F-Secure Elements Mobile Protection MDM deployment manual

F-Secure Elements Mobile Protection

MDMdeployment manual

Contents

Chapter 1: Introduction.................................................................................4

Chapter 2: Google Workspace MDM...............................................................62.1 Adding the Android app to Google Workspace MDM.......................................................................................7

2.1.1 Configuring the Android app..............................................................................................................7

Chapter 3: VMwareWorkspace ONEMDM......................................................83.1 Adding the iOS app to VMware Workspace ONE MDM.....................................................................................9

3.1.1 Configuring the iOS app......................................................................................................................9

3.2 Adding the Android app to VMware Workspace ONE MDM.............................................................................9

3.3 Viewing the managed applications....................................................................................................................9

3.4 Deploying Android Enterprise with VMware Workspace ONE........................................................................10

3.4.1 Setting up Android Enterprise in VMware Workspace ONE MDM...................................................10

3.4.2 Adding profiles in VMware Workspace ONE....................................................................................10

3.4.3 Adding the Android app...................................................................................................................10

Chapter 4: Microsoft Intune MDM................................................................124.1 Deploying the iOS app with Microsoft Intune MDM.........................................................................................13

4.1.1 Adding the iOS app to Microsoft Intune MDM..................................................................................13

4.1.2 Adding the iOS app configuration policies........................................................................................13

4.2 Deploying the Android app with Microsoft Intune MDM................................................................................14

4.2.1 Adding the Android app to Microsoft Intune MDM..........................................................................14

4.2.2 Adding the Android app configuration policies................................................................................15

Chapter 5: IBM MaaS360 MDM......................................................................175.1 Deploying the iOS app with IBM MaaS360 MDM..............................................................................................18

5.1.1 Adding the iOS app to IBMMaaS360 MDM........................................................................................18

5.1.2 Distributing the iOS app....................................................................................................................18

5.2 Deploying Android Enterprise with IBMMaaS360 MDM..................................................................................18

5.2.1 Configuring Android Enterprise........................................................................................................18

5.2.2 Adding the F-Secure Elements Mobile Protection app.....................................................................19

5.2.3 Configuring the app..........................................................................................................................19

5.2.4 Distributing the app..........................................................................................................................19

Chapter 6: MobileIron Cloud MDM...............................................................206.1 Deploying the iOS app with MobileIron Cloud MDM.......................................................................................21

6.1.1 Adding the F-Secure Elements Mobile Protection iOS app to MobileIron Cloud MDM....................21

6.1.2 Configuring iOS app management....................................................................................................21

ii | Contents | F-Secure Elements Mobile Protection

6.1.3 Additional configuration keys...........................................................................................................21

6.2 Deploying the Android app with MobileIron Cloud MDM...............................................................................21

6.2.1 Adding the F-Secure Elements Mobile Protection Android app to MobileIron Cloud MDM............21

6.2.2 Configuring Android app management...........................................................................................22

6.3 Android Enterprise deployment with MobileIron Cloud MDM.......................................................................22

6.3.1 Adding the F-Secure Elements Mobile Protection app.....................................................................22

Chapter 7: Miradore MDM...........................................................................247.1 Adding the iOS app to Miradore MDM.............................................................................................................25

7.1.1 Configuring the iOS app....................................................................................................................25

7.2 Adding the Android app to Miradore MDM.....................................................................................................25

F-Secure Elements Mobile Protection | Contents | iii

Chapter

1Introduction

F-SecureElementsMobile Protection is an advancedmobile security solution foriOS and Android mobile devices.

It is perfect for organizations that want to provide additional security for theirmobile devices on top of the basic security features that their existing MDMsolution already provides. The solution greatly enhances your security againstmalware, phishing, and data theft, among others.

The protection is based on the state-of-the-art Ultralight security technology,made possible by F-Secure Security Cloud. It is a threat analysis and responsesystem that provides real-time threat intelligence to the clients, allowing themto identify and respond to new threats as they emerge.

4 | Introduction | F-Secure Elements Mobile Protection

F-Secure Elements Mobile Protection | Introduction | 5

Chapter

2GoogleWorkspaceMDM

Instructionsonhowtodeploy theF-SecureElementsMobile ProtectionappwithGoogle Workspace MDM in Android and iOS devices.

