1 SECURE, CENTRALIZED, SIMPLE Multi-platform Enterprise Mobility Management Whitepaper
2 Controlling it all from one place BlackBerry Enterprise Service 10 (BES10) is an end-to-end, multi-platform, device, application, and content management solution with integrated security and connectivity, enabling you to effectively manage complex fleets of mobile devices. BES10 makes it simple to manage corporate and BYOD BlackBerry, ios and Android users from a single management console (with support for Windows Phone users coming soon). You can perfectly balance employee and enterprise needs without compromise, by seamlessly separating work and personal content across all managed devices while preserving the native user experience. This document provides an IT-level overview of the management capabilities of BES10 for BlackBerry, ios and Android devices. You ll also learn how BES10 can provide IT with additional control and security for BYOD ios and Android devices, protecting corporate data using the secure BlackBerry infrastructure while keeping users personal content separate and private.
3 The big picture: Components of a well thought out mobile strategy ENTERPRISE MOBILITY MANAGEMENT BYOD / CORPORATE APPS APPS CONTENT CONTENT WORK PERSONAL UNIFIED ADMIN CONSOLE MANAGEMENT USER SELF SERVICE DEVICE APPS SECURITY NETWORK + INFRASTRUCTURE SERVICES + SUPPORT
4 What s new in the latest update to BES10 (version 10.2) 1 First, a quick overview of what s new in the latest version of BES10, version 10.2, including new and enhanced capabilities. True BYOD for ios and Android users If you want to activate ios and Android devices in true BYOD mode, you now have that option: IT management and control can be confined to the Secure Work Space container only. Of course, IT can still manage the whole device if that s what your EMM strategy requires. A self-service portal for users Through the easy-to-use, browser-based app, your users (whether they re on BlackBerry, ios or Android devices) can view and manage all their devices, see device details, and set activation passwords. If a device goes missing, users can change the password or delete data remotely, without waiting for IT help. A Personal space for even the highest-security users The users in your organization who need the ultimate security shouldn t have to carry a separate device for their personal lives. Now they don t. On BlackBerry 10 devices, BlackBerry Balance lets them seamlessly move between both worlds, while administrators have the control they need over both the Work Space and the Personal Space. This is the best-in-class approach to Corporate Owned, Personally Enabled (COPE) management scenarios. Greater scalability, for reduced costs BES10 now easily scales to support 100,000 devices per domain, with any mix of BlackBerry, ios and Android devices. This reduces the number of servers and resources required for large scale deployments, and significantly reduces costs. Manage your entire mobile fleet from a unified console Given the complexity of managing a multi-platform mobile environment, consolidation and simplification are top priorities for most mobile IT administrators. With BES10, most day-to-day administration tasks, across all devices, can be taken care of using the userfriendly BlackBerry Management Studio interface without having to go deeper into the service consoles that lie beneath it. For example, you can use BlackBerry Management Studio for the following key tasks: Universal user search across all devices Creating users and adding additional devices Exploring users/devices in a unified view Exposing common data elements for all device types (IT policy, last contact, SIM etc.) Assigning users to a group Wiping work data only or an entire device Specifying passwords Locking devices Sending out device activation settings (via activation email) Moving users from one intra-domain server to another (BlackBerry only) Accessing a reporting dashboard 2 Signing in to underlying service consoles with a single login (SSO) 2 For ios and Android management tasks that do require a deeper dive into the interface, BES10 provides you with the following features, among others: A browser-based UI Unified user and device view User and group management A profile library Drag and drop assignment Management of service settings
5 Through this service console that provides deeper control from a userfriendly interface, administrators can manage a wide range of advanced functions and features for ios and Android devices. They can: Set Wi-Fi and VPN settings Configure email settings Create IT policies Define allowed devices and operating systems Lock/unlock/wipe devices Reset device passwords Remove work profiles and data Synchronize with Active Directory Import and sync users Manage by user or by group Sync with Active Directory groups Administer multi-level support roles from helpdesk to security admin Provision identity and CA certificates Roll out certificates via SCEP Leverage integration with Microsoft CA Control data and voice-roaming policies Identify public applications as mandatory or optional for work purposes Deploy internally-developed apps Protect ActiveSync from access by non-compliant devices (Gatekeeping) Manage device whitelists for Microsoft Exchange The BES10 client (which users install on their device) for ios and Android is available in public storefronts including the App Store and Google Play. IT can also push a link out to users within an activation email. The BES10 client displays the application catalog, provides notifications to the user, detects jailbreak (ios) and rooting (Android), and helps with troubleshooting.
