VMware AirWatch Integratin with Smart Glasses Multiple AirWatch versins Have dcumentatin feedback? Submit a Dcumentatin Feedback supprt ticket using the Supprt Wizard n supprt.air-watch.cm. This prduct is prtected by cpyright and intellectual prperty laws in the United States and ther cuntries as well as by internatinal treaties. VMware prducts are cvered by ne r mre patents listed at http://www.vmware.cm/g/patents. VMware is a registered trademark r trademark f VMware, Inc. in the United States and ther jurisdictins. All ther marks and names mentined herein may be trademarks f their respective cmpanies. 1
Chapter 1: Overview Intrductin t Andrid Smart Glasses 3 Befre Yu Begin Deplying Smart Glasses 3 2
Chapter 1: Overview Intrductin t Andrid Smart Glasses Smart Glasses are headsets r head-munted displays that enable an augmented reality experience. The glasses display infrmatin in a hands-free smartphne-like frmat, and wearers cmmunicate with the device using natural language vice cmmands. The vice-cmmand feature f Smart Glasses allws users t prmpt fr instructins as they wrk withut ever having t take their fcus ff f the equipment. AirWatch prvides yu with a rbust set f mbility management slutins fr enrlling, securing, cnfiguring, and managing yur Smart Glasses deplyment. Thrugh the AirWatch Admin Cnsle, yu have several tls and features at yur dispsal fr managing the entire life-cycle f Andrid Smart Glasses. Befre Yu Begin Deplying Smart Glasses Befre deplying Smart Glasses, cnsider the fllwing requirements frm the AirWatch team. Familiarizing yurself with the infrmatin available in this sectin helps prepare yu fr a successful deplyment f devices. Supprted Operating Systems AirWatch Admin Cnsle v8.2+ A PC r Mac cmputer equipped with Andrid Debug Bridge is needed fr sidelad staging. Ggle Glass nly: Ggle Glass OS versin EE13 r abve. Ggle Glass runs a versin f the Andrid OS, but nt all features that are available n mbile devices are available n Ggle Glass. Ggle Glass OS versins are identified as EExx. EE13 has the capability fr AirWatch t push apps and is the minimum recmmended versin fr custmers. Cntact Ggle t get infrmatin n hw t upgrade yur device. Best Practices All Smart Glasses must be registered in the AirWatch Cnsle in a separate Organizatin Grup. Disable the fllwing enrllment settings: Terms f Use Optinal Prmpts Create separate Andrid prfiles fr yur Smart Glasses deplyment. D n reuse Andrid mbile prfiles. Enable Direct Prmpt in Agent s t allw silent applicatin install. 3
Chapter 2: Smart Glasses Device Enrllment Smart Glasses Enrllment Overview 5 Create an Enrllment User 5 Uplad the AirWatch Agent.APF File fr Smart Glasses 5 Create Andrid Wi-Fi Prfile fr Staging Smart Glasses (Optinal) 6 Create a Staging Package fr Smart Glasses 6 Generate a Sidelad Staging Package 7 4
Chapter 2: Smart Glasses Device Enrllment Smart Glasses Enrllment Overview All Smart Glasses in yur deplyment must be enrlled befre it can cmmunicate with AirWatch and access internal cntent and features. Enrllment is facilitated with the AirWatch Agent fr Andrid. Imprtant: The Ggle Glass enrllment script in the staging package includes additinal cmmands that can be manually enabled. If yu plan n blcking adb access, please nte that if adb needs t be re-enabled at a later time, it can nly be dne by a trusted cmputer. This will typically be the cmputer that was used t run the script in the first place, r any cmputer trusted previusly by Ggle Glass prir t enrllment. Create an Enrllment User 1. Navigate t Devices > Users > List View > Add > Add User 2. Frm the General tab, enter the details fr yur user. Security Type Username Passwrd Cnfirm Passwrd Full Name Display Name Email Address Email Username Dmain Descriptin Chse Basic t add a basic user. Enter a username with which the new user is identified. Enter a passwrd that the user can use t lg in. Cnfirm the passwrd. Cmplete the First Name, Middle Name, and Last Name f the user. Enter a name t represent the user in the AirWatch Cnsle. Enter r edit the user's email address. Enter r edit the user's email username. Select the email dmain frm the drp-dwn field. 3. Select Save. Uplad the AirWatch Agent.APF File fr Smart Glasses Uplad the.apf file fr yur Smart Glasses deplyment t enable a simplified enrllment. The Agent Package can be upladed nly in specific rganizatin grup types, fr example, in rganizatin grups f type Custmer. It is recmmended t uplad the Agent Package at the highest rganizatin grup. Yu can find the file specific t yur OEM lcated in AirWatch Resurces. T uplad an.apf file, fllw the steps detailed belw: 1. Navigate t Devices > Staging & Prvisining > Cmpnents > Agent Packages and select Add. Make sure yu are using the tp level rganizatin grup. 2. Select Uplad and Chse File t brwse fr the.apf file f the agent versin yu want t uplad. 3. Select the.apf file and select Open t chse the file. 5
