VMware AirWatch Mobile Application Management Guide Enable access to public and enterprise apps AirWatch v9.2 Have documentation feedback? Submit a Documentation Feedback support ticket using the Support Wizard on support.air-watch.com. Copyright © 2018 VMware, Inc. All rights reserved. This product is protected by copyright and intellectual property laws in the United States and other countries as well as by international treaties. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents. VMware is a registered trademark or trademark of VMware, Inc. in the United States and other jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies. VMware AirWatch Mobile Application Management Guide | v.2018.02 | February 2018 Copyright © 2018 VMware, Inc. All rights reserved. 1 Table of Contents Chapter 1: Overview 5 Introduction to Mobile Application Management (MAM) 6 AirWatch Application Types and Their Supported Platforms 6 Explanations of Managed Applications and Their Benefits 7 Application Configuration Information 8 App and Profile Monitor Overview 9 Chapter 2: Getting Started 12 Create Custom Notifications for Applications 13 Configure Application Categories 13 Configure Google Play Integration (On-Premises) 14 Windows Desktop and Your Company's Root CA 15 Enable AirWatch to Distribute Windows Desktop Internal Applications 15 Register Applications With the Windows Phone Dev Center 16 Enable AirWatch for Windows Phone Application Distribution 16 Chapter 3: Internal Applications 18 Supported File Types for Internal Applications 19 Upload Internal Applications With a Local File 20 Use External App Repositories That Host Internal Applications 26 Use Flexible Deployment to Assign Applications 28 Benefits of Tracking Internal App Deployments 33 Provisioning Profiles for Enterprise Distribution 36 Distribution of Win32 Applications 37 Peer Distribution for Win32 Applications 51 Application Removal Protection Overview 63 Safeguards for Proprietary, Non-Store, AirWatch Applications 66 Chapter 4: Public Applications 68 Add Public Applications from an App Store 69 Paid Public iOS Applications and AirWatch 71 Public Application Installation Control on iOS Devices 73 VMware AirWatch Mobile Application Management Guide | v.2018.02 | February 2018 Copyright © 2018 VMware, Inc. All rights reserved. 2 The Windows Store for Business and AirWatch 75 Chapter 5: Purchased Applications (Apple VPP) 83 Purchased Applications (Apple VPP) Feature Overview 84 Redemption Code Method Overview 85 Managed Distribution by Apple IDs Overview 89 Custom B2B Applications and Apple's VPP 98 Managed Distribution by Device Serial Number 100 Chapter 6: SaaS Applications 105 SaaS Applications in AirWatch 106 Requirements to Support SaaS Applications 107 Add SaaS Applications in the AirWatch Console 108 Client Access Policy Description 113 Assign SaaS Applications 116 Settings for SaaS Applications 117 SSO Between AirWatch and VMware Identity Manager 120 Chapter 7: Web Links Applications 121 Web Links Application Features and Supported Platforms 122 Web Links Tab or Device Profiles 122 Web Links Application Behaviors in Apps & Books and Devices 123 Web Apps Admins and Roles Exceptions 123 Add Web Links Applications 124 Configure View Devices for Web Links Applications 125 Chapter 8: Manage Applications 127 Use Access Policies with SaaS Applications 128 Native List View Option Descriptions for Applications 130 Details View Setting Descriptions 132 Make App MDM Managed if User Installed 134 Configure Manage Devices 135 Access the Manage Feedback Page 136 Configure User Ratings 137 VMware AirWatch Mobile Application Management Guide | v.2018.02 | February 2018 Copyright © 2018 VMware, Inc. All rights reserved. 3 Active and Inactive Status 137 The Delete Option Description and Its Alternatives 137 Internal App Versions in AirWatch 140 Configure View Logs for Internal Applications 142 Access SDK Analytics Apps That Use SDK Functionality 144 Chapter 9: Application Groups 145 Application Groups and Compliance Policies Work Together to Apply Standards Across Devices 146 Configure an Application Group 146 Create Required Lists for the AirWatch Catalog 148 Enable Custom MDM Applications for Application Groups 148 Chapter 10: Compliance 150 Compliance for Mobile Application Management 151 Build an Application Compliance Policy 151 Chapter 11: AirWatch Catalog 154 Workspace ONE and AirWatch Catalog Settings 155 AirWatch Catalog Features and Deployment Methods 156 Standalone Catalog for MAM Only Deployments 167 Chapter 12: Workspace ONE 171 AirWatch Applications and the Workspace ONE Managed Access Feature 172 Supported Platforms for Open and Managed Access 172 View the Installation Status of Windows 10 Applications in the Workspace ONE Catalog 173 Chapter 13: MAM Features With SDK Functions 175 MAM Functionality With Settings and Policies and the AirWatch SDK 176 Configure Default SDK Security Settings 176 Assign the Default or Custom Profile 181 Supported Settings and Policies Options By Component and AirWatch App 182 Accessing Other Documents 205 VMware AirWatch Mobile Application Management Guide | v.2018.02 | February 2018 Copyright © 2018 VMware, Inc. All rights reserved. 