Topics:

• Adding the Android app to GoogleWorkspace MDM

6 | GoogleWorkspaceMDM | F-Secure Elements Mobile Protection

2.1 Adding the Android app to GoogleWorkspaceMDM

InstructionsonhowtoaddF-SecureElementsMobileProtectionasanallowedapp toGoogleWorkspaceMDMinAndroiddevices.

To add the product to Google Workspace MDM:

1. Open the following link in your web browser: admin.google.com.

2. On the Dashboard, selectApps >Web andmobile apps.

3. On theWeb andmobile apps page, selectAdd App >Add private Android app.

4. On theManaged Android apps page, select Search Play Store and enter mobile protection elementsin the search box.

5. Select the app and then selectApprove > Select.

6. Under User access, select your preferred option and select Continue.

7. UnderAccess method, select your preferred options and select Finish.

The Android app is added to Google Workspace MDM.

2.1.1 Configuring the Android app

Instructions on how to configure the Android app.

1. On theAdmin Console page, underManaged configurations, selectAddmanaged configuration.

2. On the Managed configuration page, enter a name for the configuration and do the following:

a) In the Registration key field, enter the product subscription key

Note: You can find the subscription key in the F-Secure Elements Security Center under Endpoint ProtectionSubscriptions.

b) Enter your first and last name in the respective fields (optional).

c) In the Alias field (optional), enter an alternate name.

d) In the Email address field (optional), enter your email address.

e) In the Environment field (optional), enter 2.

3. Select Save.

F-Secure Elements Mobile Protection | GoogleWorkspaceMDM | 7

admin.google.com

Chapter

3VMwareWorkspace ONEMDM

Instructionsonhowtodeploy theF-SecureElementsMobile ProtectionappwithVMware Workspace ONE (formerly known as Airwatch) MDM.

Topics:

• Adding the iOS app to VMwareWorkspace ONEMDM Note: These instructions do not include information on how to create and

configure users and devices.• Adding the Android app to VMware

Workspace ONEMDM

• Viewing the managed applications

• Deploying Android Enterprise withVMware Workspace ONE

8 | VMwareWorkspace ONEMDM | F-Secure Elements Mobile Protection

3.1 Adding the iOS app to VMwareWorkspace ONEMDM

Instructions on how to add the F-Secure Elements Mobile Protection iOS app to VMware Workspace ONEMDM.

1. On the VMware Workspace ONE administration portal, go toApps and Books and underApplications, select Listview.

2. Select the Public tab, and thenAdd application.

3. On the Add Application view, do the following:

a) From the Platform drop-downmenu, selectApple iOS.

b) Enter the application name, for example, Freedome.

c) SelectNext.

The Search page opens.

4. EnterF-Secure Mobile Protection in the searchbox, andwhen found, selectF-SecureMobileProtection.

3.1.1 Configuring the iOS app

Instructions on how to configure the F-Secure Elements Mobile Protection iOS app in VMware Workspace ONEMDM.

1. On the VMware Workspace ONE administration portal, select theAdd Applications page, and then select theAssignment tab.

2. Select Send Application Configuration.

3. Under Configuration Key, add values to the following configuration entries:

Note: The reseller provides you with the values.

• fate_registration_key - the license key

• first_name (optional) - a name that makes it easier to identify the device in the PSB portal

• last_name (optional) - a name that makes it easier to identify the device in the PSB portal

• email - user's email address

• alias (optional) - user's alternate name

For the optional keys, select Insert Lookup Value and select respective variables. The fields are automatically filledwhen the application is deployed to user devices.

4. Select Save & Publish to add the app to List View.

3.2 Adding the Android app to VMwareWorkspace ONEMDM

Instructions on how to add the F-Secure Elements Mobile Protection Android app to VMware Workspace ONEMDM.

1. On the VMware Workspace ONE administration portal, go toApps and Books and selectNative.

2. Next, in the Public tab, selectAdd application.

3. In theAdd Application page, do the following:

a) From the Platform drop-downmenu, selectAndroid.

b) In the Source field, select Search App store.

c) In theName field, enter mobile protection elements.d) SelectNext.

