fujitsu’s managed mobile service for devices with android

Enrolment Guide/Fujitsu’s Managed Mobile service for devices with Android operating system

For: General

02.05.2018

Version 4.2

1 of 20 www.fujitsu.com/fi

© Copyright Fujitsu Finland Oy

Enrolment Guide Fujitsu’s Managed Mobile service for devices with Android operating system

Set up and enrolment of Fujitsu’s Managed Mobile service from a link delivered via SMS or directly using the device’s play store application.

MDM Enrolment Guide Android eng / Fujitsu’s Managed Mobile service for devices with Android operating system

of 20 www.fujitsu.com/fi


Contents

1 General 3

2 Before set up 3

3 Enrolment 4

3.1 Security policies and applications deployed to the device 9

3.1.1 Security policies – Screen lock with a pin code 9

3.1.2 F-Secure Mobile Antivirus 10

3.1.3 F-secure Freedome 11

3.2 Email clients and configurations 13

3.2.1 TouchDown 13

3.2.2 Samsung Exchange ActiveSync 15

3.2.3 Secure Mail 16

4 Secure Web 17

5 Corporate Application Store 18

6 Xenmobile Self Help Portal 19

6 Appendix 1 / Secure Mail functionality chart 20


3 of 20 www.fujitsu.com/fi


1 General

Fujitsu’s Managed Mobile service manages customer's smartphones, tablets and other mobile devices, and the

applications and settings within them. The service ensures that users have consistent, reliable and secure access to

enterprise data and applications. It uses standardised services, management tools and methods to ensure corporate

security and compliance regardless of the user's location. Settings enabled on different device models and operating

system (OS) versions may vary as the configurations are dependent on the OS capabilities.

During the enrolment, the device is pre-configured for corporate use using the predefined pre-installation package. A

typical setup includes the enforcement of organization’s security policies on the mobile device (e.g. device lock

code/passcode and requirement of complex passwords), installation of an anti-virus software and setting up corporate

push email account for the user.

This document explains the typical set up and enrolment process for devices with Android operating system using

mobile data connection. The print screens illustrating the installation process are from Samsung S7 running Android 7.0

and Nexus 5X running android 7.1.2

If you have any questions about this service, or you need assistance during the set up process, please contact your

Service Desk.

2 Before set up

Make sure you have a working connection to the internet. You can try to browse the web with your mobile device to

check whether the web pages are available. If Internet connection is not available, please consult your network operator

to get the correct settings for your device.

Allow installation of non-Market applications

As we aren’t downloading the client from Google play store, we need to allow the installation of the app from an

“unknown source” by navigating to: Menu > Settings > Security > Unknown sources. Tap Unknown sources and then OK.

(This may differ slightly on makes and models of Android)




3 Enrolment

If you have received an SMS that invites you to Managed Mobile service and asks you to download the client, please click

the link https://play.google.com/store/apps/details?id=com.zenprise (section a) or

http://mobilestore.invianet.com/download/fmm (section b) on the SMS and proceed to step 2a or 2b depending which

link you used in this section.

1a. If you do not have the invitation SMS on your device, you can either search for Citrix Secure Hub from play store.

Once the app has installed choose to open the app and jump to step 5.




1b, Type in the address http://mobilestore.invianet.com/download/fmm.htm directly in the mobile device’s browser.

It is recommended to use the default browser of the device

Select the correct device client according to your device Operating System.

You might see the warning notification of the file type if you use chrome browser for downloading the file.

A message starting downloading appears. You can see when download is complete by swiping down the notification bar

from the top of the screen. The download can take several minutes to complete, typically up to 15 minutes.

2b, Tap the download notification

to start installation.

3b. Tap Install 4b. Tap Open.




5. Next you will need to give app permission to some of the phones functionality in order for the app to operate correctly.




6. Enter your username as provided in the 7. If auto-discovery fails, you will get the following server error

welcome email and tap “Next”. message, in that case please press red X symbol and enter

If successful, you will be taken to step 8 the address provided in the welcome email

8. If you company is using premium 9. Fill in the MDM password that is 10. Choose Activate

services you will asked to enroll associated with the username.

your device. Choose Yes.