Chapter 2: Smart Glasses Device Enrllment 4. Select Save t clse the uplad dialg. 5. Enter a File Name. 6. Enter a Package Name. 7. Enter a Versin fr the agent. 8. Select Save t uplad the.apf file t the AirWatch Cnsle. Create Andrid Wi-Fi Prfile fr Staging Smart Glasses(Optinal) The staging Wi-Fi prfile cnnects a device t a Wi-Fi netwrk used fr enrllment if the device is nt cnfigured t a netwrk. T create the staging Wi-Fi prfile: 1. Navigate t Devices > Staging > Prvisining > Cmpnents > Prfiles > Add Prfile > Andrid. 2. Select the General prfile ptin. 3. Set the Prfile Scpe f the Wi-Fi prfile: Staging Wi-Fi Prfile Cnnects a device t the Wi-Fi used fr staging. Prductin Wi-Fi Prfile Cnnects a device t the Wi-Fi used fr everyday use. Prductin Wi-Fi prfiles are under Device Prfiles List View Add. Yu must use aut deplyment and publish the prfile befre staging a device with it Bth Cnnects the device t Wifi t be used fr staging and cntinues use during prductin. 4. Navigate t Wi-Fi > Cnfigure. 5. Prvide the Service Set Identifier t name the netwrk t which the device will cnnect. 6. Indicate if the Wi-Fi netwrk is a Hidden Netwrk. 7. Ensure the WiFi is setup as the Active Netwrk. 8. Specify the Security Type f access prtcl used and whether certificates are required. 9. Prvide the Passwrd required fr the device t cnnect t the netwrk. 10. Select Save & Publish. Create a Staging Package fr Smart Glasses Create a staging package t cnfigure yur devices t cnnect t Wi-Fi, dwnlad the AirWatch Agent, and enrll Smart Glasses with minimal interactin. T create a staging cnfiguratin, fllw the steps utlined belw: 1. Navigate t Devices > Staging & Prvisining > Staging > Add Staging > Andrid. 2. Select the Platfrm type fr which yu want t create a staging cnfiguratin. 6
Chapter 2: Smart Glasses Device Enrllment 3. Cmplete the required fields n the General tab. s Name Descriptin Enrllment User Passwrd Cnfirm Passwrd Agent Descriptin Enter the name f the staging cnfiguratin. Enter the descriptin f the staging cnfiguratin. Enter the username f the enrllment user. Enter the passwrd fr the enrllment user. Re-enter the passwrd fr the enrllment user. Select the AirWatch Agent t dwnlad during staging. These agents are upladed as an Agent Package. See hw t Uplad the AirWatch Agent.APF File fr Smart Glasses n page 5 4. Select Save. Generate a Sidelad Staging Package AirWatch can create a sidelad staging package that allws yu t create ne side staging enrllment fr all devices and assign the device t an Organizatin Grup as needed. T create a side staging package: 1. Navigate t Devices > Staging & Prvisining > Staging > List View. 2. Chse a previus staging package that yu want t create a sideladed staging package fr. Select the Mre ptin and select Staging Side Lad frm the drp-dwn. 3. Chse the Organizatin Grup t which this staging applies. 4. Select Dwnlad t start dwnlading the zip file f the staging sidelad. 5. Dwnlad and install the Andrid Debug Bridge t the cmputer frm which yu will stage devices. Fr mre infrmatin, see http://develper.andrid.cm/tls/help/adb.html. 6. Unzip the staging file and cnnect the Smart Glasses t the staging cmputer. 7. Ensure that the Andrid Debug Bridge is enabled and running n the staging cmputer. 8. Run the autenrll script: a. Find the script frm the agent flder saved t yur cmputer and run the script frm within the agent flder. b. The device shuld aut enrll int AirWatch. Nte: The aut-enrll script fr Ggle Glass devices allws yu t manually enable the fllwing cmmands: OTA server, Lck ADB access, Set an app int kisk mde, and enable/disable camera. 7
Chapter 3: Smart Glasses Device Prfiles Smart Glasses Prfiles 9 Create Wi-Fi Prfile 9 8