4. In theApps view, select F-Secure Elements Mobile Protection.

5. In the F-Secure Elements Mobile Protection view, selectApprove > Select.

6. In the Edit Application view, select the Terms of Use tab.

7. From the SDK drop-downmenu, selectMP strings@ F-Secure.

8. Select Save and assign.

3.3 Viewing the managed applications

Instructions on how to viewmanaged applications in VMware Workspace ONEMDM.

F-Secure Elements Mobile Protection | VMwareWorkspace ONEMDM | 9

1. In the VMwareWorkspaceONE console window, selectApps&Books and then under Applications, select List View.The List View page opens

2. Select the Public tab.

The F-Secure ElementsMobile Protection app appears in theApps list on theVMwareWorkspaceONEadministrationportal.

3.4 Deploying Android Enterprise with VMwareWorkspace ONE

This chapter contains instructionsonhowtodeploy theF-SecureElementsMobile Protectionapp in theAndroidEnterprisecontext with VMware Workspace ONE.

3.4.1 Setting up Android Enterprise in VMwareWorkspace ONEMDM

Instructions on how to set up the F-Secure Elements Mobile Protection Android app in the Android Enterprise context.

Todeploy the app in theAndroidEnterprise context, the companymust haveGoogleAdministrator account. All theusersmust have accounts there, either predefined or generated during the enrollment.

The domain administrator has to generate an EMM token and a certificate, and bind VMwareWorkspaceONE as an EMMprovider.

To set up Android Enterprise:

1. Log into the VMware Workspace ONE administration portal.

2. Go to Groups and Settings and selectAll Settings.

3. In the Settings view, under Devices and Users, selectAndroid.

4. UnderAndroid, selectAndroid EMMRegistration.

5. Select the account icon at the top right corner and selectManage your Google Account.

6. Log in with your email and password.

7. On the Bring Android toWork page, select Get started.TheAndroid EMMRegistration page opens.

8. When the service account is set up, accept the settings in theEnrollment Settings and Enrollment Restrictionstabs, and select Save.The settings are saved.

3.4.2 Adding profiles in VMwareWorkspace ONE

Instructions on how to add profiles.

1. On the VMware Workspace ONE administration portal, go toApps & Books >All Apps & Books SettingsThe Settings page opens.

2. On the navigation pane, select Settings and Policies > Profiles.The Profiles view opens.

3. SelectAdd Profile > SDK Profile >AndroidTheAdd a NewAndroid Profile page opens.

4. Select General, enter a name and description for the new profile, and select Save.

3.4.3 Adding the Android app

Instructions on how to add the F-Secure Elements Mobile Protection Android app in the Android Enterprise context toVMware Workspace ONEMDM.

1. On the VMware Workspace ONE administration portal, go toApps & Books >Applications >Native.The List view opens

2. Select the Public tab, and thenAdd application.

3. On theAdd Application view, do the following:

a) From the Platform drop-downmenu, selectAndroid.

b) Enter the application name: mobile protection elements.

10 | VMwareWorkspace ONEMDM | F-Secure Elements Mobile Protection

c) SelectNext.TheApps page opens.

4. Select F-Secure Elements Mobile Protection.

5. In the F-Secure Elements Mobile Protection view, selectApprove > Select.The Edit application view opens.

6. Select the SDK tab, and from theApplication Profile drop-downmenu, selectMP strings @ F-Secure.

7. Select Save and assign.The F-Secure Elements Mobile Protection - Assignment page opens.

8. Select Distribution and do the following:

a) In the Name field, enter a name for the distribution, for example, alldevices.b) In the Assignment groups, select your preferred device distribution group.

9. Next, selectApplication Configuration and do the following:

a) In the Registration key field, enter the product subscription key.

Note: You can find the Mobile Protection subscription key in the F-Secure Elements Security Center underEndpoint Protection > Subscriptions.

b) In the First name (optional) field, enter {FirstName}

c) In the Last name (optional) field, enter {LastName}

d) In the Alias (optional) field, enter {EnrollmentUser}

e) In the Email (optional) field, enter {EmailAddress}

f) Select Create.

The Assignments tab opens.