Note! the following screen(s) may appear out of sequence on your device and depending on the device model you may see

some or none of them.




11. If your company has the premium service in use you will be asked to define a Citrix Pin to ease access to premium

components. The password complexity requirements may differ from the example shown below.

12. The following screen appear only on Samsung Safe compliant devices running Android OS 4.3 or above and if your

organization have Samsung specific features enabled.

Tick the acknowledgement check box and tap Confirm

IMPORTANT

Although you have now successfully enrolled your device to the Managed Mobile service, your customer specific

applications and security policies will be automatically downloaded to your device. You will then need to follow the

appropriate sections below. PLEASE NOTE Only common applications and security policy examples are documented

from 3.2.1 onwards, so you may need to skip past sections which are not relevant and therefore not shown on your

device.

If your corporate applications and policies are not documented below, please contact your service desk.




3.1 Security policies and applications deployed to the device

If you already have a screen lock pin code on your device you will be asked to enter that first and change it if it does not

meet the corporate policies.

3.1.1 Security policies – Screen lock with a pin code

In this instruction the passcode is demonstrated by using a pin code. You are welcomed to use pattern or password if it

meets the requirements set.

1. Tap PIN 2. There will be a guide on the screen how many digits/character your passcode

must be. Enter a passcode that meets these requirements. Confirm the passcode

when prompted for it




3.1.2 F-Secure Mobile Antivirus

On some Samsung devices the F-Secure is installed silently in the background and you will not see steps 1 and 2 below,

and you will need to open F-Secure manually. You can find and activate Mobile Security under Apps if your organization

has the service available.




3.1.3 F-secure Freedome

Alternatively your company might have opted to purchase F-secure Freedome, app security and VPN solution. The

software check for the apps on the phone for malware and gives you option to enable VPN protection for you traffic. This

protection will encrypt your data traffic and masks your IP so that your device IP is never sent to a website/service while

the Freedome VPN is switched on.

The installation link will take You to Google Play to get the app. Choose Install then Accept the permission that the app

needs and once the installation has completed choose Open.

Once the App has opened up you can read the description of the features and then scroll the screen all the way to the

right. Once all the way on the right choose “ Start Using Freedome”.




1. Accept the terms of service and then the installation is done. The App will start to automatically scan you current

apps for malware and you can see the status under App Security. The Large button on the middle will allow you to

set the VPN protection on for your data traffic.

2. When you enable the VPN for the first time you need to allow the VPN connection to be formed. Once accepted your

traffic is secured.




3.2 Email clients and configurations

Fujitsu Managed Mobile has several different Android E-mail clients available. We support

TouchDown which is a secure email client with advanced policies (section 3.2.1)

Native Android email client configuration for capable Samsung devices (section 3.2.2)

Citrix Secure Mail [previously known as WorxMail] which is a secure E-mail client included in the Managed Mobile

Premium service (section 3.2.3)

See below sections for configuration instructions. If you are unsure about what Managed Mobile email service your

organization is currently using, and you are not prompted for TouchDown installation, cannot see new email account

notification or cannot find Secure Mail under Secure Hub, please refer to your Welcome email for further instructions and

consult your service desk if needed.

3.2.1 TouchDown

If your organization have Touchdown in use, you will see the following screens after you have enrolled your device to the

Managed Mobile service.

1. Tap Install 2. Tap I Accept 3. Tap I Accept




4. A Device Configuration Wizard is displayed. Settings are preconfigured and you only need to enter your

email/Exchange password

The TouchDown configuration is completed when you see the synchronization progress bar above. Your organization

may enforce additional security policies via their Exchange environment, which will be enforced at this point. This could

include additional pin codes.

By tapping your device’s Back (arrow) you will return to uncompleted installations, if there are any, that you need to

finish.




