

3 Chapter 1: Overview Intrductin t Andrid Smart Glasses 4 Befre Yu Begin Deplying Smart Glasses 4 3

4 Chapter 1: Overview Intrductin t Andrid Smart Glasses Smart Glasses are headsets r head-munted displays that enable an augmented reality experience. The glasses display infrmatin in a hands-free smartphne-like frmat, and wearers cmmunicate with the device using natural language vice cmmands. The vice-cmmand feature f Smart Glasses allws users t prmpt fr instructins as they wrk withut ever having t take their fcus ff f the equipment. AirWatch prvides yu with a rbust set f mbility management slutins fr enrlling, securing, cnfiguring, and managing yur Smart Glasses deplyment. Thrugh the AirWatch Admin Cnsle, yu have several tls and features at yur dispsal fr managing the entire life-cycle f Andrid Smart Glasses. Befre Yu Begin Deplying Smart Glasses Befre deplying Smart Glasses, cnsider the fllwing requirements frm the AirWatch team. Familiarizing yurself with the infrmatin available in this sectin helps prepare yu fr a successful deplyment f devices. Supprted Operating Systems AirWatch Admin Cnsle v8.2+ A PC r Mac cmputer equipped with Andrid Debug Bridge is needed fr sidelad staging Ensure the device is running perating system versin EE13 r abve. Ggle Glass runs a versin f the Andrid OS, but nt all features that are available n mbile devices are available n Ggle Glass. Ggle Glass perating systems are identified as EExx. EE13 has the capability fr AirWatch t push apps and is the minimum recmmended versin fr custmers. Cntact Ggle t get infrmatin n hw t upgrade yur device. Best Practices All Smart Glasses must be registered in the AirWatch Cnsle in a separate Organizatin Grup. Disable the fllwing enrllment settings: Terms f Use Optinal Prmpts Create separate Andrid prfiles fr yur Smart Glasses deplyment. D n reuse Andrid mbile prfiles. 4

5 Chapter 2: Smart Glasses Device Enrllment Smart Glasses Enrllment Overview 6 Create an Enrllment User 6 Uplad the AirWatch Agent.APF File fr Smart Glasses 6 Create Andrid Wi-Fi Prfile fr Staging Smart Glasses (Optinal) 7 Create a Staging Package fr Smart Glasses 7 Generate a Sidelad Staging Package 8 5

6 Chapter 2: Smart Glasses Device Enrllment Smart Glasses Enrllment Overview All Smart Glasses in yur deplyment must be enrlled befre it can cmmunicate with AirWatch and access internal cntent and features. Enrllment is facilitated with the AirWatch Agent fr Andrid. Imprtant: The Ggle Glass enrllment script in the staging package includes additinal cmmands that can be manually enabled. If yu plan n blcking adb access, please nte that if adb needs t be re-enabled at a later time, it can nly be dne by a trusted cmputer. This will typically be the cmputer that was used t run the script in the first place, r any cmputer trusted previusly by Ggle Glass prir t enrllment. Create an Enrllment User 1. Navigate t Devices > Users > List View > Add > Add User 2. Frm the General tab, enter the details fr yur user. Security Type Username Passwrd Cnfirm Passwrd Full Name Display Name Address Username Dmain Descriptin Chse Basic t add a basic user. Enter a username with which the new user is identified. Enter a passwrd that the user can use t lg in. Cnfirm the passwrd. Cmplete the First Name, Middle Name, and Last Name f the user. Enter a name t represent the user in the AirWatch Cnsle. Enter r edit the user's address. Enter r edit the user's username. Select the dmain frm the drp-dwn field. 3. Select Save. Uplad the AirWatch Agent.APF File fr Smart Glasses Uplad the.apf file fr yur Smart Glasses deplyment t enable a simplified enrllment. The Agent Package can be upladed nly in specific rganizatin grup types, fr example, in rganizatin grups f type Custmer. It is recmmended t uplad the Agent Package at the highest rganizatin grup. Yu can find the file specific t yur OEM lcated in AirWatch Resurces. T uplad an.apf file, fllw the steps detailed belw: 1. Navigate t Devices > Staging & Prvisining > Cmpnents > Agent Packages and select Add. Make sure yu are using the tp level rganizatin grup. 2. Select Uplad and Chse File t brwse fr the.apf file f the agent versin yu want t uplad. 3. Select the.apf file and select Open t chse the file. 6

