UEM2217BU The Latest on Android and Chrome OS in the or ... · The Latest on Android and Chrome OS in the Enterprise VMworld 2017 Content: Not for publication or distribution. Disclaimer

Bhavesh Kumar, Product Line Manager, VMwareMatt Drasner, Product Manager, Google

UEM2217BU

#VMworld #UEM2217BU

The Latest on Android and Chrome OS in the Enterprise

VMworld 2017 Content: Not fo

r publication or distri

bution

Disclaimer

• This presentation may contain product features that are currently under development

• This overview of new technology represents no commitment from AirWatch and VMware to deliver these features in any generally available product

• Features are subject to change, and must not be included in contracts, purchase orders, or sales agreements of any kind

• Technical feasibility and market demand will affect final delivery

• Pricing and packaging for any new technologies or features discussed or presented have not been determined

• This information is confidential

#UEM2217BU CONFIDENTIAL 2



bution

#VMworld #UEM2217BU

Android in the Enterprise Provides Simple and Secure Options Across Use Cases



bution

Android is the most popular choice for business-use smartphones

Andro

id b

usin

ess-u

se s

mart

phones s

hip

ped

2010 2012 2014 2016 2018 2020

284M297M

310M322M

300M

100M

0M

200M

Source: IDC, March 2017 Corporate and individually liable shipments

77%of business-use

shipments are Android

330M

Android shipments

400M

28%of business-use

shipments are

Android

#UEM2217BU CONFIDENTIAL



bution

Smartphone

Productivity

Tablet

Customer service,

back office,

support

Connecting

field and

task workers

Single use

devicesReal-time

digital signage

Rugged

devices

Signage

Trainings,

delighting customers

VR headsets

Devices

for industrial

environments

Kiosks

Streamlining

payments

Point of sale

systemsInteractive

customer

interface

‘Traditional’

business mobility

For every use case:

Android business mobility

2 billionAndroid devices*

* Monthly active Android GMS devices



bution

Management APIs

EMM enforced policy controls

Android provides

multiple layers of

security

to keep your device and

data protected

Hardware

Dedicated secure hardware

elements carry out the most

critical tasks

OS platform

Complete platform

security ensures device

and data integrity

Google Play Protect

Always-on app analysis

scanning and removal



bution

Setup in a Few Easy Steps

7



bution

Streamlined App Management with Google Play Integration

8

Direct integration with Google Play Store to search, approve and configure work apps in a single location

Work app distribution through Google Play Store for single app catalog

CONFIDENTIAL



bution

Flexible Device Management Offers Choice for IT

Personally-owned Company-owned

Business only

use

Purpose built

solutions

Work managed Work managed

Bring your own

device

Work profileManagement

Deployment



bution

Deploy a Work Profile for Personal Devices

Visual separation of work and personal with badged icons

Prevent sharing

between work and

personal apps and data

User can see separate

configurations for:

• Credentials

• Accounts

• Apps

• Security

Built-in to the Android operating system



bution

Flexible Device Management Offers Choice for IT

Personally-owned Company-owned

Business only

use

Purpose built

solutions

Work managed Work managed

Bring your own

device

Work profileManagement

Deployment



bution

Protect Data on Corporate Devices

Deploy a work managed device for complete management of the entire device and advanced policy controls

Flexible onboarding options:• NFC• QR Code• Enter code for Google accountVMworld 2017 Content: N

ot for publicatio

n or distribution

#VMworld #UEM2217BU



bution



bution

Android Enterprise for Purpose Built Deployments

• Simple and consistent user experience

– Out-of-the-box enrollment

– Managed Google Play for internally developed or public apps

– Built-in mode to lock device to one apps

• Flexible Android enterprise deployment options

– AirWatch Launcher

– Remote management

– Advanced product provisioning

– Integration with OEM APIs (i.e., Zebra)

15

Create consistent experiences and centralize IT

management to improve workflows and better serve

users.



bution

Android Native Single App Mode

16

ROADMAP

• Locks device down into mode running

one or a set of specific apps

• Admins can remotely control settings

and app install/uninstall OTA

• Provisioning device is as simple as an

NFC bumpVMworld 2017 Content: N

ot for publicatio

n or distribution



bution



bution

19

Remotely Support and Troubleshoot

with Advanced Remote Management

CONFIDENTIAL

View any device’s screen in real-time, in it’s skin, and control as if it were in your hand

