![Page 1: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/1.jpg)
113 April 2023
GETTING DOWN TO BUSINESS
9 May 2014 Dennis Reumer @reumerd
DroidCon Berlin 2014
BLACKBERRY SECURE WORKSPACE& ANDROID
![Page 2: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/2.jpg)
213 April 2023
CONTENTS• What makes up BlackBerry Enterprise Service 10.1
• BlackBerry 10 Recap
• Universal Device Service + Mobile Device Management
• BlackBerry Secure Workspace for Android and iOS
• Leveraging the Power of Secure Workspace in Your Application
• Deploying an Application to the Secure Workspace
• References
• Q&A
![Page 3: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/3.jpg)
313 April 2023
Best in Class Enterprise Mobility Management
BLACKBERRY ENTERPRISE SERVICE 10
![Page 4: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/4.jpg)
413 April 2023
SERVICE NOT SERVER ?
BlackBerry Device Service
Universal Device Service
BlackBerry Connection Service
BlackBerry Administration Service
BlackBerry Web Services
BlackBerry Management Console
Etc.
![Page 5: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/5.jpg)
513 April 2023
BLACKBERRY ENTERPRISE SERVICEManage:
Users,
Devices,
Profiles
Policies
Group Users to
Simplify and Scale Deployments
Manage Applications
for Users and/or Groups
![Page 6: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/6.jpg)
613 April 2023
BLACKBERRY BALANCEThe Work Perimeter• Secure• Encrypted File Space• Can be Revoked Centrally• Encrypted Connectivity Behind the
Firewall• Push to deliver Real Time Information• Corporate Application Management
![Page 7: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/7.jpg)
713 April 2023
APPLICATIONMANAGEMENTWhitelisted Public ApplicationsLicensed or Corporate Applications
Company Apps Can BeOptional and appear for download,or be Required and pushed silentlyto the user’s device.
![Page 8: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/8.jpg)
813 April 2023
Mobile Device Management on Android and iOS
UNIVERSAL DEVICESERVICE
![Page 9: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/9.jpg)
913 April 2023
• Manage Users and Groups
• Configure Profiles, Policies etc
• Whitelist Applications
• Deploy Corporate Applications
MDM TO ANDROID & iOS
![Page 10: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/10.jpg)
1013 April 2023
MDM TO ANDROID & iOS
![Page 11: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/11.jpg)
1113 April 2023
CORPORATE DATA & BYOD
MDM is Great, but….
• User’s don’t want their personal devices locked down
• Eg. Hide the default camera application, Hide the default web browser, Disable data service when roaming
• Separation of Work and Personal
• Corporate Data needs to be secure at rest and in transit
![Page 12: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/12.jpg)
1213 April 2023
Separation of work and personal data that is secured and controlled
BLACKBERRY SECURE WORKSPACE
![Page 13: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/13.jpg)
1313 April 2023
A separation of work and personal data that is secured and controlled
• Authentication is required
• Data is saved to the secure file system as work data
• Work data cannot be shared outside the secure work space
• Cut / copy / paste is only allowed within the secured work space
• Personal applications cannot access work data
A device work space where applications are secured
• Integrated Email, Calendar, Contacts, Notes* and Tasks
• Secure Browser
• Secure attachment viewing and editing
• Ability to secure enterprise applications
Secure Connectivity
• Provides an AES 256bit secure connection between the Secure Workspace and corporate network via BlackBerry Enterprise Service 10
• All apps provided in the Secure Work Space will use this secure connection, including securely wrapped enterprise applications
• Does not require a 3rd party VPN for Secure Workspace apps
• Uses the port 3101 already configured for communication between BES and BlackBerry smartphones
BLACKBERRY SWS OVERVIEW
![Page 14: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/14.jpg)
1413 April 2023
TITLEHEREWORK CONNECT
![Page 15: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/15.jpg)
1513 April 2023
TITLEHEREWORK BROWSER
![Page 16: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/16.jpg)
1613 April 2023
TITLEHEREDOCUMENTS To Go
![Page 17: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/17.jpg)
1713 April 2023
Leverage Secure Connectivity and Storage for Your Applications
DEVELOPING FOR SWS
![Page 18: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/18.jpg)
1813 April 2023
DEVELOPINGFOR SWS
EMBEDDING OF SDK
• Additional development effort
• Risk: Potential for error integrating the SDK
• Decision on whether the App can be securely deployed during App development.