7 Chapter 2: Smart Glasses Device Enrllment 4. Select Save t clse the uplad dialg. 5. Enter a File Name. 6. Enter a Package Name. 7. Enter a Versin fr the agent. 8. Select Save t uplad the.apf file t the AirWatch Cnsle. Create Andrid Wi-Fi Prfile fr Staging Smart Glasses(Optinal) The staging Wi-Fi prfile cnnects a device t a Wi-Fi netwrk used fr enrllment if the device is nt cnfigured t a netwrk. T create the staging Wi-Fi prfile: 1. Navigate t Devices > Staging > Prvisining > Cmpnents > Prfiles > Add Prfile > Andrid. 2. Select the General prfile ptin. 3. Set the Prfile Scpe f the Wi-Fi prfile: Staging Wi-Fi Prfile Cnnects a device t the Wi-Fi used fr staging. Prductin Wi-Fi Prfile Cnnects a device t the Wi-Fi used fr everyday use. Prductin Wi-Fi prfiles are under Device Prfiles List View Add. Yu must use aut deplyment and publish the prfile befre staging a device with it Bth Cnnects the device t Wifi t be used fr staging and cntinues use during prductin. 4. Navigate t Wi-Fi > Cnfigure. 5. Prvide the Service Set Identifier t name the netwrk t which the device will cnnect. 6. Indicate if the Wi-Fi netwrk is a Hidden Netwrk. 7. Ensure the WiFi is setup as the Active Netwrk. 8. Specify the Security Type f access prtcl used and whether certificates are required. 9. Prvide the Passwrd required fr the device t cnnect t the netwrk. 10. Select Save & Publish. Create a Staging Package fr Smart Glasses Create a staging package t cnfigure yur devices t cnnect t Wi-Fi, dwnlad the AirWatch Agent, and enrll Smart Glasses with minimal interactin. T create a staging cnfiguratin, fllw the steps utlined belw: 1. Navigate t Devices > Prducts > Staging > List View > Add. 2. Select the Platfrm type fr which yu want t create a staging cnfiguratin. 7

8 Chapter 2: Smart Glasses Device Enrllment 3. Cmplete the required fields n the General tab. s Name Descriptin Enrllment User Passwrd Cnfirm Passwrd Agent Descriptin Enter the name f the staging cnfiguratin. Enter the descriptin f the staging cnfiguratin. Enter the username f the enrllment user. Enter the passwrd fr the enrllment user. Re-enter the passwrd fr the enrllment user. Select the AirWatch Agent t dwnlad during staging. These agents are upladed as an Agent Package. See hw t Uplad the AirWatch Agent.APF File fr Smart Glasses n page 6 4. Select Save. Generate a Sidelad Staging Package AirWatch can create a sidelad staging package that allws yu t create ne side staging enrllment fr all devices and assign the device t an Organizatin Grup as needed. T create a side staging package: 1. Navigate t Devices > Staging & Prvisining > Staging > List View. 2. Chse a previus staging package that yu want t create a sideladed staging package fr. Select the Mre ptin and select Staging Side Lad frm the drp-dwn. 3. Chse the Organizatin Grup t which this staging applies. 4. Select Dwnlad t start dwnlading the zip file f the staging sidelad. 5. Dwnlad and install the Andrid Debug Bridge t the cmputer frm which yu will stage devices. Fr mre infrmatin, see 6. Unzip the staging file and cnnect the Smart Glasses t the staging cmputer. 7. Ensure that the Andrid Debug Bridge is enabled and running n the staging cmputer. 8. Run the autenrll script: a. Find the script frm the agent flder saved t yur cmputer and run the script frm within the agent flder. b. The device shuld aut enrll int AirWatch. Nte: The aut-enrll script fr Ggle Glass devices allws yu t manually enable the fllwing cmmands: OTA server, Lck ADB access, Set an app int kisk mde, and enable/disable camera. 8

