ZEN10-Managing iOS and Android Devices with … · ZEN10-Managing iOS and Android Devices with ZENworks / Lab Copying all or part of this manual, or dist ributing such copies, is

Nove

Managing iOS and Android Devices with ZENworksLab

www.novel l .comNovell Training Services

AT T L I V E 2 0 1 2 L A S V E G A S

Z E N 1 0

ll, Inc. Copyright 2012-ATT LIVE-1-HARDCOPY PERMITTED. NO OTHER PRINTING, COPYING, OR DISTRIBUTION ALLOWED.

Novel

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals.

Copyright © 2012 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or more additional patents or pending patent applications in the U.S. and in other countries.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see the Novell Documentation Web page (http://www.novell.com/documentation).

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

Copying all or part of this manual, or distributing such copies, is strictly prohibited.To report suspected copying, please call 1-800-PIRATES.

Version 12

l, Inc. Copyright 2012-ATT LIVE-1-HARDCOPY PERMITTED. NO OTHER PRINTING, COPYING, OR DISTRIBUTION ALLOWED.

http://www.novell.com/info/exports/

http://www.novell.com/company/legal/patents/

http://www.novell.com/documentation

http://www.novell.com/company/legal/trademarks/tmlist.html

Contents


3Version 1

SECTION 1 Manage Android with ZENworks 5

Exercise 1-1 Start the lab environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6

Exercise 1-2 Configure Organization LDAP Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .7

Exercise 1-3 Create an Organizational Administrator . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8

Exercise 1-4 Configure ActiveSync Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9

Exercise 1-5 Create Users in ZENworks Mobile Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10

Exercise 1-6 Enroll Android Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11

Exercise 1-7 Create Mobile Applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

Exercise 1-8 Create Shared Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17

Exercise 1-9 Create Policy Suites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18

Exercise 1-10 Configure Compliance Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24

Exercise 1-11 Enroll Touchdown . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27

Exercise 1-12 Execute Reports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

Summary 30

Novell, Inc. Copyright 2012-ATT LIVE-1-HARDCOPY PERMITTED. NO OTHER PRINTING, COPYING, OR DISTRIBUTION ALLOWED.

ZEN10-Managing iOS and Android Devices with ZENworks / Lab

Novel


Version 14


Manage Android with ZENworks

Novell, In

S E C T I O N 1 Manage Android with ZENworks

ZENworks Mobile Management gives you the ability to manage a variety of mobile platforms, including Apple’s iOS based devices and Google Android based devices. The purpose of this workbook is to walk you through setting up a basic ZENworks MDM system. For convenience and time purposes, the installation of the productihas been completed and each student will be working as an Organizational Administrator in a larger ZENworks Mobile Management system. Additionally the basic information such as Serial Number, Default Policy, and SMTP settings have been configured. You will review this configuration in,

This section focuses on managing Android devices. Most of the same capabilities discussed in this workbook also apply to iOS devices. Additional information about iOS specific information can be found in the appendix.

The exercises in this workbook are:

1. “Start the lab environment” on page 6

2. “Configure Organization LDAP Server” on page 7

3. “Create an Organizational Administrator” on page 8

4. “Configure ActiveSync Servers” on page 9

5. “Create Users in ZENworks Mobile Management” on page 10

6. “Enroll Android Devices” on page 11

7. “Create Mobile Applications” on page 15

8. “Create Shared Files” on page 17

9. “Create Policy Suites” on page 18

10. “Configure Compliance Management” on page 24

11. “Enroll Touchdown” on page 27

12. “Execute Reports” on page 29


5Version 1

c. Copyright 2012-ATT LIVE-1-HARDCOPY PERMITTED. NO OTHER PRINTING, COPYING, OR DISTRIBUTION ALLOWED.


Novel

Exercise 1-1 Start the lab environment

Before beginning hands-on exercises you need to start-up the lab environment. In this scenario, the instructor is the system administrator and the owner of the key corporate resources, including the GroupWise email server, DataSync Mobility Pack for GroupWise ActiveSync server, eDirectory LDAP server, and the ZENworks Mobile Management server. You will be interacting with the ZENworks Mobile Management server via the web browser on your management workstation and from Android devices.

1. (Optional) If not already running, start the ZMM Management Machine virtual machine.

