Workspace Secure Container for Mobile Devices Version 1.1 Last Updated: April 24, 2014 2014 Verizon. All Rights Reserved. The Verizon name and logo and all other names, logos, and slogans identifying Verizon s products and services are trademarks and service marks or registered trademarks and service marks of Verizon Trademark Services LLC or its affiliates in the United States and/or other countries. Microsoft and Outlook are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. All other trademarks and service marks are the property of their respective owners.
Table of Contents Overview... 3 Setting up Workspace... 3 Secure Container Options... 4 Security... 4 Features... 5 Email... 5 Exchange Email Servers... 6 Destination Management... 6 Assigning Container... 7 Registering/Enrolling on ios Device... 8 Registering/Enrolling on Android Device... 9 Sending Commands to Container... 12 Applications in Workspace Container... 13 Calendar... 13 Contacts... 15 Email... 16 Settings... 16 ios... 16 Android... 17 Apps... 17 Connect... 18 Files... 19 Add Web-clip (ios only)... 19 Messenger (Android only)... 20 Dialer (Android only)... 21 Conclusion... 22 4/24/2014 ii Version 1.1
Overview The Workspace Container is a managed application that is assigned on the Mobile Workforce Manger portal and pushed to devices. The settings for Workspace is managed in the Secure Container section of the portal. The Secure Container settings and the application need to be assigned to a user s group for Workspace to enroll properly. This document will go over all features and set up that is required to manage the Workspace Container. Workspace as seen on ipad Setting up Workspace The Workspace settings are managed in the Secure Container Tab on the Mobile Workforce Portal. This section also manages other containers such as the Windows Desktop Container. The Container settings are assigned to a group like all other provisions in the portal. Below are the steps to implementing the secure container. 1. Navigate to Provisioning > Secure Containers 2. Select the Create Button 3. Name the Secure Container and select Workspace Container from the dropdown menu 4. Select the desired devices (default is All Device Types) 4/24/2014 3 Version 1.1
5. Press Create 6. Have the Security Tab selected. This Tab controls email settings, detection services and proxy settings. 7. Select the Features Tab. This Tab manages Browser, Contacts and Container Restrictions. 8. Select the Email Features. This Tab manages exchange server and general email. 9. Assign the Secure Container Profile to user group. Secure Container Options The options available on the portal for the secure container include security, features and email. Below is a list of all available features for the Container. Security Password None Password Expiration (days) This provides a dropdown menu of available expiration times. Once the time period is up the user will be prompted to change pin. Required new passwords prior to repeat The number placed in this field will establish the number of times a password can be repeated after any new passwords are changed. Minimum password length Required password strength Failed number of login attempts before wipe General Jailbreak detected Debug mode detected Security policy failure SIM removed Proxy Enable Proxy (Proxy Server, port) 4/24/2014 4 Version 1.1
Enable HTTP Enable HTTPS Features Browser Restrictions Block Cookies Block File Downloads Block Browser Copy/Paste Browser Homepage Contacts Restrictions Allow Contact Sharing Container Restrictions Enable shortcut/weblinks on home screens Allow Android Homescreen widgets Allow Copy and Paste Email Assigned Exchange Servers Add Server General Show server email settings Email Signature Allow Attachment Downloads Maximum File Attachment Size (MB) 4/24/2014 5 Version 1.1
Exchange Email Servers The Workspace Container needs to authenticate against an exchange server for email, calendars and contacts to sync. Additionally, during the registration the user will have to put his/her exchange password to complete registration. For this to take place an Exchange Server will need to be assigned to the Secure Container. If the Mobile Workforce Manger does not have an Exchange Server, it can be added in Provisioning > Exchange Servers. Once the exchange server is added to the portal it will be available to assign to a secure container setting. In the image below the Exchange Server is available on the drop-down menu in the Email tab of Secure Container Settings. Pressing the plus button will assign the exchange server to the Secure Container, then save the Secure Container Settings. Destination Management The Destination Management section of the portal sets up white/black lists for internet connections. These white/black lists for URLs and proxies are observed within the Workspace Container browser. To set up Destination Management rules navigate to Provisioning > Destination Management Rules. Select the Internet Connected tab and add URLs/proxies to white or black list. Save then assign to user group. Below is an example of a blacklisted URL(www.cnn.com). The URL is added on the portal in Destination Management Rules. 4/24/2014 6 Version 1.1
This Destination Management Rule is assigned to the primary group of a user. When the user attempts to navigate to the www.cnn.com on the Workspace browser will not allow this URL to load. Assigning Container The container must be assigned to a user group for it to be pushed down to a user s device. On the portal navigate to Provisioning > Applications. Hover over Enterprise Connect and click the assign button. After navigating through the assigning prompts the application will appear on the right side of the page under Assignments By Group. 4/24/2014 7 Version 1.1
Registering/Enrolling on ios Device Step 1: Open Enterprise Connect Enter your portal user name and password, then press next. Step 2: Enter Container Pin Enter & confirm a PIN for the container. Each time you enter the Workspace Container you will be prompted to enter this PIN. This is independent of the device passcode. 4/24/2014 8 Version 1.1
Step 3 Enter Exchange/AD password Your email server information will be prefilled, enter the password on your Exchange email account then press Register. Step 4 Start using Container Congratulations! Your container is now registered. Your contacts, email, and calendar will now be synced to the container. Registering/Enrolling on Android Device Step 1: Open Enterprise Connect After opening the Container for the first time enter your portal credentials. 4/24/2014 9 Version 1.1