9 Chapter 3: Smart Glasses Device Prfiles Smart Glasses Prfiles 10 Create Wi-Fi Prfile 10 9

10 Chapter 3: Smart Glasses Device Prfiles Smart Glasses Prfiles Overview Device prfiles ensure prper use f devices, prtectin f sensitive data, and wrkplace functinality. Prfiles serve many different purpses, frm letting yu enfrce crprate rules and prcedures t tailring and preparing Glass devices fr hw they are used. The individual settings yu cnfigure are referred t as paylads. Cnsider cnfiguring nly ne paylad per prfile, which means yu will have multiple prfiles fr the different settings yu want t push t devices. Fr example, yu can create a prfile t integrate with yur server and anther t cnnect devices t yur wrkplace Wi-Fi netwrk. Fr Ggle Glass, if yu use certificate based Wi-Fi, ensure Screen Lck is setup and enabled prir t enrllment r certificate installatin will fail. Screen Lck is a device passcde n Ggle Glass devices. Steps t set this up are: A recvery cde needs t be setup. This is achieved by running the fllwing adb cmmand (in this example, is the recvery cde) $ adb shell am bradcast -a cm.ggle.glass.actin.store_recovery_code --el RECOVERY_CODE On the Ggle Glass, the custmer needs t navigate t s > Device Optins > Screen Lck t set this up. Create Wi-Fi Prfile Cnfiguring a Wi-Fi prfile lets devices cnnect t crprate netwrks. T cnfigure the Wi-Fi prfile: 1. Navigate t Devices > Prfiles > List View > Add > Add Prfile > Andrid. 2. Cnfigure the General prfile settings as apprpriate. These settings determine hw the prfile is deplyed and wh receives it. Fr mre infrmatin n General settings, refer t the VMware AirWatch Mbile Device Management Guide, available n AirWatch Resurces. 10

11 Chapter 3: Smart Glasses Device Prfiles 3. Select the Wi-Fi paylad and cnfigure the Wi-Fi settings: Service Set Identifier Hidden Netwrk Set as Active Netwrk Security Type Descriptin Prvide the name f the netwrk the device cnnects t. Indicate if the Wi-Fi netwrk is hidden. Indicate if the device cnnects t the netwrk with n end-user interactin. Specify the access prtcl used and whether certificates are required. Depending n the selected security type, the displayed fields will change. If Nne, WEP,r WPA/WPA 2) are selected; the Passwrd field will display. If WPA/WPA 2 Enterprise is selected, the Prtcls and Authenticatin fields display. Prtcls Use Tw Factr Authenticatin SFA Type Authenticatin Identity Annymus Identity Username Passwrd Identity Certificate Rt Certificate Passwrd Prvide the required credentials fr the device t cnnect t the netwrk. The passwrd field displays when WEP, WPA/WPA 2, Any (Persnal), WPA/WPA2 Enterprise are selected frm the Security Type field. 4. Select the Credentials paylad and cnfigure certificate setup that will be used t authenticate. 11

12 Chapter 3: Smart Glasses Device Prfiles s Credential Surce Descriptin Uplad a certificate frm yur lcal machine r define a Defined Certificate Authrity, r uplad a User Certificate. If yu chse t Uplad a certificate, cmplete the fllwing: Credential Name Enter the name f the credential r select n the infrmatin symbl t view acceptable lkup values like { Dmain} and {DeviceMdel} t find the credential file t use. Certificate Uplad the new certificate r lkup values. If yu chse t use a Defined Certificate Authrity, cmplete the fllwing: Certificate Authrity fr the Defined Certificate Authrity Select the external r internal CA issuing encryptin keys fr the PKI. Certificate Template fr the Defined Certificate Authrity Select the predefined template fr the CA t use when requesting a certificate. 5. Select Save &Publish. If yu chse uplad a User Certificate, select either S/MIME Certificate r S/MIME Encryptin Certificate. 12