2. Load Android Emulators.

a. Login as Administrator with a password of N0v3ll123

b. On the desktop, double-click AVD Manager.

c. In the AVD Manager, highlight the ICS line, then click Start...

d. Select Launch from Snapshot.

e. Unselect Save to snapshot, then click Launch.

f. Wait for the ICS emulator to appear at the Android home page.

g. In the AVD Manager, highlight the Gingerbread line, then click Start...

h. Select Launch from Snapshot

i. Unselect Save to snapshot, then click Launch.

j. Wait for the Gingerbread emulator to appear at the Android home page.

k. In the AVD Manager, highlight the Froyo line, then click Start...

l. Select Launch from Snapshot

m. Unselect Save to snapshot, then click Launch.

n. Wait for the Froyo emulator to appear at the Android home page.

3. Restart the adb server so that it is aware of all of the emulators.

a. Double click Command Prompt icon on the desktop.

b. At the command prompt enter, adb kill-server

This stops the Android SDK server component used to interact from the command line with the emulators.

c. At the command prompt enter, adb devices

This restarts the Android SDK server copmonent and should display a list of the three running android devices.

d. Close the command prompt window.

You are now ready to begin managing the Android devices you have with the ZENworks Mobile Management product.

(End of Exercise)


Version 16



Novell, In

Exercise 1-2 Configure Organization LDAP Server

Typically when installing a new server or setting up a new organization there is a New Organization wizard that is executed that allows you to specify the key information required for the new organization. When your organization was setup by the administrator only the minimum information was provided. As such, in this section you will configure an LDAP server that the organization is going to use for authenticating administrators and quickly adding end users.

1. Double-click the Mozilla Firefox icon on the desktop of your ZMM Management Machine. This will take you to the ZENworks Mobile Magenemnt login dialog.

2. In the Username field, type admin@digitalairlines

3. In the Password field, type N0v3ll123

4. From the dropdown list, select your Org# option.

5. Click OK.

6. Click the Organization Management icon at the top of the screen.

7. Under User Account Settings click the Administrative LDAP Servers icon.

8. Click the Add LDAP Server button.

9. In the LDAP Server Name field, enter Organization # LDAP Server

10. In the LDAP Server Address field, enter da1l.digitalairlines.com

11. In the LDAP Server Port field, enter 389

12. In the LDAP E-mail Attribute field, enter mail

13. In the LDAP User Name field, enter, cn=zmm,ou=zmm,o=da

14. In the the LDAP Password and Confirm Password fields, enter N0v3ll123 twice, then click OK.

15. In the LDAP Base DN field, enter ou=org1,ou=zmm,o=da

16. In the LDAP Object Class field, enter inetOrgPerson

17. Click Finish to save the LDAP server definition.

You now have an LDAP server you can use for defining Administrators and End Users.

(End of Exercise)


7Version 1



Novel

Exercise 1-3 Create an Organizational Administrator

In this section you will create an administrator that references the LDAP server you created in the previous exercise and make the administrator of your organization.

1. In the ZMM Console., click the System Management icon at the top of the icon.

2. Under System Management on the left, select Organization Administrators.

3. Click Add Administrator.

4. From the LDAP Server drop down, select Organization # LDAP Server

5. In the LDAP Administrator Login field, enter cn=org#admin,ou=org#,ou=zmm,o=da

6. In the Display Name field, enter Organizational # Administrator

7. In the E-mail Address field, enter org#[email protected]

8. In the Role dropdown, select Full Admin

9. In the Default View dropdown, select Activity Monitor

10. Click Finish

11. At the top of the screen, click the Logout

12. At the Logout confirmation screen, click Yes.

13. At the login screen, in the Username field, enter cn=org#admin,ou=org#,ou=zmm,o=da

14. In the Password field, enter N0v3ll123

15. Click the System Management icon at the top of the screen.

Notice that the System Administration folder under the System Management pane is gone now that you are logged in as an Organization Administrator instead of a System Administrator.

You now have an organizational administrator that you will use for the rest of the exercises as you manage your organization.

(End of Exercise)


Version 18



Novell, In

Exercise 1-4 Configure ActiveSync Servers

ZENworks Mobile Managemetn can act as an ActiveSync proxy allowing you to further secure your ActiveSync servers behind the corporate firewall. Additionally, when acting as an ActiveSync proxy ZENworks Mobile Management replaces the ActiveSync policy being sent by the email server with the assigned ActiveSync policies configured in the ZENworks Mobile Management system. This means that you can effectively manage any ActiveSync compatible device as well as those running the ZENworks Mobile Management application. In this section you will configure an ActiveSync server that you want ZENworks to proxy.