10. Select Save.The Preview Assigned Devices page opens.

11. Select Publish.

Configuring the Android app

Instructionsonhowtoconfigure theF-SecureElementsMobile ProtectionAndroidapp inVMwareWorkspaceONEMDMin the Android Enterprise context.

To configure the Android app:

1. On the VMware Workspace ONE administration portal, select the Edit Application page.

2. Select theAssignment tab and define the assignment group.

3. Select Send Application Configuration.

4. Under Configuration Key, add values to the following configuration entries:

Note: The reseller provides you with the values.


• first_name (optional) - aname thatmakes it easier to identify theuser in theF-SecureElementsEndpoint Protectionportal

• last_name (optional) - aname thatmakes it easier to identify theuser in the F-SecureElements Endpoint Protectionportal

For the optional keys, select Insert Lookup Value and select respective variables. The fields are automatically filledwhen the application is deployed to user devices.

5. Fill the rest of the app settings under Details and Assignment, and select Save and Publish to add the app to ListView.

F-Secure Elements Mobile Protection | VMwareWorkspace ONEMDM | 11

Chapter

4Microsoft IntuneMDM

Instructionsonhowtodeploy theF-SecureElementsMobile ProtectionappwithMicrosoft Intune MDM.

Topics:

• Deploying the iOSappwithMicrosoftIntune MDM

• Deploying the Android app withMicrosoft Intune MDM

12 | Microsoft IntuneMDM | F-Secure Elements Mobile Protection

4.1 Deploying the iOS app withMicrosoft IntuneMDM

Instructions on how to deploy the F-Secure Elements Mobile Protection iOS app with Microsoft Intune MDM.

4.1.1 Adding the iOS app toMicrosoft IntuneMDM

Instructions on how to add F-Secure Elements Mobile Protection iOS app to Microsoft Intune MDM.

1. Log into your Microsoft Intune portal.

2. SelectApps > iOS/iPadOS >Add.The Select app type pane opens.

3. From theApp type drop-downmenu, select iOS store app, and then select Select.

4. In theAdd App view, select Search the App store.The Search the App Store pane opens.

5. In the Search field, enter F-Secure Mobile Protection.

6. Select F-Secure Elements Mobile Protection > Select.The Add App view opens.

7. In theApp information tab, selectYes to show F-SecureMobile Protection as a featured app in the Company Portal,and selectNext.

8. In the Assignments tab, under Required, selectAdd all users, and selectNext.

9. In the Review + create tab, select Create.

10. When you are done, on theAdd App blade, chooseOK.

The F-Secure Elements Mobile Protection app has been added to Microsoft Intune MDM.

Next, add the app configuration policies.

4.1.2 Adding the iOS app configuration policies

Instructions on how to add F-Secure Elements Mobile Protection app configuration policies for managed iOS devices.

To create an app configuration policy:

1. SelectApps.TheApps overview pane opens.

2. Under Policy, selectApp configuration policies.

3. SelectAdd >Managed devicesThe Create app configuration policy pane opens.

4. In the Basics tab, do the following:

a) In theName field, enter F-Secure Mobile Protection.

b) From the Platform drop-downmenu, select iOS/iPadOS.

c) Next to Targeted app, select Select app.The Associated app pane opens.

d) Select F-Secure Elements Mobile Protection, and selectOK >Next.

The Settings tab opens.

5. Do the following:

a) From the Configuration settings format drop-downmenu, select Use configuration designer.

b) Select the value types and enter the configuration values for the following configuration keys:

• fate_registration_key: value type:String; configuration value:Mobile Protection subscriptionkey


• env: value type: Integer; configuration value: 2• Alias: value type: String; configuration value:{{username}}• Email address: value type: String; configuration value: {{mail}}

F-Secure Elements Mobile Protection | Microsoft IntuneMDM | 13

c) SelectNext.TheAssignments tab opens.

d) Under Included groups, selectAdd all users and selectNext.The Review + create tab opens.

e) Select Create.

The app configuration policy was created and assigned.

You need to install the app on an iOS device.

Use the configuration designer

You can use the configuration designer for apps on devices that are enrolled or not enrolled in Intune.

Thedesigner lets you configure specific configuration keys and values. Youmust also specify the data type for each value.For each key and value in the configuration, set:

• Configuration key - The key that uniquely identifies the specific setting configuration.