Chapter 3: Smart Glasses Device Prfiles Smart Glasses Prfiles Overview Device prfiles ensure prper use f devices, prtectin f sensitive data, and wrkplace functinality. Prfiles serve many different purpses, frm letting yu enfrce crprate rules and prcedures t tailring and preparing Glass devices fr hw they are used. The individual settings yu cnfigure are referred t as paylads. Cnsider cnfiguring nly ne paylad per prfile, which means yu will have multiple prfiles fr the different settings yu want t push t devices. Fr example, yu can create a prfile t integrate with yur email server and anther t cnnect devices t yur wrkplace Wi-Fi netwrk. Deplying Prfiles with Ggle Glass Fr Ggle Glass, if yu use certificate based Wi-Fi, ensure Screen Lck is setup and enabled prir t enrllment r certificate installatin will fail. Screen Lck is a device passcde n Ggle Glass devices. Steps t set this up are: Recvery cde needs t be cnfigured. This is achieved by running the fllwing adb cmmand (in this example, 12345 is the recvery cde) $ adb shell am bradcast -a cm.ggle.glass.actin.store_recovery_code --el RECOVERY_CODE 12345 Navigate t s > Device Optins > Screen Lck t cnfigure these ptins. Create Wi-Fi Prfile Cnfiguring a Wi-Fi prfile lets devices cnnect t crprate netwrks. T cnfigure the Wi-Fi prfile: 1. Navigate t Devices > Prfiles > List View > Add > Add Prfile > Andrid. 2. Cnfigure the General prfile settings as apprpriate. These settings determine hw the prfile is deplyed and wh receives it. Fr mre infrmatin n General settings, refer t the VMware AirWatch Mbile Device Management Guide, available n AirWatch Resurces. 9
Chapter 3: Smart Glasses Device Prfiles 3. Select the Wi-Fi paylad and cnfigure the Wi-Fi settings: Service Set Identifier Hidden Netwrk Set as Active Netwrk Security Type Descriptin Prvide the name f the netwrk the device cnnects t. Indicate if the Wi-Fi netwrk is hidden. Indicate if the device cnnects t the netwrk with n end-user interactin. Specify the access prtcl used and whether certificates are required. Depending n the selected security type, the displayed fields will change. If Nne, WEP,r WPA/WPA 2) are selected; the Passwrd field will display. If WPA/WPA 2 Enterprise is selected, the Prtcls and Authenticatin fields display. Prtcls Use Tw Factr Authenticatin SFA Type Authenticatin Identity Annymus Identity Username Passwrd Identity Certificate Rt Certificate Passwrd Prvide the required credentials fr the device t cnnect t the netwrk. The passwrd field displays when WEP, WPA/WPA 2, Any (Persnal), WPA/WPA2 Enterprise are selected frm the Security Type field. 4. Select the Credentials paylad and cnfigure certificate setup that will be used t authenticate. 10
Chapter 3: Smart Glasses Device Prfiles s Credential Surce Descriptin Uplad a certificate frm yur lcal machine r define a Defined Certificate Authrity, r uplad a User Certificate. If yu chse t Uplad a certificate, cmplete the fllwing: Credential Name Enter the name f the credential r select n the infrmatin symbl t view acceptable lkup values like {EmailDmain} and {DeviceMdel} t find the credential file t use. Certificate Uplad the new certificate r lkup values. If yu chse t use a Defined Certificate Authrity, cmplete the fllwing: Certificate Authrity fr the Defined Certificate Authrity Select the external r internal CA issuing encryptin keys fr the PKI. Certificate Template fr the Defined Certificate Authrity Select the predefined template fr the CA t use when requesting a certificate. 5. Select Save & Publish. If yu chse uplad a User Certificate, select either S/MIME Certificate r S/MIME Encryptin Certificate. 11
Chapter 4: Smart Glasses Device Management Smart Glasses Device Management Overview 13 Uplad Internal Applicatins with a Lcal File 13 Andrid Smart Glasses Feature Matrix 16 12
Chapter 4: Smart Glasses Device Management Smart Glasses Device Management Overview After yur devices are enrlled and cnfigured, manage the devices using the AirWatch Cnsle. The management tls and functins enable yu t keep an eye n yur devices and remtely perfrm administrative functins. Yu can manage all yur devices frm the VMware AirWatch Dashbard. The Dashbard is a searchable, custmizable view that yu can use t filter and find specific devices. This feature makes it easier t perfrm administrative functins n a particular set f devices. The Device List View displays all the devices currently enrlled in yur AirWatch envirnment and their status. The Device Details page prvides device-specific infrmatin such as prfiles, apps, AirWatch Agent versin and which versin f any applicable OEM service currently installed n the device. Yu can als perfrm remte actins n the device frm the Device Details page that are platfrm-specific. Uplad Internal Applicatins with a Lcal File Uplad internal applicatins with lcal files t deply them t yur mbile netwrk and t take advantage f the mbile applicatin management features f AirWatch. Review instructins frm platfrm sites abut hw t develp and package applicatins. 