NOTE: Because we have a single ActiveSync server in our test lab, you will not configure hands-off enrollment. If hands off enrollment is enabled then users can authenticate natively via ActiveSync and a user is automatically created in the system.

1. In the ZMM console, click the Organization Management icon.

2. Under User Account Settings, click ActiveSync Servers.

3. Click Add ActiveSync Server.

4. In the ActiveSync Server Name field, enter Organization # ActiveSync Server

5. In the ActiveSync Server Address field, enter da2l.digitalairlines.com

This server is running the Novell Data Synchronizer Mobility Pack which acts as an ActiveSync server to the GroupWise server running on da1l.digitalairlines.com

6. In the ActiveSync Server Port field, enter 443.

7. Select Use SSL.

8. Click Finish.

ZENworks Mobile Management is now configured to proxy e-mail from the specified ActiveSync server. Additionally, end users can utilize their ActiveSync password to authenticate to the system.

(End of Exercise)


9Version 1



Novel

Exercise 1-5 Create Users in ZENworks Mobile Management

Because we have not enabled hands-off enrollment it is necessary to pre-create the users that should have access to the MDM system. In this exercise you will create those users. Since the same LDAP source is being used by both ZENworks Mobile Management and the ActiveSync servers we will use the LDAP server to quickly add a number of users.

1. In the ZMM Console, click the Smart Devices and Users icon.

2. Click Add User.

3. At the Add New User Wizard page, click LDAP.

4. In the LDAP Server drop down, select Organization # LDAP Server

5. In the Domain field, enter da2l.digitalairlines.com

6. In the ActiveSync Server dropdown, select Organization # ActiveSync Server

7. In the Policy Suite dropdown, select Default Org # Policy

8. In the Device Connection Schedule dropdown, select Default Org # Schedule

9. Make sure that the Trim e-email address before ‘@’ is selected.

10. Click Next.

11. At the Select Users to Add dialog, highlight the org#user1 and org#user2 users.

12. Click Add Users.

In the Device/User list you should now see entries for the two users that you added. You are now ready to have devices enroll with the system.

(End of Exercise)


Version 110



Novell, In

Exercise 1-6 Enroll Android Devices

In this exercise you will enroll the 3 Android devices you have. On two of these devices you will install the ZENworks Mobile Management application for full management capability. On the third device you will use the native ActiveSync client included with the Ice Cream Sandwich version of Android.

NOTE: Typically you would install the ZENworks Mobile Management application via the Android or iOS app store. However, because we are using Android emulators here we need to use the APK directly. If you need iOS jailbreak detection and behind the scenes location detection on iOS you will also need to obtain an enterprise version of the ZENworks Mobile Management application from Novell directly as these capabilities are not part of the application store version due to Apple restrictions.

1. Install the ZENworks Mobile Management application on the Froyo emulator.

a. Minimize Mozilla Firefox.

b. On the Froyo emulator notice the 4 digit number (555x) in the upper left hand corner of the window’s title bar.

c. Double-click the Command Prompt icon on the desktop.

d. At the command prompt, enter z:

e. At the command prompt, enter cd \zmm\apps

f. At the command prompt, enter adb -s emulator-555x install ZENworksMM.apk

This installs the ZENworks Mobile Management agent to the Gingerbread emulator.

g. Swipe to unlock the Froyo emulator.

h. Click the Apps menu button in the Froyo emulator

i. Click the ZENworks icon

j. At the enrollment page, in the Username field enter org#user1

k. In the Password field, enter N0v3ll123

l. In the ActiveSync Domain field, enter da2l.digitalairlines.com

m. In the Server Address field, enter zmm.digitalairlines.com

n. Check the Accept all SSL certificates checkbox.

This is required because the server is using a certificate minted by an organizational CA, instead of a well known CA such as Verisign.

o. Click Enroll.

This causes the device to attempt to authenticate to the ActiveSync server through the ZENworks Mobile Management server. Assuming the authentication succeeds you will see an Enrollment Success message.

p. At the Activate device administrator screen, click Activate


11Version 1



Novel

Because the default policy requires a passcode you will then be prompted to set a passcode

q. At the Screen unlock security page, click PIN

r. At the Choose your PIN screen, enter 1111; then click Continue.

s. At the Confirm your PIN screen, enter 1111; then click OK.

t. At the Success pop-up, click OK.

u. Minimize the Froyo emulator.

