Loading...
 

MAM Deployment

Version 16.7

 

1   MAM Deployment on MindLink Mobile

This section aims to provide clear instructions on how administrators can deploy MindLink inside a supported Mobile Application Management (MAM) container. 

 

1.1   MobileIron (iOS only)

This section details deployment of the “MindLink for MobileIron” iOS application inside the MobileIron AppConnect container.

*UPDATE* : With server version 16.1 or above you can now configure MobileIron connectivity to use AppConnect Only without the need for MobileIron Tunnel. The MindLink for MobileIron application can be configured to use the integrated the MobileIron AppTunnel proxy. The server must be configured to allow persistent connections over HTTP, due to limitations in the AppTunnel platform.

Alternatively, the MobileIron Tunnel per-app VPN client may be used to proxy all traffic, which leverages the same MobileIron Sentry and Core components as the AppTunnel system. This utilises TLS mode to connect.

 

1.1.1   Enable AppConnect

Before enabling AppConnect on your admin portal, confirm that your organization has purchased the required AppConnect licenses.  Contact your MobileIron representative if you require additional details on AppConnect license purchases.

To enable AppConnect and AppTunnel functionality on the admin portal, navigate to the Settings page on the MobileIron Admin Portal and check the boxes as shown below.

image031.png

Figure 26 : Enabling AppConnect and App Tunnel

a)      Select the option for “Enable AppConnect for third-party and in-house apps”.

b)      Select the option of “Enable AppTunnel for third-party and in-house apps”.

 

1.1.2   Configure an AppConnect global policy

To modify an existing AppConnect global policy:

a)    On the MobileIron Admin Portal, go to Policies & Configs > Policies.

b)    Select an AppConnect global policy.

c)    Click Edit.

d)    Edit the AppConnect global policy based on your requirements.

See the AppConnect chapter of the VSP Administration Guide for details about each field.

An AppConnect global policy configures the security settings for all AppConnect apps, including:

  • Whether AppConnect is enabled for the devices that the policy is applied to

image032.png

Figure 27:  Enabling AppConnect Global Policy

  • AppConnect passcode requirements.

Note: The AppConnect passcode is not the same as the device passcode.

image033.png

Figure 28: Passcode settings

  • out-of-contact timeouts

image034.png

Figure 29: Timeout settings

  • the app check-in interval and the default end-user message for when an app is not authorized by default

Note: The app check-in interval is independent of the MDM check-in timer and controls, and apps cannot be forced to check-in before the interval expires. The recommended configuration for the app check-in interval is 60 minutes.

image035.png

Figure 30: Setting Check-in Interval

  • whether AppConnect apps with no AppConnect container policy are authorized by default and the data loss prevention settings

image036.png

Figure 31: Data Loss Prevention Policies

 

1.1.3   Configure a new AppConnect container policy

An AppConnect container policy specifies data loss protection policies for the app.  The AppConnect container policy is required for an app to be authorized unless the AppConnect global policy allows apps without a container policy to be authorized. Such apps get their data loss protection policies from the AppConnect global policy.

Details about each field are in the AppConnect chapter of the VSP Administration Guide.

To configure an AppConnect container policy:

 

1.1.3.1   Configure Mobile Iron Admin Portal

On the MobileIron Admin Portal, go to Policies & Configs... Configurations... Add New... AppConnect... Container Policy.

image037.png

Figure 32: Creating new Container Policy

 

1.1.3.2   Enter the Name, Description, and Application.

Note: For the Application field, choose an application from the app distribution library, or for iOS apps, specify the iOS bundle ID (com.mindlinksoft.mindlinkmobile.mobileiron). You can find the bundle ID by going to Apps > App Distribution Library, and clicking to edit the app. The field Inventory Apps displays the bundle ID in parenthesis.

image038.png

 Figure 33: Container Policy settings 

 

1.1.3.3   Configure the data loss protection policies according to your requirements.

image039.png

Figure 34: Data Loss Prevention Policies for Container Policy

 

1.2   Good Dynamics (iOS and Android)

This section details deployment of the “MindLink for Good” iOS application inside the Good Dynamics container.

 

1.2.1   Good Dynamics Marketplace

MindLink is a partner application in Good Dynamics Marketplace. The app can be found at https://community.good.com/marketplace.jspa under Categories > IM/ Presence.

To get the app published as a deployable application in your Good Control console, click "Start a Trial", or contact support at mindlinksoft.com for more information.

 

1.2.2   Good Control

When MindLink for Good is added to Good Control tool, it can be found under APPLICATIONS > Manage Applications

image040.jpg

Figure 35: MindLink for Good on Good Control portal

When you click on ‘MindLink for Good’ you will be transferred to its configuration options.