• Value type - The data type of the configuration value. Types include Integer, Real, String, or Boolean.

• Configuration value - The value for the configuration.

The following key and value is mandatory for F-Secure Elements Mobile Protection license activation.

NotesValueTypeKey

Example. The actual value isprovided by the reseller.

ABCD-EFGH-IJKL-MNOPstringfate_registration_key

Enduser is not able to switchVPNoff from the F-Secure ElementsMobile Protection appnor disable individual protectionfeatures. Read more about the details and limitations with this feature from Keeping VPN switched on automatically.

The following optional keys help to identify devices on F-Secure Elements Endpoint Protection portal. Use MicrosoftIntune dynamic variables to get suitable values. We have found the following keys and values working with Intune.

NotesValueTypeKey

Optional{{email}}stringemail

Optional{{partialupn}}stringalias

4.2 Deploying the Android app withMicrosoft IntuneMDM

Instructions on how to deploy the F-Secure Elements Mobile Protection app with Microsoft Intune MDM.

4.2.1 Adding the Android app toMicrosoft IntuneMDM

Instructions on how to add the F-Secure Elements Mobile Protection Android app to Microsoft Intune MDM.

1. Log into your Microsoft Intune portal.

2. SelectApps >Android >Add.The Select app type pane opens.

3. From theApp type drop-downmenu, selectManaged Google Play app, and then select Select.

4. In theManaged Google Play view, in the Search field, enter F-Secure Elements.TheApps view opens.

5. Select F-Secure Elements Mobile Protection.

6. On the view that opens, selectApprove >Approve.

7. In theApproval settings tab, select Keep approved when app requests new permissions, and select Done.TheManaged Google Play view opens.

14 | Microsoft IntuneMDM | F-Secure Elements Mobile Protection

8. Select Sync at the top left corner.TheAndroid Apps view opens.

9. Select Refresh and then select F-Secure Elements Mobile Protection.The F-Secure Elements Mobile Protection view opens.

10. UnderManage, select Properties.The F-Secure Elements Mobile Protection Properties view opens.

11. Next toAssignments, select Edit.The Edit Application view opens.

12. In theAssignments tab, do the following:

a) Under Required, selectAdd all users.

b) Select Review + save.

c) In the Review + save tab, select Save.

The F-Secure Elements Mobile Protection app has been added to Microsoft Intune MDM.

Next, add the app configuration policies.

4.2.2 Adding the Android app configuration policies

Instructionsonhow to add the F-Secure ElementsMobile Protection configurationpolicies formanagedAndroiddevices.

1. SelectApps.TheApps overview pane opens.

2. Under Policy, selectApp configuration policies.

3. SelectAdd >Managed devicesThe Create app configuration policy pane opens.

4. In the Basics tab, do the following:

a) In theName field, enter F-Secure Mobile Protection.

b) From the Platform drop-downmenu, selectAndroid Enterprise.

c) From the Profile type drop-downmenu, select Personally-OwnedWork Profile Only.

d) Next to Targeted app, select Select app.The Associated app pane opens.

e) Select F-Secure Elements Mobile Protection, and selectOK >Next.

The Settings tab opens.

5. Do the following:

a) Under Configuration Settings, from the Configuration settings format drop-downmenu, select Useconfiguration designer.

b) Select +Add.

c) On the pane that opens at the right, select the following:

• Registration key

• Alias (optional)

• Email address (optional)

• Environment (optional)

d) SelectOK.

e) Select the value types and enter the configuration values for the following configuration keys:

• Environment: value type: String; configuration value: 2• Email address: value type: String; configuration value: {{mail}}• Alias: value type: String; configuration value:{{username}}• Registration key: value type: String; configuration value: Mobile Protection subscription

key.


f) SelectNext.

F-Secure Elements Mobile Protection | Microsoft IntuneMDM | 15

TheAssignments tab opens.

g) Under Included groups, selectAdd all users and selectNext.The Review + create tab opens.

h) Select Create.

The app configuration policy was created and assigned.

You need to install the app on an Android device.

Chapter

5IBMMaaS360MDM

Instructionsonhowtodeploy theF-SecureElementsMobile ProtectionappwithIBMMaaS360 MDM.

