Configuring and Delivering AetherPal as a managed application to … · 2020-07-18 · Android Managed Configuration: AetherPal MSM (Mobile Support Management) via the XenMobile Console

Citrix.com | Solutions Guide| Configuring and Delivering AetherPal as a managed application to XenMobile Android Users for Mobile Support

1

Solution Guide

Android Managed Configuration

Configuring and Delivering AetherPal as a managed application to XenMobile Android Users for Mobile Support.

Solution Guide


2

Introduction

Remote Support enables IT departments to securely connect to remote devices in the field to efficiently diagnose, remediate, and support apps and devices to increase uptime, productivity, and user satisfaction, while reducing downtime, outages, and long support calls.

Critical business processes are now literally in the mobile worker’s hands in a meeting, at the airport, or on the go. Smartphones and tablets are the lifeline of the modern workforce. Users rely on their mobile apps to be functioning and connected at all times and this this always on availability is critical for business success.

With the power of the XenMobile and AetherPal, you can now support to users in a whole new way with on-demand remote support.

Purpose of this document

This document is meant to guide administrators in configuring the below components;

• AetherPal Android App Config via the XenMobile Console


3

Android Managed Configuration: AetherPal MSM (Mobile Support Management) via the XenMobile Console

Prerequisites

1. Licensing purchased through AetherPal.

2. The AetherPal MSM Android app must be a MDM-managed application with in the XenMobile Server.

3. The device must be enrolled in Android for Work via XenMobile.

Configure the AetherPal App Config Policy

The App Configuration Policy with in the XenMobile server will assign the customer’s AetherPal environment.

Use the following procedure:

1. In the XenMobile console navigate to Configure > Device Policies and click the Add button.

2. Select Android for Work App Restrictions.

3. Select the Application ID, com.aetherpal.enterprise, from the drop down box.

4. Name your policy and click Next.

5. In the Server filed enter the AetherPal server to which the device should register for remote control, (e.g. https://test.dev.aetherpal.com).

6. In the Server Certificate(Encoded) field enter the public key of the enrollment certificate, that will be pinned at the agent, (Please coordinate with your AetherPal Technical Contact to provide certificates to be used in your AetherPal deployments).

7. In the Device Identifiers(Key:Value;) field enter ${device.serialNumber}.

8. In the Connection Authentication field leave the default setting.

9. In the Connection Privacy field leave the default setting.

10. In the Enrollment force field leave the default setting.

11. Click Next.

12. Assign the policy to the desired Delivery Group and Click Save.


4

AetherPal MSM App Configuration Key Definitions

Key Description Default if the key-value pair is not configured

device.register.server

The AetherPal server to which the device should register for remote control.

This can be obtained from AetherPal

(e.g. https://test.dev.aetherpal.com)

N/A

device.register.server.certificate

The public key of the enrollment certificate, that will be pinned at the agent.

Please contact your AetherPal Technical Contact to provide certificates to be used in your AetherPal deployments).

(e.g., pubkeyhash:SDrnB geCgqfGcDWa1c+r gmNbJKo=)

N/A

device.register.identifiers

tenantId: Obtained from AetherPal (e.g., https://citrix.dev.aetherpal.com)

emmid: A variable for a unique identifier for the device. The variable should be enclosed in parenthesis following a $; Supported App Config variables include serialNumber, udid, imei, and meid.

(e.g., ${device.serialNumber})

N/A

device.connect.mode.auth

Defines the mobile user interaction required to authorize each remote session.

1 – Privacy – A mobile user must manually enter a PIN code, provided out of band (e.g., by phone) to authorize the remote session. Generally used for BYOD knowledge worker devices.

2 – Unattended – An authenticated remote session can be established with no on-device interaction. Generally used for corporate owned purpose build devices.

1

device.connect.mode.privacy

Defines the privacy mode to be applied during connection.

1 – Privacy applied.

2 – No Privacy applied [ No Application Control in RC and No Password protection in RC, No Notification ].

1


5

Android Remote Support: AetherPal MSM (Mobile Support Management)

Prerequisites

1. AetherPal MSM enables Remote Support of all android devices.

AetherPal Admin Console

1. The admin enters the Device ID. This is provided by the end-user

2. The end-user on their device will need to launch the AetherPal MSM app and

provide the admin with their Device ID. Depending on which ID was specified as the EMM ID in App Config parameters, this may be the devices phone number, IMEI, serial number, or another unique identifier.


6

3. The admin will connect to start the Remote Support session.

4. The console will display a one-time use PIN to be given to the end-user to authenticate the remote connection.

5. The end user will be prompted to enter the one-time use PIN provided by the Admin.


7

6. Once the session is connected, the admin will have access to device information

and remote viewing access of the end-user’s device.

Conclusion

With the power of the XenMobile and AetherPal MSM you can now support to users in a whole new way with on-demand remote support.


8

About the Authors and Contributors

Frank Srp is a Senior Technical Marketing Manager specialized on Mobility, Citrix.

Sameer Mehta is a Director of Product Management, Citrix.

Mitch Berk is a Vice President of Product, AetherPal.

A special thanks to the reviewers of this Solutions Brief:

• Matthew Brooks

• Amandeep Nagra

Enterprise Sales North America | 800-424-8749 Worldwide | +1 408-790-8000

Locations Corporate Headquarters | 851 Cypress Creek Road Fort Lauderdale, FL 33309, United States Silicon Valley | 4988 Great America Parkway Santa Clara, CA 95054, United States

© 2018 Citrix Systems, Inc. All rights reserved. Citrix, the Citrix logo, and other marks appearing herein are property of Citrix Systems, Inc. and/or one or more of its subsidiaries, and may be registered with the U.S. Patent and Trademark Office and in other countries. All other marks are the property of their respective owner(s).

Documents

Configuring and Delivering AetherPal as a managed application to … · 2020-07-18 · Android Managed Configuration: AetherPal MSM (Mobile Support Management) via the XenMobile Console