3.2.2 Samsung Exchange ActiveSync

If your organization uses Touchdown email instead of Samsung native email application for corporate emails, the

following configuration will not appear. For Touchdown configuration, please see section 3.2.1.

1. Under notification you will find a

prompt of a new email account,

tap on the notification

2. Click OK 3. Fill in your Email password and

tap OK. The device will contact the

Server

4. Tap Update 5. Tap Activate 6. Device will shortly show new

messages in the inbox

By tapping your device’s Back (arrow) you will return to uncompleted installations, if there are any, that you need to

finish.




3.2.3 Secure Mail

Secure Mail is an enterprise email, calendar, and contacts client that provides secure access to corporate email and

attachments. Secure Mail provides all the features and function of a world class email client, plus the added benefit of

ensuring that your company email and attachments are safe.

Secure Mail is part of the Fujitsu Managed Mobile Premium service, and may be available for you to download from the

Enterprise Application Store or as an automated push to your device. (see section 5 for downloading instructions).

The App is delivered via the Google Play Store and the system will direct you there to begin the installation.

1. Tap install 2. Choose Open 3. App will go to Secure Hub and then

will try to do automated login

4. If the account addition is successful you will see the below image with your accounts details otherwise you will be

taken into an account login page where you need to give your email password for the accounts to be added.




4 Secure Web

Secure Web is a consumer-like, locally installed mobile browser that enables secure access to internal web resources

including external SaaS, and HTML5 web applications.

Secure Web is part of the Fujitsu Managed Mobile Service, and may be available for you to download from the Enterprise

Application Store (see section 5 for downloading instructions) or via application push, the installation procedure is the

same as above Secure Mail.

Secure Web internet/intranet

browsing (fig. 1)

Bookmarks button (fig. 2) Tab switcher button (fig. 3)

Secure Web leverages MDX technologies to create a secure method for accessing your organization’s internal network via

micro-VPN and additional security features to ensure that you can access all of your internal websites (fig. 1), including

those with sensitive information. Secure Web offers a seamless user experience in its integration with Secure Mail and

allows you to click links, such as "mailto," and have the native apps open inside the secure container on the mobile

device.

Secure Mail client may include predefined intranet links or web applications in the bookmarks tab, which is accessed

from the bookmark sign in the lower right-hand corner (fig. 2). Secure Web browser also allows tabbed browsing, the

icon displayed on the right side of the address bar displays the number of open tabs, and by clicking on it, you can either

switch tabs, or open a new tab by clicking the plus “+” sign.




5 Corporate Application Store

Secure Hub client has an in-built application store. Your organization can use the store to offer applications to be

downloaded to your device. Applications in the store can be either in-house corporate applications, links to intranet

resources, links to applications in Play Store or applications running in a container with policy restrictions (MDX

wrapping). If your organization has opted to utilize this feature that is available in the Fujitsu Managed Mobile

Premium, you can access the store selecting it from menu. Upon clicking, you will receive a list of applications that you

have access to. If there are more applications than can fit the view, you can browse for more by swiping the screen

down. You can also browse the apps based on different app categories by choosing the categories option from the top.

You can then install the application to your device by clicking on the appropriate icon and the device will display a

message that it has created a shortcut for you on your home screen and the application is then ready for use. A

checkmark beside the application icon indicates that the application is installed to the device.




6 Xenmobile Self Help Portal

Once you have enrolled your device you can use your workstation’s browser to manage your mobile device. Open you

workstation’s web browser and type in the self-service portal URL address given in the Welcome email. A login screen is

displayed.

Type in your Username and Password. Click Sign in.

Xenmobile Self Help Portal loads up. On the right top corner you can see that you are logged in. Press Sign out when you

want to leave the portal.

On the portal you can view your mobile device (e.g. GT-i9505) information. You can lock, wipe or locate your device.

Locking is an action that will send a lock command to the device.

Wiping is an action that will wipe all data stored on the device and restore the factory settings.

Locating is an action that will locate the device using GPS.




6 Appendix 1 / Secure Mail functionality chart

fujitsu’s managed mobile service for devices with android

Documents