windows phone 8 device and app management alan meeus sr. technical product manager windows phone...
TRANSCRIPT
Windows Phone 8device and app managementAlan MeeusSr. Technical Product ManagerWindows Phone Division Microsoft Corporation
WPH205
Windows Phone 8 is still pre-release
This qualifies this session as pre-release too
Agenda
App management on managed phones
Windows Phone management in the enterprise
Custom Company Hub
Security update
App deployment on unmanaged phones
App sandboxingLeast privilege, secure chambers model is applied to operating system services, inbox apps, and store appsMarketplace developer validation, app certification, and malware scanningAssures apps can be trusted and helps protect against malware
Robust security helps to protect informationSecure boot
Complete boot sequence is securedAssures operating system integrity and know state, helps protect against malware
Code signingAll code is signedMaking sure only known and trusted software components can execute
Device encryptionAlways-on, hardware assisted, and accelerated, full internal storage encryption
Device management choice
App and device management with native Mobile Device ManagementFor app distribution and access policy management
Exchange ActiveSync with Exchange Server and Office 365 for email and device managementWidely used for mobile email and access policy management
Simple passwordAlphanumeric passwordMinimum password lengthMinimum password complex charactersPassword expirationPassword historyDevice wipe thresholdInactivity timeoutIRM enabledRemote device wipeDevice encryption (new)Disable removable storage card (new) Remote update of business apps (new)Remote or local un-enroll (new)
(NA)
EASMobile Manager PoliciesMobile device management policyMD
M
Server configured policy valuesQuery installed enterprise app Device name Device IDOS platform typeFirmware versionOS versionDevice local timeProcessor typeDevice modelDevice manufacturerDevice processor architectureDevice language
Enterprise reporting
Phone application platformFamiliar and compatibleCreate applications that integrate with the Windows Phone experienceBest-of-breed and familiar Visual Studio toolsXAML and C# code platform enables efficient and rapid development and Sharing with Windows 8C and C++ for easy migration of apps to Windows Phone platform
Enterprise App Ecosystem Overview
2. Signing Tools
3. App Catalog
1. Registration
1. Develop App
2. Package and sign
1. Device Enrollment
2. Get apps
4. Create Token
3. Cert and Enterprise IDRegistration
1. Enterprise registers with App Hub
2. Enterprise downloads app tools
3. Microsoft notifies CA of pending enterprise registration
4. Vets enterprise5. CA checks that vetting is
complete, and generates a certificate for enterprise
IT organizationApp Hub Windows Phone
Enterprise app ingestionEnterprise apps are not submitted to Marketplace for ingestion App ingestion in enterprise catalog is owned and managed exclusively by ITIT is responsible for the quality of enterprise apps IT is responsible for any impact on the overall experience on the phone
May use the Windows Phone Marketplace Test Kit to evaluate appsEnterprise app capabilities are the same as a public apps Capabilities are enforced on the phone at app install time
If app uses the location capability, prompt for user approval and give the user an option to disable
Unmanaged Phones - Enterprise App Enrollment
Enterprise generates app enrollment token
App enrollment steps
1.Enterprise emails a link to the app enrollment token
2.User authenticates with domain credentials3.User downloads and installs app enrollment token-or-4.Enterprise emails app enrollment token using IRM5.User authenticates with IRM and installs app
enrollment token
Unmanaged Phones enterprise app deployment
1.Enterprise IT signs the XAP2.XAP is posted to the private Enterprise App
Store3.User navigates to the Enterprise App Store
(via web browser or client app) and selects the app to install
4.App is downloaded and installed on the phoneEnterprise app installation works only for enrolled phones
Enrollment & Management Architecture
Discovery
CAEnrollment Server
Management Server
App Catalog
Email and pwdSuccess
cert requestGet certGet app token
Get Policy
Get Custom Hub
Install Apps
Managed Phones Enterprise App Enrollment
Managed by MDM
1.The phone initiates enrollment with MDM2.MDM provisions certificates to the phone and
sends the app enrollment token to the phone3.Optionally, the user can install an app discovery
app that provides access to apps in the enterprise store
Phones enrolled with the enterprise
Managed Phones enterprise app deployment
1.Enterprise IT signs the XAP2.XAP is posted in the App Catalog3.User opens the app discovery app that
displays all available apps and selects the app to install
Or3. User browses the app catalog using the
browser4.App is downloaded and installed on the
phone
Remotely or locally remove policy, apps & app data
The mobile device management advantage Built-in for management set up &
configurationOne-step enrollment and company policy provisioningLOB application provisioning and auto deployment of first company applicationOn-going application deployment and auto app updates
Asset and inventory management
Custom company hub management
Company Hub
Questions
Windows Phone Sessions
Tuesday12:00
G105
WPH201 What's New
14:45
G105
WPH203 Build Apps and Games for WP 7.5
16:30
E107 WPH202 Collaborate Through Exchange, SharePoint, Lync and Office 365
Wednesday12:00
E104 WPH204 Application UI Design Principles
14:45
D201
WPH304 Security Deep Dive
17:00
G105
WPH206 How to Make Money with your Applications and Games
Thursday08:30 G10
5WPH205 Device and App Management
12:00 G105
WPH301 Tiles and Notifications
14:45 G105
WPH207 Building Enterprise Apps
16:30 D201
WPH302 Localization and Globalization
Friday08:30
G105 WPH303 Windows Phone: Optimizing Application Performance
10:15
G105 WPH208 Windows Phone: MVVM and Unit Testing Step by Step
Resources
Connect. Share. Discuss.
http://europe.msteched.com
Learning
Microsoft Certification & Training Resources
www.microsoft.com/learning
TechNet
Resources for IT Professionals
http://microsoft.com/technet
Resources for Developers
http://microsoft.com/msdn
Evaluations
http://europe.msteched.com/sessions
Submit your evals online
© 2012 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to
be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS
PRESENTATION.