13 Chapter 4: Smart Glasses Device Management Smart Glasses Device Management Overview 14 Uplad Internal Applicatins With a Lcal File 14 Andrid Smart Glasses Feature Matrix 17 13

14 Chapter 4: Smart Glasses Device Management Smart Glasses Device Management Overview After yur devices are enrlled and cnfigured, manage the devices using the AirWatch Cnsle. The management tls and functins enable yu t keep an eye n yur devices and remtely perfrm administrative functins. Yu can manage all yur devices frm the VMware AirWatch Dashbard. The Dashbard is a searchable, custmizable view that yu can use t filter and find specific devices. This feature makes it easier t perfrm administrative functins n a particular set f devices. The Device List View displays all the devices currently enrlled in yur AirWatch envirnment and their status. The Device Details page prvides device-specific infrmatin such as prfiles, apps, AirWatch Agent versin and which versin f any applicable OEM service currently installed n the device. Yu can als perfrm remte actins n the device frm the Device Details page that are platfrm-specific. Uplad Internal Applicatins With a Lcal File Uplad internal applicatins with lcal files t deply them t yur mbile netwrk and t take advantage f the mbile applicatin management features f AirWatch. Review instructins frm platfrm sites abut hw t develp and package applicatins. 1. Navigate t Apps & Bks > Applicatins > List View > Internal and select Add Applicatin. 2. Select Uplad > Lcal File t brwse fr the applicatin file n the system. 3. Select Cntinue and cnfigure the Details tab ptins. Nt every ptin is supprted fr every platfrm. Name Managed By Applicatin ID Actual File Versin Versin Is Beta Change Lg Categries Minimum OS Descriptin Enter a name fr the applicatin. View the rganizatin grup (OG) that the applicatin belngs t in yur AirWatch OG hierarchy. Represents the applicatin with a unique string. This ptin is pre-ppulated and was created with the applicatin. AirWatch uses the string t identify the applicatin in systems like applicatin whitelists and blacklists. Displays the cded versin f the applicatin set by the applicatin's develper. Displays the internal versin f the applicatin set by the AirWatch Cnsle. Tags the applicatin as still under develpment and testing, a BETA versin. Enter ntes in this field t prvide cmments and ntes t ther admins cncerning the applicatin. Prvide a categry type in the field t help identify hw the applicatin can help users. Yu can cnfigure custm applicatin categries r keep the applicatin's pre-cded categry. Select the ldest OS that yu want t run this applicatin. 14

15 Chapter 4: Smart Glasses Device Management Supprted Mdels Is App Restricted t Silent Install Andrid Descriptin Keywrds URL Supprt Supprt Phne Internal ID Cpyright Descriptin Select all the mdels that yu want t run this applicatin. Assigns this applicatin t thse Andrid devices that supprt the Andrid silent installatin feature. The end user des nt have t cnfirm installatin activity when yu enable this ptin. This feature makes it easier t uninstall many applicatins simultaneusly. Only Andrid devices in the smart grup that supprts silent uninstallatin benefit frm this ptin. These Andrid devices are als called Andrid enterprise devices. Describe the purpse f the applicatin. Enter wrds that might describe features r uses fr the applicatin. These entries are like tags and are specific t yur rganizatin. Enter the URL frm where yu can dwnlad the applicatin and get infrmatin abut it. Enter an t receive suggestins, cmments, r issues cncerning the applicatin. Enter a number t receive suggestins, cmments, r issues cncerning the applicatin. Enter an identificatin string, if ne exists, that the rganizatin uses t catalg r manage the applicatin. Enter the publicatin date fr the applicatin. Cmplete the ptins in the Develper Infrmatin area: Develper Descriptin Enter the develper's name. Develper Enter the develper's s that yu have a cntact t whm t send suggestins and cmments. Develper Phne Enter a number s that yu can cntact the develper. Cmplete the ptins in the Applicatin Cst Infrmatin area: Cst Center Cst Descriptin Enter the business unit charged fr the develpment f the applicatin. Enter cst infrmatin fr the applicatin t help reprt metrics cncerning yur internal applicatin develpment systems t the rganizatin. Currency Select the type f currency that paid fr the develpment, r the currency that buys the applicatin, r whatever yu want t recrd abut the applicatin. 4. Cmplete the Files tab ptins. Review the file initially upladed and uplad auxiliary files needed t distribute internal applicatins. 15