4 Chapter 1: Overview Introduction to Mobile Application Management (MAM) 6 AirWatch Application Types and Their Supported Platforms 6 Explanations of Managed Applications and Their Benefits 7 Application Configuration Information 8 App and Profile Monitor Overview 9 VMware AirWatch Mobile Application Management Guide | v.2018.02 | February 2018 Copyright © 2018 VMware, Inc. All rights reserved. 5 Chapter 1: Overview Introduction to Mobile Application Management (MAM) Organizations use mobile applications to deploy mobile points of sale, configure sales kiosks, create business intelligence, and perform everyday work-related tasks. VMware AirWatch® Mobile Application Management™ (MAM) functionality can manage mobile applications, deploy them to devices, secure the applications with compliance policies. AirWatch offers advanced management functionality to internal applications using the AirWatch SDK and app wrapping. AirWatch Application Types and Their Supported Platforms AirWatch classifies applications as internal, public, purchased, and Web and you upload applications depending on the type. AirWatch supports many platforms and operating systems for most of the application types. View which platform and OS versions AirWatch supports for each application type. Application Supported Platforms Type Industry Apple iOS v7.0+ with limitations for compliance policies Templates Any Supported App Type Internal l Android v4.0+ l Apple iOS v7.0+ l Apple macOS v10.9+ l Apple tvOS v10.2+ l Windows Phone l Windows Desktop l Symbian ^3/S60 Note: Ensure that the auxiliary files packaged with Apple iOS or macOS applications do not have spaces in the names. Spaces can cause issues when you load the application to the console. VMware AirWatch Mobile Application Management Guide | v.2018.02 | February 2018 Copyright © 2018 VMware, Inc. All rights reserved. 6 Chapter 1: Overview Application Supported Platforms Type Public (Free l Android v4.0+ and Paid) l Apple iOS v7.0+ l Chrome OS l Windows Phone AirWatch can manage free, public applications on Windows 10+ devices when you integrate with the Windows Store for Business. l Windows Desktop AirWatch can manage free, public applications on Windows 10+ devices when you integrate with the Windows Store for Business. Purchased – Apple iOS v7.0+ Custom B2B Purchased – l Apple iOS v7.0+ VPP l Apple macOS v10.9+ Web Links l Android v4.0+ l Apple iOS v7.0+ l Apple macOS v10.9+ l Windows Desktop SaaS l Android v4.0+ l Apple iOS v7.0+ l Apple macOS v10.9+ l Windows Desktop Explanations of Managed Applications and Their Benefits AirWatch can deploy your applications as managed and unmanaged. The AirWatch Console can perform particular tasks for managed content that it cannot perform for unmanaged content. Explanation of Managed Use the AirWatch public application feature to search and upload public applications from app stores. If you use another way to add public applications to devices, AirWatch does not manage these applications. Management functions include these features. l Automatically deploy applications to devices through a catalog for installation. l Deploy versions of applications. VMware AirWatch Mobile Application Management Guide | v.2018.02 | February 2018 Copyright © 2018 VMware, Inc. All rights reserved. 7 Chapter 1: Overview l Feature applications in catalogs so that device users can easily access and install them. l Track installations of applications and push installation from the console. l Deactivate public applications to remove them from devices but to keep them in AirWatch so that you can re- activate them. l Delete applications and all their versions from AirWatch and from devices. Benefits of Management AirWatch can manage most applications unless there is a platform-specific reason hindering management or you upload public content without searching for it in an app store. l Managed content o Distribute – AirWatch pushes managed content with a catalog to devices. The catalog automatically installs content or makes content available for download depending upon the configured push mode. o Remove – AirWatch can remove managed content off devices. l Unmanaged content o Distribute – AirWatch must direct end users through the catalog to an app store to download documents. o Remove