1. Navigate t Apps & Bks > Applicatins > Native > Internal and select Add Applicatin. 2. Select Uplad > Lcal File t brwse fr the applicatin file n the system. 3. Select Cntinue and cnfigure the Details tab ptins. Nt every ptin is supprted fr every platfrm. Name Managed By Applicatin ID Actual File Versin Versin Is Beta Change Lg Categries Minimum OS Descriptin Enter a name fr the applicatin. View the rganizatin grup (OG) that the applicatin belngs t in yur AirWatch OG hierarchy. Represents the applicatin with a unique string. This ptin is pre-ppulated and was created with the applicatin. AirWatch uses the string t identify the applicatin in systems like applicatin whitelists and blacklists. Displays the cded versin f the applicatin set by the applicatin's develper. Displays the internal versin f the applicatin set by the AirWatch Cnsle. Tags the applicatin as still under develpment and testing, a BETA versin. Enter ntes in this text bx t prvide cmments and ntes t ther admins cncerning the applicatin. Prvide a categry type in the text bx t help identify hw the applicatin can help users. Yu can cnfigure custm applicatin categries r keep the applicatin's pre-cded categry. Select the ldest OS that yu want t run this applicatin. 13
Chapter 4: Smart Glasses Device Management Supprted Mdels Is App Restricted t Silent Install Andrid Descriptin Descriptin Select all the mdels that yu want t run this applicatin. Assigns this applicatin t thse Andrid devices that supprt the Andrid silent installatin feature. The end user des nt have t cnfirm installatin activity when yu enable this ptin. This feature makes it easier t uninstall many applicatins simultaneusly. Only Andrid devices in the smart grup that supprts the silent uninstallatin benefit frm this ptin. These Andrid devices are als called Andrid enterprise devices. Describe the purpse f the applicatin. Nte: D nt use '<' + String in the Descriptin, as yu might encunter an Invalid HTML cntent errr. Keywrds URL Supprt Email Supprt Phne Internal ID Cpyright Enter wrds that might describe features r uses fr the applicatin. These entries are like tags and are specific t yur rganizatin. Enter the URL frm where yu can dwnlad the applicatin and get infrmatin abut it. Enter an email t receive suggestins, cmments, r issues cncerning the applicatin. Enter a number t receive suggestins, cmments, r issues cncerning the applicatin. Enter an identificatin string, if ne exists, that the rganizatin uses t catalg r manage the applicatin. Enter the publicatin date fr the applicatin. Cmplete the ptins in the Develper Infrmatin area: Develper Descriptin Enter the develper's name. Develper Email Enter the develper's email s that yu have a cntact t whm t send suggestins and cmments. Develper Phne Enter a number s that yu can cntact the develper. Cmplete the ptins in the Applicatin Cst Infrmatin area: Cst Center Cst Descriptin Enter the business unit charged fr the develpment f the applicatin. Enter cst infrmatin fr the applicatin t help reprt metrics cncerning yur internal applicatin develpment systems t the rganizatin. 14
Chapter 4: Smart Glasses Device Management Descriptin Currency Select the type f currency that paid fr the develpment, r the currency that buys the applicatin, r whatever yu want t recrd abut the applicatin. 