APPLICATION WRAPPING
• No source modification required:• Saving effort• Preventing error
• Decision on whether the App can be deployed with MDM Admin
![Page 19: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/19.jpg)
1913 April 2023
TRADITIONALAPPLICATIONARCHITECTURE
• Create application
• Interact with API’s and available OS entry points
• Manage all security for data at rest
![Page 20: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/20.jpg)
2013 April 2023
WRAPPEDAPPLICATIONARCHITECTURE• Secure wrapping manages
interaction with system APIs• Compliance• Authentication• Application level controls• Network
• Data encryption using AES 256 for data-at-rest
![Page 21: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/21.jpg)
2113 April 2023
TITLEHEREWRAPPING PROCESS1. Development Team Build and Sign Application
2. Pass to BlackBerry Enterprise Service Administrator
3. Administrator Uploads the Application to BES for Wrapping
4. Wrapped Application is Downloaded
5. Wrapped Application Passed Back to Development Team
Why? -> The Application has been modified in the process and thus requires re-signing
6. Development Team re-sign the application
7. Pass to BlackBerry Enterprise Service Administrator
8. Application Definition Created for Application
9. Added to a Software Configuration
![Page 22: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/22.jpg)
2213 April 2023
WRAPPING PROCESS UPLOAD TO SERVER
![Page 23: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/23.jpg)
2313 April 2023
WRAPPING PROCES WAIT
![Page 24: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/24.jpg)
2413 April 2023
WRAPPING PROCESS DOWNLOAD
![Page 25: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/25.jpg)
2513 April 2023
TITLEHEREWRAPPING PROCESS RESIGNjarsigner -verbose
-sigalg SHA1withRSA-digestalg SHA1-keystore C:\Users\<mich.user>\.android\release.keystore-storepass BlackBerry-keypass blackberrySecureUnsigned.apkandroidrelease
zipalign.exe -v 4SecureSigned.apkSecureSignedAligned.apk
![Page 26: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/26.jpg)
2613 April 2023
WRAPPING PROCESAPPLICATION DEFINITION
![Page 27: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/27.jpg)
2713 April 2023
WRAPPING PROCESS SOFTWARE CONFIGURATION
![Page 28: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/28.jpg)
2813 April 2023
TITLEHERESECURE WORKSPACE REFERENCES• Wrapping for iOS and Android:
• http://developer.blackberry.com/devzone/develop/enterprise/install_android_or_ios_work_space_app.html
• Free Trial version of BlackBerry Enterprise Service 10 for testing:
• http://www.bes10.com
• Example app and resigning script:
• https://github.com/blackberry/Secure-Work-Space
• Administration Guide to the Universal Device Service 10.2.1:
• http://docs.blackberry.com/en/admin/deliverables/62506/BES10_v10.2.1_UDS_Advanced_Admin_Guide_en.pdf
![Page 29: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/29.jpg)
2913 April 2023
Ask now or be forever silent ;-)
QUESTIONS &ANSWERS
![Page 30: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/30.jpg)
K E E P O N M O V I N G .
BLACKBERRY
![Page 31: BlackBerry Secure Workspace for Android - Getting down to Business!](https://reader035.vdocuments.mx/reader035/viewer/2022062514/5584c7a7d8b42ae0138b49a6/html5/thumbnails/31.jpg)
3113 April 2023
THANK YOU !
Dennis Reumer - @reumerd
linkedin.com/in/dennisreumer
MAY 08 2014
DroidCon Berlin 2014
BLACKBERRY SECURE WORKSPACE& ANDROID