2. Install the ZENworks Mobile Management application on the Ice Cream Sandwich emulator.

a. On the ICS emulator notice the 4 digit number (555x) in the upper left hand corner of the window’s title bar.

b. Switch back to the Command Prompt window.

c. At the command prompt, enter adb -s emulator-555x install ZENworksMM.apk

This installs the ZENworks Mobile Management agent to the Gingerbread emulator.

d. Close the command prompt window.

e. Swipe to unlock the device.

f. Click OK.

g. Click the Apps menu button in the ICS emulator

h. Click OK.

i. Click the ZENworks icon

j. At the enrollment page, in the Username field enter org#user1

k. In the Password field, enter N0v3ll123

l. In the ActiveSync Domain field, enter da2l.digitalairlines.com

m. In the Server Address field, enter zmm.digitalairlines.com

n. In the Device Ownership field, select Company

o. Check the Accept all SSL certificates checkbox.


p. Click Enroll.


q. At the Activate device administrator screen, click Activate

Because the default policy requires a passcode you will then be prompted to set a passcode


Version 112



Novell, In

r. At the Screen unlock security page, click PIN

s. At the Choose your PIN screen, enter 1111; then click Continue.

t. At the Confirm your PIN screen, enter 1111; then click OK.

u. At the Success pop-up, click OK.

v. Minimize the ICS emulator.

3. Add an email account on the Gingerbread emulator.

a. Switch to the Gingerbread emulator

b. Click the Apps menu button in the Gingerbread emulator

c. Click the Email icon

d. In the Email address field, enter org#user2

e. In the Password field, enter N0v3ll123

f. Click Manual Setup

g. At the Account Type dialog, click Exchange

h. In the Domain\Username field, enter da2l.digitalairlines.com\org#user2

i. In the server field, enter zmm.digitalairlines.com

j. Check the Accept all SSL certificates checkbox

k. Click Next.

l. At the Remote security administration dialog, click OK.

m. At the Account options page, click Next

n. At the set up email page, enter Digitalairlines; then click Done.

o. If the Activate device administration prompt doesn’t appear, at the top of the emulator pull down the Notification bar, then click the Update Security Settings option.

p. At the Activate device administrator prompt, click Activate.

q. At the Screen unlock security screen, click PIN.

r. At the Choose your PIN screen, enter 1111; then click Continue.

s. At the Confirm your PIN screen, enter 1111; then click OK.

4. View the devices in the management console.

a. Maximize Mozilla Firefox

b. In the ZMM Console, click the Smart Devices and Users icon at the top of the page.

c. You should now see three devices listed. Notice that the device without the agent lists a last Activesync time but no ZENworks Lasy Sync time. Also notice that because the Android devices aren’t running TouchDown there is no ActiveSync automatically configured.


13Version 1



Novel

You have now successfully enrolled the devices. Currently the default policy suites have no restrictions so the user will notice very little difference. Through the next several exercises we will use the ZENworks Mobile Management product to restrict and secure the device and provide additional services.

(End of Exercise)


Version 114



Novell, In

Exercise 1-7 Create Mobile Applications

ZENworks Mobile Management gives you an easy way to make applications available to your mobile devices. The current capabilities allow you to deploy applications that are hosted locally on the ZENworks server, applications that exist in the device application store, or iOS enterprise applications from any web server that has been properly configured.

1. Create a Mobile Application to make the TouchDown ActiveSync client for Android available on the Gingerbread device.

a. In the ZMM Console, click the Organization Management icon at the top of the screen.

b. Under the Organization Control section, click the Mobile Apps icon.

c. Click Add Mobile App.

d. In the Device Platform dropdown, select Android.

e. In the App Name field, enter TouchDown.

f. Click the App File browse button.

g. Browse to z:\zmm\apps\nitroid-droid.apk; then click Open.

h. Click the Icon File browse button.

i. Browse to z:\zmm\apps\icons\touchdown.png; then click Open.

j. In the Version field, enter 1.0

k. In the Description field, enter TouchDown email client.

l. Click Add Android App.