Topics:

• Deploying the iOS app with IBMMaaS360 MDM

• Deploying Android Enterprise withIBMMaaS360 MDM

5.1 Deploying the iOS app with IBMMaaS360MDM

This section explains how to add the F-Secure Elements Mobile Protection iOS app to IBMMaaS360 MDM and how todeploy it.

5.1.1 Adding the iOS app to IBMMaaS360MDM

Instructions on how to add the F-Secure Elements Mobile Protection iOS app to IBMMaaS360 MDM.

1. Login into the IBMMaaS360 administrator portal as an administrator.

2. Open theApps view.

3. SelectAdd and then iTunes App Store App from the drop-down list.

4. In theApp Details tab, search and select the F-SecureMobile Protection app.

Adjust the app's category if necessary.

5. Open the Policies and Distribution tab and select the distribution methods and groups that you want to use.

6. Open the Configuration tab.

The configuration contains the following mandatory attribute:


You can use the firstName, lastName, email, and alias keys to add additional user data to the policy configuration.

7. SelectAdd.

The F-Secure Elements Mobile Protection app is in theApp list.

5.1.2 Distributing the iOS app

The F-Secure Elements Mobile Protection iOS app is delivered to the users in a defined distribution group.

5.2 Deploying Android Enterprise with IBMMaaS360MDM

This chapter contains instructionsonhowtodeploy theF-SecureElementsMobile Protectionapp in theAndroidEnterprisecontext with IBMMaaS360 MDM.

5.2.1 Configuring Android Enterprise

Instructions on how to configure Android Enterprise.

Note: Prior to enrolling devices, you need to configure Android Enterprise.

1. On the IBMMaaS360 administration portal, select Setup > Services.

2. UnderMobile DeviceManagement, Enable Android Enterprise Solution Set Enable via Managed Google PlayAccounts (no G-suite for business), select here.The Confirm AndroidManaged Google Play Accounts Enablement window.

3. Select Enable.

4. In the Security Check window, enter your password and select Confirm.Google Play opens.

5. On the Bring Android to work page, select Get started and do the following:

a) Enter the name of your business and selectNext.

b) On theContact details page, enter your name, email, andphonenumber (optional), select I have readandagreeto theManaged Google Play agreement option, and then select Confirm.

6. Select Complete Registration.You have completed the setup.

Next, you need to add the F-Secure Elements Mobile Protection app.

18 | IBMMaaS360MDM | F-Secure Elements Mobile Protection

5.2.2 Adding the F-Secure Elements Mobile Protection app

Instructions on how to add the F-Secure Elements Mobile Protection app to IBMMaaS360 MDM.

1. On the IBMMaaS360 administration portal, selectApps > Catalog.

2. On the App Catalog page, selectAdd >Android > Google Play App.

3. In the Search box, enter F-Secure Mobile Protection.

4. Select F-Secure Elements Mobile Protection, and select Select.

5. On theApprove Permission window, selectApprove to add the app.

Next, you need to configure the app.

5.2.3 Configuring the app

Instruction son how to configure the F-Secure Elements Mobile Protection app.

1. OntheAddGooglePlayAppwindow, in theConfiguration tab, selectConfigureAppSettings anddo the following:

a) In the Registration field, enter the product subscription key.




d) In the Email address field (optional), enter your email address


2. SelectAdd.The Security Check window opens.

3. Enter your password and select Confirm.The app was added.

5.2.4 Distributing the app

Instructions on how to distribute the app to the selected targets.

1. On the App Catalog page, under F-Secure Elements Mobile Protection, select View.

2. On the page that opens, at the top-right corner, select Distribute.The Distribute App window opens.

3. From the Target drop-downmenu, select one of the options:

• Specific device

• Group

• All devices

4. Select Distribute.

F-Secure Elements Mobile Protection | IBMMaaS360MDM | 19

Chapter

6MobileIron CloudMDM

Instructionsonhowtodeploy theF-SecureElementsMobile ProtectionappwithMobileIron Cloud MDM.

Topics:

• Deploying the iOS app withMobileIron Cloud MDM

• Deploying the Android app withMobileIron Cloud MDM

• AndroidEnterprisedeploymentwithMobileIron Cloud MDM

20 | MobileIron CloudMDM | F-Secure Elements Mobile Protection

6.1 Deploying the iOS app withMobileIron CloudMDM

Instructions on how to deploy the iOS app with MobileIron Cloud MDM.