Notify users when their screen is visible and enable them to pause a session

Remotely connect to any device in seconds from the AirWatch Console

Access real-time device info



bution



bution



bution

Innovations from Samsung Enable Productivity and Security from Anywhere



bution

Samsung Galaxy S8 and Samsung DeX

Samsung DeX or “Desktop Experience” enables peripheral and full screen support

DeX Station docks to peripherals: mouse, keyboard, monitor

New Samsung Galaxy class flagship device



bution

VMware Workspace ONE Enables Access to All Apps on DeX

Identity-based single sign-on for streamlined user experience

Universal app catalog for cloud, mobile, web, and virtual

Usage reporting and analyticsVMworld 2017 Content: N

ot for publicatio

n or distribution

Vulnerable to security breaches by staying on old OS for compatibility with mission-critical business

apps

Organizations need to test compatibility with new

firmware to ensure apps are secure and functional

Hard to manage various OS versions in IT environment by permitting denial of firmware

updates by end users

Firmware Challenges in the Enterprise

CONFIDENTIAL 25

ROADMAP



bution

• Allows IT administrators to specify a specific OS firmware version to be deployed to their users

• Set time to update considering work time and business schedules

• Manage single mobile OS within enterprise

Samsung E-FOTA Key Features

Selective FOTA

Time Control

Forced Update

26

ROADMAP



bution

Chrome OS & VMware Enabling a Simple, Flexible and Secure Platform for the Enterprise



bution

The cloud has changed

the way we look at

devices



bution

Considerations in a Cloud First Organization

Need to support multiple types

of hardware and software,

while maintaining a

streamlined approach to

security (CIO, 2017)

SECURITY

Choose secure OS and

hardware for all endpoints

By 2020, 80% will have failed

to capture new, CEO-directed

IT/digital investments due to

antiquated IT practices

(Gartner, 2017)

IT MANAGEMENT

Unify device management

for ease of use, more control

and reduced TCO

Employee mobility leads to

30% better processes and

23% more productivity

(Forbes, 2016)

EMPLOYEE PRODUCTIVITY

Support shift to cloud-first

and increase productivityVMworld 2017 Content: N

ot for publicatio

n or distribution

Chrome Devices Chrome OS

Speed

Together, VMware and Chrome Enable a Cloud First

Organization

Simplicity

Security

Shareability

AirWatch Chrome

Enterprise

Enterprise

functionality and

management

APIs

Workspace ONE Horizon

UEM platform:

manage every

device

Digital workspace

platform: deliver

every app

Virtual desktop &

app platform:

deliver every

desktop



bution

Chromebook Chromebox Chromebase

Address All Business Needs with a Broad Range of Form

Factors and Price Points



bution

Speed Simplicity Security Shareability

Chrome OS, a Versatile OS to Meet Enterprise Needs



bution

Productivity

Manage apps,

customize browser

and enable Chrome

Sync for an optimal

user experience

Control

Manage your entire

fleet of Chrome

devices with increased

flexibility for greater

operational efficiency

Security

Protect your company

and user data with

enterprise-grade security

– from hardware chips to

application sandboxing

Support & Updates

Reduce your

dependency on

reactive user support

and leverage our 24/7

support, if needed

Chrome Enterprise License Provides Capabilities for Your

Business



bution

“Digital Workspace” is the Convergence of UEM, Apps and IDM

Any Application Mobile | Cloud | Web | Win

Any Device Unified Endpoint Management (UEM)

Any Identity Single Sign On



bution

VMware and Chrome Together Address Your Enterprise

Mobility Needs

Unified Management User ProductivityEnd-to-End Security

CONFIDENTIAL



bution

Unified Management

Manage Chrome devices alongside all other

endpoints on a single platform, starting from out-

of-the box on-boarding – all the way to enterprise

device wipe

●Maximize controls in a complex IT

environment

●Remotely troubleshoot and enable

diagnostic

●Create dynamic groupings to

deploy apps and policies

●Consistently set policies, settings

and configurations across all form

factors

CONFIDENTIAL



bution

Deploy Device Policies to Chrome Devices

38

Disable guest mode

Restrict sign in to only your organization

Enable ephemeral mode to remove all user data from the device when the user logs out

CONFIDENTIAL



bution

39

Deploy Policies Based on User

Push Chrome extensions and Chrome and Android apps

Configure settings for network and power

URL access controls to blacklist and whitelist

Allow the use of incognito mode

Configure bookmarks and group them into relevant folders

Setup single sign-on (SSO)