2. Create a Mobile Application to make the Novell Vibe application available on any device with the ZENworks agent.

a. Click Add Mobile App.

b. In the Device Platform dropdown, select Android.

c. In the App Name field, enter Novell Vibe.

d. Click the App File browse button.

e. Browse to z:\zmm\apps\Vibe.apk; then click Open.

f. Click the Icon File browse button.

g. Browse to z:\zmm\apps\icons\vibe.png; then click Open.

h. In the Version field, enter 1.0

i. In the Description field, enter Novell collaboration client.

j. Click Add Android App.

3. Create a Mobile Application to make the Novell Messenger application available to any device with the ZENworks agent.




15Version 1



Novel

c. In the App Name field, enter Novell Messenger.


e. Browse to z:\zmm\apps\MessengerMain.apk; then click Open.


g. Browse to z:\zmm\apps\icons\Messenger.png; then click Open.


i. In the Description field, enter Novell real time chat client


4. Create a Mobile Application to make the Adobe Reader application available to any device with the ZENworks agent.



c. In the App Name field, enter Adobe Reader.


e. Browse to z:\zmm\apps\AdobeReader.apk; then click Open.


g. Browse to z:\zmm\apps\icons\eeader.png; then click Open.


i. In the Description field, enter PDF Viewer.


You now have applications that can be deployed to the device. In order to provide access to these applications you will create a policy suite in “Create Policy Suites” on page 18.

(End of Exercise)


Version 116



Novell, In

Exercise 1-8 Create Shared Files

ZENworks Mobile Management also provides a simple file store for making files available to mobile devices via the ZENworks Mobile Management agent. In this exercise you will create a folder and share a file.

1. In the ZMM Console, click the Organization Management icon.

2. Under Organization Control, the click File Share icon.

3. Click Add Folder.

4. In the New Folder Name field, enter Corporate Policies.

5. Click Create Folder.

6. In the Organization Managemet pane, expand File Share Folders.

7. Highlight Corporate Policies.

8. Click Add Files to Folder.

9. Browse to z:\zmm\files\Acceptable_Use_Policy.pdf; then click Save.

10. Click Close.

11. Highlight the Corporate Policies folder and verify that the file is there.

12. In the Folder Description field enter, Corporate policy documents.

13. Click Save Description and notes.

You now have the file created, to make this file available to mobile devices you need to assign permissions in a policy suite. This is a part of “Create Policy Suites” on page 18.

(End of Exercise)


17Version 1



Novel

Exercise 1-9 Create Policy Suites

To control the device and to assign permissions to mobile applications and shared files you need to create one or more policy suites. In this exercise you will create a policy suite to configure lockdown settings for corporate devices, make some mobile applications available to all devices and some to only corporate devices, and make shared files available.

1. In the ZMM Console, click the Organization Management icon at the top of the page.

2. Under the User Account Settings section, click the Policy Suites icon.

3. Click Create New Policy Suite.

4. At the wizard page, select Create Policy Suite Using Sliders.

5. Set the Corporate Devices slider to High Security Level by moving the slider to the right.

6. Set the Individual Devices slider to Moderate Security Level by moving the slider to the left.

7. In the Choose a name... field, enter Production Policy Suite.

8. Click Finish.

9. Under the Organization Management pane, expand Production Policy Suite.

10. Configure Audit Tracking.

a. Highlight Audit Tracking.

b. In the Individual column set Record phone log to No.

c. In the Individual column set Record text message log to No.

d. Review the other settings available.

e. Click Save Changes.

11. Configure Device Control settings.

a. In the Corporate Column, set Allow camera to No.

b. Expand ActiveSync Synchronization.

c. In the Corporate Column set Require manual sync when roaming to Yes.



12. Configure access to shared files.

a. Highlight File Share Permssions.

b. In the Corporate column, set Corporate Policies to Yes.

c. Click Save Changes.

13. Review available iOS Devices settings. These settings do not apply to Android and as such we will not configure them in this exercise.


Version 118



Novell, In

14. Configure access to Mobile Applications.

a. Highlight Mobile Apps Permissions.

b. Expand Android.

c. In the Corporate column, set all of the applications to Yes.

d. In the Individual column, set TouchDown and Adobe Reader to Yes.


15. Configure Security Settings

a. Highlight Security Settings.

b. In the Corporate column change Number of passwords stored to 3

c. In the Individual column set Require device password history to No.


e. Click Save Chages.