Even though there are no specific app policies to be applied, MindLink server has to be whitelisted.

The HOST NAME of the MindLink server and the web service and socket connection PORTS - (default 7074 and 7072 respectively) - must be whitelisted for connectivity through the Good Dynamics Proxy.

image041.png

Figure 36: Whitelisting MindLink servers by adding Host Name and Port numbers

An alternative way to whitelist MindLink server is by adding the correct domain in Client Connections under the SERVER CONFIGURATION tab.

image042.jpg

Figure 37: Whitelisting MindLink servers by adding the domain

Moreover, you need to assign the application to the users. Under the USER ACCOUNTS tab, go to Manage Users, select the user you want to assign the app to and ‘Edit’. Click on APPLICATIONS and add the app in the ALLOWED APPLICATIONS list.

image043.png

Figure 38: Assigning the app to a user

Finally, under ACCESS KEYS, click on Provision in order to create an access key for this specific user. This access key will be used, along with the user’s email, on the MindLink client when the following screen appears.

image044.jpg

Figure 39: Providing Access Key

 

1.2.3   Pre-configuration of server address

After installing MindLink for Good and running the app for the first time, you will encounter this page requesting a server URL:

  

 

However, if you do not want the app to request or display the server URL for reasons of security and or ease of use, you can find an option in the Good Control tool that disables this feature by allowing you to preconfigure a server URL.

In the Good Control tool you must navigate to the “Policy Sets” setting under the “POLICIES” heading.

 

Then choose the Policy Set you currently have enabled. Example:

 

After it loads, click on the “APPS” heading to configure the application policies.

 

Now expand “APP SPECIFIC POLICIES” and select “MINDLINK MOBILE FOR GOOD BETA”. You will see a text field that requests a Server URL as shown below:

In this text field enter the URL of the server you wish MindLink for Good to automatically connect to.

 

After making the changes, click “Update” and from now on the app will initialise automatically using the preconfigured server URL and you will be directed immediately to the user login screen.

 

1.3   SECTOR (iOS) – BlackBerry Secure Workspace

 

This section details deployment of the “MindLink for SECTOR” iOS application inside the BlackBerry Secure Workspace container.

 

1.3.1   Deployment through BlackBerry Enterprise Service 10

  1. Using your browser navigate to your BlackBerry Enterprise Service – Please note: When using BES10 please navigate to BES10 – Universal Device Service.

image045.png 

Figure 40: BlackBerry Enterprise Service 10 - Universal Device Service

  1. Add the ‘App store’ app to BES10
    1. Navigate to ‘Library’ on the top navigation bar
    2. Click the ‘+’ icon on ‘Application Definitions’
    3. Below on the right of ‘Application sources’ click the ‘+’ icon again.
    4. Select ‘App store app’

image046.png

Figure 41: Creating a new application definition

    1. You will now be prompted to fill in the following fields as depicted in the image below.

image047.jpg

Figure 42: Adding a new application source

    1. For ‘Application name’ fill in a useful name like: MindLink for SECTOR
    2. For ‘Application version’, make sure it corresponds with the version available on the App Store. Please Note: Do not use full stops, rather, if the version number is for example, 3.3.0.5 enter: 3030005 instead (replacing each full stop with a 0).
    3. For ‘Application Identifier’ enter the following: com.mindlinksoft.mindlinkmobile.sector
    4. For ‘Secure Application’, tick the box.

                j.  For ‘Application source’ please select ‘Application web address’ from the drop down menu.

    1. For ‘Application web address’, fill in the entire App Store URL.
  1. Create a new software configuration for the iOS version of the MindLink Mobile client for SECTOR. Assign the application to the software configuration.

 

image048.png

Figure 43: Creating a new software configuration for MindLink Mobile for Sector 

  1. Create a new user account for the iOS device user within your respective BlackBerry Enterprise Server.

image049.png

Figure 44: Add new user – BES10

  1. Ensure to specify an activation password.

image050.jpg

Figure 45: Device Activation – BES10

  1. Apply the software configuration from Step 3 to the user by clicking the ‘+’ icon and selecting the profile from the drop-down menu.

image051.png

Figure 46: Applying a software configuration to a user 

  1. Send an activation email to the user. The user will receive the activation email including the activation password and further instructions.
  2. Download & install the BES12 Client (mobile) on the iOS device from the ‘App Store’ or instruct the user to do so (as well as follow the instructions from the activation email).
  3. Open the BES12 Client (mobile) and enter the activation details received in the activation email.
  4. After activation is complete the user will be requested to enter a Secure Work Space password. Additionally the user will be prompted to download any applications that have been specified for the user/group. This includes MindLink Mobile for SECTOR. (Please Note: After each application is downloaded the user may need to press the back button to initiate the next download).

