Airwatch mobile application management

You are using an outdated browser. Please upgrade your browser to improve your experience.

Use the Workspace ONE UEM powered by AirWatch to push Android public applications, internal applications, and web apps to Android devices.

The managed Google Play Store is the recommended way to manage all your application deployment use-cases for Android devices. Managed Google Play loads in an iframe within the Workspace ONE UEM console whenever a public application is added and when an Android Enterprise EMM registration is configured. The iframe is opened through the API integration with Google Play and is not hosted by VMware. Applications that you push through the integration of Workspace ONE UEM and Android have the same functionality as their counterparts from the Google Play Store.You can also host the application .apk file as a local file. This option applies to Android 6.0+ devices only.

Internal apps are company-specific apps developed by your organization that are available for users to access from their device but not searchable in the public app store. You can add internal apps to Google Play as a private application. Although these private apps are managed as public apps and are available for assigned users to access, they are not searchable in the public app store.

You can use Workspace ONE UEM features to apply policies to the applications. For example, you can add configurations that make using the application more convenient and you can configure settings that make using the application more secure.

• To add convenience of use, configure the Send Application Configuration option. Application configurations allow you to pre-configure supported key-value pairs and to push them down to devices with the application. Examples of supported values may include user names, passwords, and VPN settings. Support value depends upon the application.
• To add secure features, use Workspace ONE UEM profiles for Android. Profiles let you set passcodes, apply restrictions, and use certificates for authentication.

The Workspace ONE UEM console allows you to push alpha, beta, or production versions of apps. Using alpha and beta versions of apps allows for testing for compatibility and stability before pushing the production version. You can select specific smart groups for testing and use flexible deployment to determine which users receive which version of the app. If you don't select whether to push the alpha or beta version, the production version is automatically assigned.

Important: VMware productivity applications (Web, Boxer, Content Locker) are not supported with Android (Legacy) Knox container deployments, such as Dual Persona or Container Only Mode, due to technical limitations with Knox container data separation. The Workspace ONE Intelligent Hub manages the container from the outside, and is not able to communicate with apps on the inside. Since the apps require a direct link to the Workspace ONE Intelligent Hub to communicate with the Workspace ONE UEM console, the apps cannot be configured inside the container. To use productivity apps with Knox, enroll the device using Android Enterprise on a device running Knox 3.x or later.

Workspace ONE Intelligent Hub for Android

Workspace ONE Intelligent Hub for Android is an application that enables the Native Android SDK API layer of management to which Workspace ONE UEM connects. Workspace ONE UEM engages Native Android SDK APIs on Android devices for management and tracking capabilities. are available to any third-party application, including the Workspace ONE Intelligent Hub and any other application using the AirWatch Software Development Kit (SDK).

With the AirWatch SDK, applications can take advantage of key MDM features that are available such as:

• Compromised Device Detection
• GPS Tracking
• Additional Telecom Detail
• Additional Network Details such as IP address
• Additional Battery and Memory statistics
• Native number

After enrolling, use the Workspace ONE Intelligent Hub to access and manage device information and settings. Access device information from the following tabs on the left of the device display:

• This Device – Displays the name of the enrolled end user, the device-friendly Name, current enrollment status, connectivity method, and compliance status.
• Device Status – Displays the current enrollment status including:
  • The server to which the device is connected.
  • The organization group to which the device is enrolled.
  • The current network status including the active Wi-Fi SSID to which the device is connected.

  Perform basic device management functions from the Workspace ONE Intelligent Hub menu at the top of the display:

  • Sync Device – Sync latest device information and receive updates from IT admin.
  • App Catalog – Launch the application catalog within the Workspace ONE Intelligent Hub or the native web browser, if applicable.

  Additional functionality is accessible from the application menu in the upper-right corner of the display:

  • Edit Phone Number – Modify the assigned phone number, if applicable.
  • Send Debug Log – Transmit a debug log for the device to Workspace ONE UEM .
  • Remove Device – Unenroll the device from Workspace ONE UEM .

  Android devices running Android 6.0 (Marshmallow) and above use the power saving options for idle apps and devices. If a user unplugs a device and leaves it stationary, with its screen off, for a period, the device goes into Doze mode, where it attempts to keep the device in a sleep state. There will be no network activity during this time. Doze mode affects how the Workspace ONE Intelligent Hub reports information back to Workspace ONE UEM .

  When a device is on battery power, and the screen has been off for a certain time, the device enters Doze mode and applies a subset of restrictions that shut off app network access and defer jobs and syncs. After a device is in doze mode for a period, the system sends the remaining Doze restrictions to wake locks, alarms, GPS, and Wi-Fi settings.

  Additionally, mode allows the device to determine that an app is idle when the user is not actively using it. When devices are in either state, the Workspace ONE UEM console will not receive reports on device details. When the user plugs a device in to charge or opens an app, the device can resume normal operations and reporting from AirWatch apps installed on the device to the Workspace ONE UEM console resumes.

  The Hub and SDK-Built Applications

  AirWatch offers an SDK to integrate into applications you build for the Android platform. Integrating the SDK into your applications enables the application to use AirWatch features. These features include controlling authentication to SDK-built applications and sharing a single-sign on session between applications that use the SDK.

  However, you must enable Key Encryption with User Input so that the Workspace ONE Intelligent Hub can care share an application passcode or an SSO session with other SDK applications.

  For information on the AirWatch SDK for Android, see AirWatch SDK for Android documentation.

  For information on SDK features in the Workspace ONE UEM console , see MAM Features With SDK Functions documentation.

  For information on the option Key Encryption with User Input , see Devices & Users / Android / Security in the Workspace ONE UEM System Settings documentation.

  Application Types and Supported OS Versions for Android

  Workspace ONE UEM classifies applications as native (internal, public, purchased), SaaS, and Web. You upload applications depending on the type. Workspace ONE UEM supports the following OS Versions for Android applications based on the application type.

  Table 1. Application Types and Supported OS Versions for Android

  Application Type	Supported Platforms
  Internal	Android v5.0+
  Public (Free and Paid)	Android v5.0+
  Web Links	Android v5.0+
  SaaS	Android v5.0+