16. Configure TouchDown settings.

a. Highlight TouchDown settings.

b. In both columns set Allow any server certificate to Yes.

c. Expand Signature.

d. Set the Corporate signature to Digitalairlines - The best way to fly

e. Review the other settings available.

f. Click Save Changes.

17. Apply the policy to your managed devices.

a. Highlight Production Policy Suite.

b. Click Assign Policy Suite to Users.

c. Select Assign Based on Critieria.

d. In the Policy Suite dropdown, select Default Org # Policy.

e. In the Assign this Policy Suite dropdown, select Production Policy Suite.

f. Click OK.

g. Close the Assign Policy Suite to Users dialog.

18. Test the policy on the ICS emulator.

The ICS emulator is configured as a corporate device with corporate liability so the Corporate policy settings should apply.

a. Make the ICS emulator the active Window, it should be at the ZENworks Mobile Management agent screen.

b. Click the Menu button in the emulator.

c. Click Refresh.

d. At the Confirm your PIN page, enter 1111 and click Next.

e. Click Password.


19Version 1



Novel

Because a new policy is now inplace that requires a 8 character alphanumeric password you must set the new password.

f. For the password enter N0v3ll123, then click Continue.

g. For the password re-enter N0v3ll123, then click OK.

h. Verify the Device Control policy.

i. Click the Home button.

ii. Click Camera and verify that it fails to run due to security restrictions.

iii. Click OK.

i. Verify you can install Mobile Apps.

i. Go to the Apps Menu

ii. Launch the ZENworks Mobile Management application.

iii. Click the Menu button.

iv. Click Mobile Apps.

v. Click Novell Vibe.

vi. At the Vibe install page, click Install.

vii. Click Open to verify the application installed.

viii. Accept the license agreement.

ix. Click the Home button.

x. Go the the Apps Menu.

xi. Launch the ZENworks Mobile Management application.

xii. Click Novell Messenger

xiii. At the Messenger page, click Install.

xiv. Click Open to verify the application installed.

xv. Click the Home button.

xvi. Go the the Apps Menu.

xvii.Launch the ZENworks Mobile Management application.

xviii.Click Adobe Reader

xix. At the Adobe Reader page, click Install.

xx. Click Open to verify the application installed.

j. Verify you can open shared files.


ii. Go to the Apps Menu

iii. Launch the ZENworks Mobile Management application.

iv. Click the back button.

v. Click the menu button.

vi. Click File Share.


Version 120



Novell, In

vii. Click File Share Folders.

viii. Click on Corporate Policies.

ix. Click Acceptable_Use_Policy.pdf.

x. Click Download/ and verify that it downloads the file.

xi. At the Do you want to open... dialog, click Yes. This should open the PDF in the Adobe Reader application.

k. Verify that audit logged is working.


ii. Click the Phone icon.

iii. Dial the four digit number of one of the other emulators and press the phone button to dial.

iv. Answer the call on the other device.

v. End the call.

vi. On the ICS emulator, click the Home button.

vii. Click the Messaging icon.

viii. Click the New Message Icon.

ix. In the To field, enter the four digit number of one of the other emulators.

x. Click the paper airplane to send the message.

xi. On the other emulator pull down the notification bar.

xii. Click on the text message notification.

xiii. In the type to compose field enter, test response and click Send.

xiv. On the ICS emulator click the home button.

xv. Go to the Apps Menu

xvi. Launch the ZENworks Mobile Management app.

xvii.Click the back button.

xviii.Click the Menu button

xix. Click Refresh.

This will cause the phone and message logs to be sent to the server. Note the Last Sync Time.

xx. In the ZMM Console click the Smart Devices and Users icon.

xxi. Find the ICS device and double-click it.

xxii.Select Audit Data then select the date you noted on the ICS device and verify that you see the items that were audited.

xxiii.Select Search Phone Log.

xxiv.Set the date and click search to see the details of the phone log.

xxv.Select Search Text Message Log.

xxvi.Set the date and click Search to see the message log.

xxvii.Double-click one of the messages to see its content.


21Version 1



Novel

19. Test the policy on the Froyo emulator.

The Froyo emulator is configured as an individual device with individual liability so the Corporate policy settings should apply.

a. Make the Froyo emulator the active Window, it should be at the ZENworks Mobile Management agent screen.

b. Click the Menu button in the emulator.

c. Click Refresh.

d. At the Confirm your PIN page, enter 1111 and click Next.

e. Click Password.