6.1.1 Adding the F-Secure Elements Mobile Protection iOS app toMobileIron CloudMDM

Instructions on how to add the F-Secure Elements Mobile Protection iOS app to MobileIron Cloud.

To add the iOS app to MobileIron Cloud MDM:

1. On the MobileIron Cloud administration portal, go to theApps page and selectAdd.

2. SelectApp Store.

3. Search for F-Secure Mobile Protection.

4. Select the app and then selectNext.

5. Check that the app description is correct, and selectNext.

6. Set up the app distribution and selectNext.

6.1.2 Configuring iOS appmanagement

Instructions for configuring the iOS app management.

1. On the Configuration page, select iOSManaged App Configuration and then select +.

2. Under iOS 7+ Managed App Settings, do the following:

a) Enter a name for this configuration, for example, Elements Mobile Protection licenseconfiguration.

b) In the fate_registration_key field, enter your PSB license key.

3. Set up the distribution for this configuration.

4. Set up other necessary configurations, and select Done.

6.1.3 Additional configuration keys

The following MobileIron Cloud variables can be used to help identifying devices on PSB.

Note: The key names are case sensitive.

ValueKey

ABCD-EFGH-IJKL-MNOPfate_registration_key

$(userEmailAddress)email

$(userFirstName)first_name

$(userLastName)last_name

$(userDisplayName)alias

6.2 Deploying the Android app withMobileIron CloudMDM

Instructions on how to deploy the Android app with MobileIron Cloud MDM.

6.2.1 Adding the F-Secure Elements Mobile Protection Android app toMobileIronCloudMDM

Instructions on how to add the F-Secure Elements Mobile Protection Android app to MobileIron Cloud.

To add the Android app to MobileIron Cloud MDM:

F-Secure Elements Mobile Protection | MobileIron CloudMDM | 21

1. On the MobileIron Cloud administration portal, go to theApps page and selectAdd.

2. Select Google Play.

3. Search for F-Secure Elements Mobile Protection.

4. Select the app and then selectNext.

5. Check that the app description is correct. Optionally, you can add app information, such as various categories and adescription.

6. SelectNext.

7. On the App Delegation page, select whether you want to delegate the app to all spaces, and selectNext.

8. On the page that opens, select the preferred distribution group and pressNext.

9. Make sure that all the settings are correct, and select Done.

6.2.2 Configuring Android appmanagement

Instructions for configuring the Android app management.

1. On the MobileIron Cloud administration portal, go to the Configurations page and selectAdd.

2. Select Certificate.

3. Enter a name for the certificate.

4. Upload the PSB certificate for Mobile Protection.

Note: You can find the certificate in the PSB portal.

5. SelectNext.

6. On the next page, select the preferred option for deploying the certificate, and then select Done.

Note: The certificate must be deployed to the device, manually or automatically, to activate F-Secure ElementsMobile Protection.

6.3 Android Enterprise deployment withMobileIron CloudMDM

This chapter contains instructionsonhowtodeploy theF-SecureElementsMobile Protectionapp in theAndroidEnterprisecontext with MobileIron Cloud MDM.

6.3.1 Adding the F-Secure Elements Mobile Protection app

Instructions on how to add the F-Secure Elements Mobile Protection app to MobileIron Cloud.

1. On the MobileIron Cloud administration portal, selectAdmin > Google >Android Enterprise.TheAndroid Enterprise page opens.

2. Under Begin Recommended Setup, selectAuthorise Google.

3. Select Complete sign-up.

4. SelectApps >App Catalog, and select +Add.The Add App wizard opens.

5. In the Choose view, from the drop-downmenu, select Google Play.

6. In the Search the Google Play store... box, enter Elements Mobile Protection.

7. Select the app and then selectApprove >Approve.

8. Select Done > Select >Next.

9. In the Describe view, selectNext.

10. In the Delegate view, selectNext.

11. In the Distribute view, select you preferred option and selectNext

12. In the Configure view, next toManaged Configurations for Android, select the plus icon.The Configuration Setup page opens.