6 Advanced Mobile Application Management (MAM) capabilities for ios and Android Extra control and security for ios and Android devices Mobile Application Management is a critical component of any EMM strategy. With BES10, administrators can define managed applications for ios and Android users, regardless of whether those apps are from the App Store or Google Play, and can distribute applications developed in-house, too. They can build individual app catalogs by assigning apps to users or groups via drag and drop. And, they can designate applications as mandatory or optional, define allowed applications, and enforce compliance. As we ve seen, BlackBerry delivers comprehensive device management for ios and Android devices through BlackBerry Enterprise Service 10. Where highly granular device, content and app controls are required, Gold level EMM delivers the optimum solution for high-security mobility. Gold level EMM also includes Secure Work Space, a containerization, application wrapping and secure connectivity option that delivers a higher level of control and security for ios and Android devices. Secured apps for email, calendar and contacts (PIM), web browsing, and document viewing/editing (Documents To Go ) are included Data in Secure Work Space apps is encrypted and separated from personal data and apps, and users can t copy or paste corporate data into personal channels Enterprises can easily deploy additional apps to the Secure Work Space IT administrators can configure and manage the Secure Work Space container and its contents through the BlackBerry Enterprise Service 10 management console. Through a selection of controls and settings, the Secure Work Space can be configured for an individual user or group of users. Assigning a Secure Work Space The Secure Work Space can be assigned like other profiles and can be applied to a user or a group via simple drag and drop. Administrators can choose what conditions to apply. Among the options: Set password complexity Lock/wipe following login failures Lock the Secure Work Space following a certain period of inactivity Lock/wipe the device after a long period of inactivity Session login duration for Secure Work Space Once the Secure Work Space has been assigned, several further commands are available. These include: Locking the Secure Work Space Resetting the Secure Work Space password Wiping the Secure Work Space Disabling/enabling the Secure Work Space
7 Get the level of support you need Deploying secure enterprise applications Additional apps can be securely wrapped and deployed to the Secure Work Space on ios and Android devices. No custom development is necessary to enable applications for secure deployment All deployed applications are subject to the same security controls and application data is encrypted Deployed applications are able to directly access data behind the firewall via BlackBerry secure connectivity Leveraging BlackBerry secure connectivity BlackBerry secure connectivity provides built-in AES-256-bit encryption for ios and Android devices. Full Service Support: BlackBerry Technical Support Services BlackBerry Technical Support Services offers a unique blend of technical expertise, rapid issue resolution and proactive, relationshipbased support to help you minimize costly downtime and realize the full value of enterprise mobility. Our services support all of your users managed through BlackBerry Enterprise Service 10, including those using ios and Android devices. For more information visit blackberry.com/btss Apps deployed to the Secure Work Space can securely access behindthe-firewall application servers No separate VPN infrastructure is required Requires only a single outbound port (3101) in BlackBerry Enterprise Service 10 (v10.1 and higher) Allows secure browsing of web pages on a corporate intranet on ios and Android devices
8 Getting started with BES10 Getting up and running on BlackBerry Enterprise Service 10 is fast and straightforward. Importantly, it does not impact your existing BlackBerry Enterprise Server infrastructure. 3 easy steps to BES10 Tablets and Smartphones STEP 1 Install BES10 (server software is free) to support BlackBerry, ios and Android users (corporate and BYOD). STEP 1 Activating devices through BES10 enables email and PIM to be securely synchronized and managed OTA. STEP 2 Set up BES10 to manage your existing BES 5.0.4 environments and BlackBerry OS device users through the single management console. STEP 2 Push mandatory apps and curate a corporate app storefront for recommended BlackBerry, ios and Android apps all from the BES10 console. STEP 3 Add new devices (BlackBerry 10, ios and Android) to the BES10 management environment. BlackBerry will give you perpetual BES10 Silver licenses for all of your existing BlackBerry licenses and your other active MDM licenses on a 1 for 1 basis. Your new BES10 licenses enable you to manage your BlackBerry 10, ios and Android devices for free. 3 STEP 3 For users who need added device, app and content controls and security, deploy Gold level EMM.
To find out more, and to sign up for a FREE 60 day BES10 trial, head to blackberry.com/business 4 EZ PASS Free perpetual BES10 licenses for all existing BlackBerry and other MDM licenses. Limited time offer. 5 Learn more at blackberry.com/ezpass 1 BlackBerry Enterprise Service 10 server software is available as a free download at BES10.com. The purchase of a BES10 EMM Gold level Client Access License (CAL) is required to deploy Secure Work Space for ios and Android devices. BlackBerry Enterprise Service 10 server software is also available as a sixty (60) day free trial including 50 Silver licenses for BlackBerry devices and 50 Gold licenses with Secure Work Space for ios and Android. 2 Requires BES10 v10.1 (or higher). 3 Additional terms and conditions will apply. BlackBerry reserves the right to extend or terminate the offer period at any time. Offer void where prohibited. 4 60-day Free Trial Offer: Limited time offer; subject to change. Limit 1 per customer. Trial starts upon activation and is limited to 50 Silver licenses for BlackBerry devices and 50 Gold licenses with Secure Work Space for ios and Android. Following trial, customer must purchase service to continue use of product. Not available in all countries. A trial system can be upgraded to a production system at any time by adding a production key purchased or acquired from an authorized reseller. When a system is upgraded to production, the trial licenses will no longer be available. 5 Between now and January 31, 2015. Additional Terms and Conditions will apply. ios is a registered trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. ios is used under license by Apple Inc. Apple Inc does not sponsor, authorize or endorse this brochure. Android is a trademark of Google Inc. which does not sponsor, authorize or endorse this brochure. 2014 BlackBerry. All rights reserved. BlackBerry, BBM and related trademarks, names and logos are the property of BlackBerry Limited and are registered and/or used in the U.S. and countries around the world. All other trademarks are the property of their respective owners.