Because a new policy is now inplace that requires a 6 character alphanumeric password you must set the new password.

f. For the password enter N0v3ll, then click Continue.

g. For the password re-enter N0v3ll, then click OK.

h. Verify the Device Control policy.


ii. Click the Apps menu icon.

iii. Click Camera and verify that it runs.

i. Verify you can install Mobile Apps.

i. Go to the Apps Menu

ii. Click the ZENworks Mobile Management app.

iii. Click the Menu button.

iv. Click More.

v. Click Mobile Apps.

vi. Verify that you can only see TouchDown and Adobe Reader.

j. Verify you can open shared files.

i. Click the back button.

ii. Click the menu button.

iii. Click More.

iv. Click File Share.

v. Verify that you don’t see any files or folders.

k. Verify that audit logging is not enabled.


ii. Click the phone icon.

iii. Dial the four digit number of one of the other emulators and press the phone button to dial.

iv. Answer the call on the other device.

v. End the call.

vi. On the Froyo emulator, click the Home button.


Version 122



Novell, In

vii. Click the Messaging icon.

viii. Click the New Message Icon.

ix. In the To field, enter the four digit number of one of the other emulators.

x. Click the send button to send the message.

xi. On the other emulator pull down the notification bar.

xii. Click on the text message notification.

xiii. In the type to compose field enter, test response and click Send.

xiv. On the Froyo emulator click the home button.

xv. Go to the Apps Menu

xvi. Launch the ZENworks Mobile Management app.

xvii.Click the back button.

xviii.Click the Menu button

xix. Click Refresh.

This will cause the phone and message logs to be sent to the server. Note the successful refresh time.

xx. In the ZMM Console, click the Smart Devices and Users icon.

xxi. Find the Froyo device and double-click it.

xxii.Select Audit Data then enter the date you noted and verify that no items were audited.

20. Verify the effect of the new policy on the ActiveSync only Gingerbread device.

a. Make the Gingerbread emulator the active window.

b. Click the Home button.

c. Go to the Apps Menu.

d. Click Email.

e. Click the Menu button.

f. Click Refresh.

g. Pull down the Notification bar.

h. Click Update Security Settings.

i. At the Confirm your PIN page enter 1111; then click Continue.

j. For the password enter N0v3ll123, then click Continue.

k. For the password re-enter N0v3ll123, then click OK.

You now have a controlled environment where users can only access those capabilities you want.

(End of Exercise)


23Version 1



Novel

Exercise 1-10 Configure Compliance Management

ZENworks Mobile Management also gives you the ability to set rules for devices to receive access to corporate resources and to notify administrators when devices become restricted. In this exercise you will configure Compliance Management.

1. In the ZMM Console, click Organization Management.

2. Under Organization Control, click Compliance Manager.

3. Set Access Restrictions.

a. In the How To Apply Restrictions box, select Apply per Restriction Option.

b. Expand Restriction Options.

c. Set Restrict if roaming detected to Yes and expand the restriction options for the setting.

d. Select File Share and Mobile Apps.

This prevents the device from installing Files and Mobile Apps when roaming as it may be costly.

e. Set Restrict TouchDown for Android to Yes and expand the restriction options for the setting.

f. Select Devices without TouchDown and those with TouchDown versions Outside Desired Range

g. Set both Max and Min allowed to Any.

h. Select ActiveSync Connections.

This restricts any Android device that is not running TouchDown from accessing email, calendar, etc via ActiveSync.

i. Expand Restriction Notifications.

j. Set Send e-mail to users when access is restricted to Yes.

k. Modify the subject and message as desired.

l. Click Save Changes.

4. Configure Device Platform Restrictions.

a. Expand Device Platform Restrictions

b. Highlight Android.

c. Set Restrict if NotifyMDM app is not enrolled to Yes.

d. Check the ActiveSync Connections checkbox.


5. Configure Alert Recipients.

a. Highlight Alert Recipients.

b. Click Add Alert Recipient.

c. In the Display Name field enter Org # Admin.


Version 124



Novell, In

d. In the E-mail address field enter org#[email protected]

e. Click Finish.

f. Click Save Changes.