16 Chapter 4: Smart Glasses Device Management Platfrm All Auxiliary File Applicatin File Descriptin Cntains the applicatin sftware t install and run the applicatin and is the applicatin yu upladed at the beginning f the prcedure. 5. Cmplete the ptins n the Images tab. Mbile Images Tablet Images Icn Descriptin Uplad r drag and drp images f the applicatin t display in the App Catalg fr mbile devices. Uplad r drag and drp images f the applicatin t display in the App Catalg fr tablets. Uplad r drag and drp images f the applicatin t display in the App Catalg as its icn. 6. Cmplete the Terms f Use tab. Terms f use state specifically hw users are expected t use the applicatin. They als make expectatins clear t end users. When the applicatin pushes t devices, users view a terms f use page that they must accept t use the applicatin. If users d nt accept, they cannt access the applicatin. 7. Cmplete the Mre > SDK tab. SDK Prfile Applicatin Prfile Descriptin Select the prfile frm the drp-dwn menu t apply features cnfigured in s & Plicies (Default) r the features cnfigured in individual prfiles cnfigured in Prfiles. Select the certificate prfile frm the drp-dwn menu s that the applicatin and AirWatch cmmunicate securely. 8. Cmplete the Mre > App Wrapping tab. Yu cannt wrap an applicatin that yu previusly saved in the AirWatch Cnsle. Yu have tw ptins: Delete the unwrapped versin f the applicatin, uplad it t AirWatch, and wrap it n the App Wrapping tab. Uplad an already wrapped versin f the applicatin, if yu have ne, which des nt require deleting the unwrapped versin. Enable App Wrapping App Wrapping Prfile Descriptin Enables AirWatch t wrap internal applicatins. Assign an app wrapping prfile t the internal applicatin. 16

17 Chapter 4: Smart Glasses Device Management Require encryptin (Andrid) Descriptin 9. Select Save & Assign. Enable this ptin t use Data At Rest (DAR) encryptin n Andrid devices. AirWatch uses the Advanced Encryptin Standard, AES-256, and uses encrypted keys fr encryptin and decryptin. When yu enable DAR in App Wrapping, the App Wrapping engine injects an alternative file system int the applicatin that securely stres all the data in the applicatin. The applicatin uses the alternative file system t stre all files in an encrypted strage sectin instead f string files in disk. DAR encryptin helps prtect data in case the device is cmprmised because the encrypted files created during the lifetime f the applicatin are difficult t access by an attacker. This prtectin applies t any lcal SQLite database, because all lcal data is encrypted in a separate strage system. 10. After adding Assignments, Click Save & Publish, then Publish t deply the app t yur Smart Glasses. Andrid Smart Glasses Feature Matrix This matrix summarizes specific functinality and cnfiguratins, as available by OEM. Atheer AiR Glasses ODG R-7 Recn Jet Vuzix M100 Mt MX Ggle Glass Asset Tracking UDID OS Versin Manufacturer Mdel Serial Number Internal App Management Install Applicatins Remve Applicatins Update Applicatins Push Services AWCM Wi-FI WPA/WPA2 WPA/WPA2 Enterprise 17

18 Chapter 4: Smart Glasses Device Management Nte: System updates fr Ggle Glass devices are handled by an OTA server. Cntact Ggle t figure ut hw t handle this. 18

19 Accessing Other Dcuments Accessing Other Dcuments While reading this dcumentatin yu may encunter references t dcuments that are nt included here. The quickest and easiest way t find a particular dcument is t navigate t and search fr the dcument yu need. Each release-specific dcument has a link t its PDF cpy n AirWatch Resurces. Alternatively, yu can navigate t AirWatch Resurces n myairwatch (resurces.air-watch.cm) and search. When searching fr dcumentatin n Resurces, be sure t select yur AirWatch versin. Yu can use the filters t srt by PDF file type and Multiple AirWatch versins. 19