Step 2: Enter Container Pin Enter a PIN and confirm. This will be the PIN for the container. The device passcode is independent of the container PIN.. Step 3: Account Setup The Account Setup page will have prefilled Exchange Server fields. Towards the bottom of the screen you will have to enter your Exchange/ActiveSync password. This will sync the container with exchange. 4/24/2014 10 Version 1.1
Step 4: Admin Prompt A Remote security administration prompt will ask for permission to allow remotely control some security features. Step 5: Account Setting Prompts A series of prompts will appear. Proceed through the prompts. Step 6: Start using container Congratulations! The Workspace Container registration process is now completed. 4/24/2014 11 Version 1.1
Sending Commands to Container Once the Container App is enrolled, the administrator will be able to send commands to the device and the container. On the User s Dashboard, the Device tab has a drop-down menu that has a list of commands. There will be two types of commands, Device and Enterprise Connect Container. The device commands send commands to device which include Force Update, Lock Screen, Wipe Device, etc. The Worspace Container commands are sent specifically to the container. Two commands for Enterprise Connect are available: Lock Container: this command returns the container to the PIN code prompt. Wipe Device: this removes all user data and returns the application to its preregistration state. Above is an image of the devices page on the portal. To send command to device/container select the command from the drop-down menu then press the Send Command button ( ). The sent commands will be listed on the Command History tab. 4/24/2014 12 Version 1.1
Applications in Workspace Container Calendar 4/24/2014 13 Version 1.1
ios 1. Home Button: returns user to Enterprise Connect home page. 2. Zoom out Button: zooms out of larger view. If in day view it will zoom out to month. Month will zoom out to year. 3. Event List Button: brings up a list of all events. 4. Add Button: adds new event to calendar. 5. Today Button: returns calendar to daily view of today. 6. Calendars Button: has options to sync calendar with device s calendar and exchange account. 7. Inbox Button: displays an inbox of events.. ios Upon clicking on the Calendar icon, the user will come to the daily view (Figure 1.1). To return to the container s main screen the user must hit the home button. The Calendar will have the same functionality as the native calendar in ios. The calendar can zoom out to a monthly view by pressing the month button. The Search Button will open to a list view of all events. The Add button opens a screen to add events to the calendar. Android 4/24/2014 14 Version 1.1
Selecting the Date Button (1) will allow the user to zoom in or out of the calendar. The Day button (2) will return the calendar to the current day. The home button(3) will return to the main screen of Workspace. Adding an event to the calendar is achieved in the same manner as the native Android calendar. Just select a time frame and add new Event icon will appear. Select again and the event can be created. Contacts In contacts a user can add new contacts by selecting the + button and filling out the fields. Contacts can be placed into Favorites and Groups. Note that the various features are in different places on each platform. ios Android 4/24/2014 15 Version 1.1
Email The Email App will pull email from Exchange Active Sync. This mail application is a fully functional mail platform with inbox folders. ios Android Settings ios Settings can be set within the container by accessing the settings app. Below is a list of all ios setting features with a drop-down menu of available options. Mail Preview Show to or CC label Always Bcc Myself Ask before deleting Load Remote Images Organize by Thread Sync Email Out of Office Replies Start End 4/24/2014 16 Version 1.1
New Mail Alert New Mail Sound Send Mail Sound Calendar New Invitation Alerts Time Zone Support Sync Events Start Week On Contacts Sort Order Display Order Shorten Browser Homepage URL Accept Cookies Clear History Clear Cookies and Data Clear Cache File Viewer Default Viewer Your Time Zone Security Change PIN Auto Lock Safe Space Cover Lock/Unlock Debug Wipe Data and Account Force Refresh Android Change PIN Auto Lock Update Settings Bug Sense Apps 4/24/2014 17 Version 1.1
On ios, Apps will have applications that are assigned by the portal in Provisioning > Applications. On Android, the Apps icon is combined with Connect. The applications listed as Required have to be downloaded to the device by the user. The applications that are listed as Install are optional. Once pressed the button will state Pending, which will remain pending until the container checks into to the portal. Connect The Connect App displays the Wi-Fi connection. 4/24/2014 18 Version 1.1
Files Attachments and downloads can be viewed and will be temporarily retained in the file viewer. Below on the left is an image of a file viewer that contains two documents a jpg image and this document. These files can be viewed by selecting the row. The image on the right shows this document in the viewer. Add Web-clip (ios only) The Add Web-clip app allows the container user to make a short cut a URL. Simply enter a URL and the short cut will appear in the Workspace Container. 4/24/2014 19 Version 1.1
Messenger (Android only) A Messenger App is available on Android that functions as an SMS text messaging service. Contacts within the container can be selected as recipients of text messages. Outgoing text messages are confined to the container; however, incoming responses will also can be viewed on the device s test messenger. Below is a screenshot of the messenger app with a text message sent from container and the response. 4/24/2014 20 Version 1.1
Dialer (Android only) The Dialer App can make calls using the contacts in the container. The call log will also be on the Device s personal side. Below is the screenshot of the dialer s number pad with tabs for logs and contacts on top. The bottom menu bar has the phone button to send call, search button and add contact button. 4/24/2014 21 Version 1.1
Conclusion The Workspace Secure Container is now set up. If you need further assistance, please contact a member of the Mobile Workforce team. 4/24/2014 22 Version 1.1