6. Configure Alert Settings.

a. Highlight Alert Settings.

b. Check the Enabled checkbox for Roaming detected, TouchDown for Android.

c. Check the Email checkbox for TouchDown for Android.

d. In the Available box, select the Org # Admin user; then click >>

e. Click Save.

f. Expand Non-Access Restriction Based Alerts.

g. Check the enabled and email checkboxes for NotifyMDM app is not enrolled.

h. In the Available box, select the Org # Admin user; then click >>

i. Click Save.

j. Click Save Changes.

7. Refresh the ZENworks Mobile Management agent on the ICS and Froyo emulators.

8. Sync email on the Gingerbread emulator, notice that the connection fails because it has been restricted.

9. View the alerts in the console.

a. In the ZMM Console, click the Activity Monitor and Alerts icon at the top of the screen.

b. Click Get Most Recent data. After a few moments you should see new alerts indicating that all three devices have been restricted.

c. Click the Alerts link in the upper right corner of the console to see the messages. The Froyo and ICS devices should be restricted because they don’t have Touchdown installed and the Gingerbread device is restricted because it doesn’t have the ZENworks Mobile Management agent installed.

10. Verify alerts were sent to the administrator via email.

a. Launch the GroupWise client from the icon on the desktop.

b. In the username field, enter org#admin

c. In the password field, enter N0v3ll123

d. In the post office address field, enter 172.17.8.101

e. In the port field, enter 1677.

f. You should have emails indicating that devices were restricted.

g. Close GroupWise.


25Version 1



Novel

11. Verify restriction notification was sent to the end user via email.

a. Launch the GroupWise client from the icon on the desktop.

b. In the username field, enter org#[email protected]

c. In the password field, enter N0v3ll123

d. In the post office address field, enter 172.17.8.101

e. In the port field, enter 1677.

f. You should have emails indicating that devices were restricted.

g. Close GroupWise.

(End of Exercise)


Version 126



Novell, In

Exercise 1-11 Enroll Touchdown

Because you have configured Compliance Management to limit access to devices not running the TouchDown client, you will now want to install the TouchDown client on all of the Android devices.

1. Install the ZENworks Mobile Management agent on the Gingerbread device so that it is no longer restricted because it is not enrolled.

a. Open a command prompt.

b. At the command prompt, enter adb -s emulator-555# z:\zmm\apps\ZENworksMM.apk

c. On the Gingerbread emulator, click the home button.

d. Click the Apps menu button in the Gingerbread emulator

e. Click the ZENworks icon

f. At the enrollment page, in the Username field enter org#user2

g. In the Password field, enter N0v3ll123

h. In the ActiveSync Domain field, enter da2l.digitalairlines.com

i. In the Server Address field, enter zmm.digitalairlines.com

j. In the Device Ownership field, select Company.

k. Check the Accept all SSL certificates checkbox.


l. Click Enroll.


m. At the Activate Device Administrator page, click Activate.

n. At the Enrollment Successful pop-up, click .

2. Install the TouchDown software on each of the Emulators (repeat these steps for each)

a. Click the Menu button.

b. Click More (only required on Gingerbread and Froyo)

c. Click Mobile Apps.

d. Click TouchDown.

e. At the TouchDown install page, click Install.

f. Click Done.

g. Refresh the agent. After a few moments you will see the TouchDown Enrollment screen, click Yes.

h. At the License Agreement page, click .


27Version 1



Novel

i. At the Confirm pop-up, click I Accept.

j. At the set PIN page enter N0v3ll123 twice.

Your devices are now in compliance with your restriction settings and should resume synchronizing email, calendar, etc.

(End of Exercise)


Version 128



Novell, In

Exercise 1-12 Execute Reports

ZENworks Mobile Management provides a number of canned reports that allow you to quickly look at information about the devices in your environment. In this exercise you explore these built in reports.

1. In the ZMM Console, click the Activity Monitor and Alerts.

2. Click Open Graph Overlay.

3. Select any six graphs that interest you.

4. Click the User and Device Reporting icon at the top of the page.

5. View each of the reports.

(End of Exercise)


29Version 1



Novel

Summary

With ZENworks Mobile Management you can quickly and easily take control of the various mobile devices being used to access network resources in your environment. For more information about ZENworks Mobile Management please visit http://www.novell.com/zenworks


Version 130


Documents

ZEN10-Managing iOS and Android Devices with … · ZEN10-Managing iOS and Android Devices with ZENworks / Lab Copying all or part of this manual, or dist ributing such copies, is