13. In theName field, enter a name, and underManaged Configurations, do the following:

a) In the Registration key field, enter the product subscription key.

22 | MobileIron CloudMDM | F-Secure Elements Mobile Protection

Note: You can find the Mobile Protection subscription key in the F-Secure Elements Security Center underEndpoint Protection Subscriptions.



d) In the Email address field (optional), enter your email address.


14. Under Distribute this App Config, select Everyone with App, and selectNext.

15. On the App Configurations page, select Done.F-Secure Elements Mobile Protection is shown on theApp Catalog page.

F-Secure Elements Mobile Protection | MobileIron CloudMDM | 23

Chapter

7MiradoreMDM

Instructionsonhowtodeploy theF-SecureElementsMobile ProtectionappwithMiradore MDM.

Topics:

• Adding the iOS app to MiradoreMDM Note: These instructions do not include information on how to create and

configure users and devices.• Adding theAndroid app toMiradore

MDM

24 | MiradoreMDM | F-Secure Elements Mobile Protection

7.1 Adding the iOS app toMiradoreMDM

Instructions on how to add the F-Secure Elements Mobile Protection iOS app to Miradore MDM.

1. On the Miradore administration portal, select Management >Applications from the left pane menu.

2. In theActionsmenu, selectAdd > iOS application.TheAdd application wizard opens.

3. In theAdd application wizard, do the following:

a) In step 1, selectApp Store and thenNext.

b) In step 2, enter the following details:

• Name: F-Secure Mobile Protection• App Store ID: 1549210826• App Store country: Choose the country that you want to use

• Description: Enter any description that you want to use.

• Select Remove application when device is unenrolled.

c) Select Create.

d) In step 3, make sure the information is correct and select Close.

7.1.1 Configuring the iOS app

Instructions on how to configure the F-Secure Elements Mobile Protection iOS app in Miradore MDM.

1. On the Miradore administration portal, double-click the Mobile Protection entry on theApplication list.

2. Go to the Configuration tab and selectAdd new.The Create configuration setting view opens.

3. Add the following values for the first setting:

• Setting: fate_registration_key• Data type: String• Value: Enter your subscription key

4. SelectAdd to add the new setting to the configuration.

5. SelectAdd to add the new setting to the configuration.After you have configured these twomandatory settings, you can add optional settings.

6. To add user details, selectAdd new and use the following values:

Tip: User details can help you to identify devices.

User variableData typeSetting

Select User > FirstnameStringfirst_name

Select User > LastnameStringlast_name

Select User > Email addressStringemail

Select Email > User display nameStringalias

7.2 Adding the Android app toMiradoreMDM

Instructions on how to add the F-Secure Elements Mobile Protection Android app to Miradore MDM.

Miradore MDM can provide the license information to the app either by using an XML file or the Install Referrer serviceof the Google Play store. Select the method that you want to use before you start adding the app to the MDM.

1. On the Miradore administration portal, select Management >Applications from the left pane menu.

2. In theActionsmenu on the right, selectAdd >Android application.

F-Secure Elements Mobile Protection | MiradoreMDM | 25

TheAdd application wizard opens.

3. In theAdd application wizard, do the following:

a) In step 1, select Google Play store and thenNext.

b) In step 2, enter the following details:

• Name: F-Secure Elements Mobile Protection for Android• Packagename:com.fsecure.mobileprotection.vpn.security.privacy.android.psb• Description: Enter any description that you want to use.

• Notification to user: Enter any information that you want users to see.

• Add shortcut to home screen: Select to create a shortcut to the app.

c) Add the following information to the Install referrer field:

• If you want to use the Install Referrer service to deliver the license information, use the install referrer stringthat canbe found fromProtection Service for Business. Look forGooglePlaydownloadURLwith the F-SecureElements Mobile Protection activation string. Copy the latter part of the string, starting from utm-medium.If you want to send additional information to the app, you can add extra elements to the activation string.

• If you want to use an XML file to deliver the license information, leave the field empty.

4. Select Create.

5. In step 4, make sure the information is correct and select Close.

F-Secure Elements Mobile Protection MDM deployment manual

Documents

Transcript of F-Secure Elements Mobile Protection MDM deployment manual