CONFIDENTIAL



bution

Turn Chrome Devices into a Kiosk or Digital Sign

CONFIDENTIAL 40

Lock devices into a secure environment for testing or use a Chromebit and extensions such as the Chrome sign builder to set up digital signage



bution


Mobility Needs


CONFIDENTIAL



bution

●Security at every level, from bootup

to shutdown, with full-disk encryption

●Conditional application access

●Secure one-click SSO with optional

MFA

●Security certifications, including

NIAP/CC, DISA STIG, FIPS,

FedRamp

End-to-End Security

Protect your business with enterprise-grade

security and data protection at the user,

application, device and network level

CONFIDENTIAL



bution

CONFIDENTIAL 43

Chrome OS, Secure by Default

on Every Device

Hardware Trusted Platform Module (TPM)

Firmware Verified boot

OS Sandboxing, automatic updates

User SessionsPer-user encryption, x-device policy

compliance, safe browsing, certifications

PoliciesSign in, network policies, signed policy

delivery, permissions, public sessions

App DeliveryMalware detection and remote uninstall,

blacklist/whitelist

Verified Access Real-time device identity check



bution


Mobility Needs


CONFIDENTIAL



bution

User Productivity

Provide access to applications –

cloud, web, native, virtual – to deliver

a consistent end-user experience

and ensure your teams are productive

anywhere, anytime, on any device

●Access full Windows desktops and

applications, virtualized from cloud

or data center

●Simple single sign-on (SSO)

access

●Reduce IT complexity to simplify IT

Admin workloads

CONFIDENTIAL



bution

CONFIDENTIAL 46

Workspace ONE: Improve

Productivity for Employees with

Simple App AccessOne place to go for all your business apps, optimized by device type

One-touch mobile single sign-on using device trust

Easy multi-factor authentication using any mobile device

Privacy by design assures users that their personal apps and data remain invisible to IT

Access all applications including cloud, web, native Android,

Chrome Apps and Windows apps and desktops from a unified

location

Consistent end user experience across platforms



bution

CONFIDENTIAL 47

Horizon Makes Desktop and App Management Easy

Deliver

Applications

Manage Applications

Support for

Windows and Linux

The ability to efficiently and cost-effectively deliver, manage and monitor

virtual desktops and published applications to end users who may not need

access to a full desktop.

DESKTOPS APPLICATIONS



bution

Chrome Browser:

Support employee mobility with browser

sync across devices and manage

extensions to give users the right tools

Managed Google Play:

Deploy private and public mobile applications

via the Google Play store (beta)

Productivity

Virtualization:

Application or workspace Virtualization

through enterprise partners

Fast & Secure Boot:

Chrome boots in seconds with instant

resume.

Automatic Updates:

Managed or automatic deployment to dual

partitions for uninterrupted install. VMworld 2017 Content: Not fo


bution



bution

50



bution

VMware and Chrome together address your enterprise mobility

needs

• Industry leading UEM solution

• Consumer simple workflows across devices

• Enterprise security

• DLP policies and remote management

• Identity and secure SSO to apps

• Conditional access policies

• Access to all apps and virtual Windows

desktops from a unified location

• Device and form-factor options for broad range

of use cases

• Lightweight OS designed for the cloud:

• Fast out-of-the-box and faster over time

• Easy to manage for lower TCO

• Multi-layer security from the hardware

chips to app sandbox

• Seamless auto updates

• Google Play gives access to 2m Android apps



bution

VMware Provides Security and Flexible Options for Android and Chrome OS Deployments

52

Android for BYOD, corporate-

liable and purpose-built solutions

Samsung enabling business

mobility to securely work from

anywhere

Management of fast, simple and

secure Chrome OS devices



bution

For more information

• Driving Business Critical Operations with Rugged Devices, Wearables and

Peripherals

• UEM2219BU

• Tuesday, August 29, 5:00PM – 6:00PM

• One device to rule them all: How Samsung and VMware are delivering on

the convergence of mobile and desktop together with Workspace ONE and

AirWatch on Samsung Galaxy devices today

• ADV3370BUS

• Tuesday, August 29, 2:30PM-3:30PM

• Google Booth

• Samsung BoothVMworld 2017 Content: N

ot for publicatio

n or distribution



bution



bution

Documents

UEM2217BU The Latest on Android and Chrome OS in the or ... · The Latest on Android and Chrome OS in the Enterprise VMworld 2017 Content: Not for publication or distribution. Disclaimer