4. Cmplete the Files tab ptins. Review the file initially upladed and uplad auxiliary files t distribute internal applicatins. Platfrm All Auxiliary File Applicatin File 5. Cmplete the ptins n the Images tab. Descriptin Cntains the applicatin sftware t install and run the applicatin and is the applicatin yu upladed at the beginning f the prcedure. Mbile Images Tablet Images Icn Descriptin Uplad r drag and drp images f the applicatin t display in the App Catalg fr mbile devices. Uplad r drag and drp images f the applicatin t display in the App Catalg fr tablets. Uplad r drag and drp images f the applicatin t display in the App Catalg as its icn. Nte: T achieve best results fr the Mbile and Tablet Images, refer https://help.apple.cm/itunescnnect/develper/#/devd274dd925 fr ios and https://supprt.ggle.cm/ggleplay/andriddevelper/answer/1078870?hl=en fr Andrid. T achieve best results fr the app icn, prvide a square image n larger than 400x400 pixels and less than 1 MB when uncmpressed. The graphic is autmatically scaled and crpped t fit. If necessary, the system cnverts it t PNG frmat. Web Clip icns are 104 x 104 pixels fr devices with a Retina display r 57 x 57 pixels fr all ther devices. Find ut the ratis that ften wrk best fr branding and icns when yu uplad images fr ios devices in Dimensins fr Images n ios Devices. 6. Cmplete the Terms f Use tab. Terms f use state specifically hw users are expected t use the applicatin. They als make expectatins clear t end users. When the applicatin pushes t devices, users view a terms f use page that they must accept t use the applicatin. If users d nt accept, they cannt access the applicatin. 7. Cmplete the Mre > SDK tab. SDK Prfile Applicatin Prfile Descriptin Select the prfile frm the drp-dwn menu t apply features cnfigured in s & Plicies (Default) r the features cnfigured in individual prfiles cnfigured in Prfiles. Select the certificate prfile frm the drp-dwn menu s that the applicatin and AirWatch cmmunicate securely. 15
Chapter 4: Smart Glasses Device Management 8. Cmplete the Mre > App Wrapping tab. Yu cannt wrap an applicatin that yu previusly saved in the AirWatch Cnsle. Yu have tw ptins: Delete the unwrapped versin f the applicatin, uplad it t AirWatch, and wrap it n the App Wrapping tab. Uplad an already wrapped versin f the applicatin, if yu have ne, which des nt require deleting the unwrapped versin. Enable App Wrapping App Wrapping Prfile Require encryptin (Andrid) Descriptin 9. Select Save & Assign. Enables AirWatch t wrap internal applicatins. Assign an app wrapping prfile t the internal applicatin. Enable this ptin t use Data At Rest (DAR) encryptin n Andrid devices. AirWatch uses the Advanced Encryptin Standard, AES-256, and uses encrypted keys fr encryptin and decryptin. When yu enable DAR in App Wrapping, the App Wrapping engine injects an alternative file system int the applicatin that securely stres all the data in the applicatin. The applicatin uses the alternative file system t stre all files in an encrypted strage sectin instead f string files in disk. DAR encryptin helps prtect data in case the device is cmprmised because the encrypted files created during the lifetime f the applicatin are difficult t access by an attacker. This prtectin applies t any lcal SQLite database, because all lcal data is encrypted in a separate strage system. 10. After adding Assignments, Click Save & Publish, then Publish t deply the app t yur Smart Glasses. Nte: Windws and macos has additinal deplyment ptins. Fr mre infrmatin, refer Cnfigure, Assign, and Deply Win32 Files and Uplad Applicatins t Deply t macos Devices. Andrid Smart Glasses Feature Matrix This matrix summarizes specific functinality and cnfiguratins, as available by OEM. Atheer AiR Glasses ODG R-7 Vuzix M100 Ggle Glass RealWear HMT-1 Asset Tracking UDID OS Versin Manufacturer 16
Chapter 4: Smart Glasses Device Management Atheer AiR Glasses ODG R-7 Vuzix M100 Ggle Glass RealWear HMT-1 Mdel Serial Number Internal App Management Install Applicatins Remve Applicatins Update Applicatins Push Services AWCM Wi-FI WPA/WPA2 WPA/WPA2 Enterprise Nte: System updates fr Ggle Glass devices are handled by an OTA server. Please cntact Ggle fr mre infrmatin. 17
Accessing Other Dcuments Accessing Other Dcuments While reading this dcumentatin yu may encunter references t dcuments that are nt included here. The quickest and easiest way t find a particular dcument is t navigate t https://my.airwatch.cm/help/9.2/en/cntent/release_ntes/dc_list_pdfs.htm and search fr the dcument yu need. Each release-specific dcument has a link t its PDF cpy n AirWatch Resurces. Alternatively, yu can navigate t AirWatch Resurces n myairwatch (resurces.air-watch.cm) and search. When searching fr dcumentatin n Resurces, be sure t select yur AirWatch versin. Yu can use the filters t srt by PDF file type and Multiple AirWatch versins. 18