 

1.3.1.1   Installing Certificates through BES10

  1. Export the required certificates from your certificate store using the Management Console (MMC) and store the file in a known, accessible location.

image052.jpg

Figure 47: Exporting Certificates from the Management Console

  1. Log onto the BES10 Universal Device Service
  2. In the ‘Available Settings’ menu click the ‘+’ icon next to ‘Profiles’

image053.png

Figure 48: Creating a CA certificate profile

  1. From the drop-down menu, select ‘CA certificate’
  2. Type in a name for the certificate and optionally enter a description then browse to the file location and upload the certificate.
  3. Next, click ‘Save’.
  4. The newly created profile must now be assigned to the device user. Select the user you wish to add the profile to and click the ‘+’ icon in the ‘IT policies and profiles’ box.
  5. Select ‘CA certificate’ from the drop-down menu.

image054.jpg

Figure 49: Selecting CA certificate from list of profiles to add

  1. Now select the CA certificate profile from ‘CA certificate profiles’ drop-down menu and press ‘Apply’.

image055.jpg

Figure 50: Applying a CA certificate profile

 

1.3.2   Deployment through BlackBerry Enterprise Service 12

  1. Using your web browser, navigate to your BES12

image056.jpg

Figure 51: BES12 Login

  1. Using the navigation bar click ‘Apps’

image057.jpg

Figure 52: BES12 Navigation Bar 

  1. Click the ‘Add an app’ icon

image058.png

Figure 53: Adding an app 

  1. You will now see a selection of locations to add an app from, please select App Store (for iOS).

image059.jpg

Figure 54: Select App Store for iOS apps

  1. A window titled ‘Add iOS apps’ will now appear as shown below.

image060.jpg

Figure 55: Adding an app for iOS

    1. Type in the name of the app; MindLink for SECTOR.
    2. Press ‘Search’.
    3. The MindLink for SECTOR iOS client should now appear below.
  1. To finalize, press ‘Add’
  2. The app should now appear in the ‘App Management’ screen in BES12
  3. In order to deploy MindLink for Workspace to your mobile device you must assign the application to individual users or user groups.
    1. To assign an app to individual users, proceed to the ‘Users and Devices’ tab.
    2. To assign an app to groups, proceed to the ‘Groups’ tab.

9.       For each user or group you wish to assign the application to find and click the ‘+’ icon in the corresponding ‘App’ table to assign an app.

image061.jpg

Figure 56: Assigning applications in BES12

                Clicking ‘Next’ will bring up the following options illustrated in the image below:

image062.jpg

Figure 57: Disposition choices: Optional & Required

10.   Depending on which ‘Disposition’ you have selected for your users/user groups will affect the way the MindLink Mobile Client is deployed on each of the users’ devices.

a.       Choosing ‘Optional’ will result in each user having to individually download the app onto their device. Additionally, by choosing for ‘Optional’ the user may also remove the application at their own discretion.

b.      Choosing ‘Required’ will push/force the application onto the device directly. Please allow some time for this to occur. Users cannot uninstall the application, this is done remotely on the BES12.

11.   Once the application has been deployed, depending on whether you have selected either ‘Optional’ or ‘Required’ you may be prompted to restart the device, if so please restart the device before attempting to log on to the MindLink Mobile client.

 

1.3.2.1   Installing Certificates through BES12

To ensure the correct functioning of the MindLink Mobile Client, it is important that all the necessary certificates have been imported onto the device. Please observe the instructions below to install a Certification Authority (CA) certificate and any other required certificates.

1.       Export the required certificates from your certificate store using the Management Console (MMC) and store the file in a known, accessible location.

image063.jpg

Figure 58: Exporting Certificates from the Management Console

2.       Once the certificate has been exported it must be uploaded to the BlackBerry Enterprise Server (BES12). Navigate to the Administration Portal of the relevant BES. 

image064.jpg

Figure 59: BES12 Navigation Bar - 'Policies and Profiles'

Once logged on the BlackBerry Enterprise Server (BES12), navigate to the ‘Policies and Profiles’ tab. After navigating to ‘Policies and Profiles’ there is a menu bar visible on the left of the page. In the list of menu items click ‘+’ next to ‘CA certificate’.

image065.jpg

Figure 60: Importing a CA certificate to BES12

Ensure the certificate has the file suffix: .der if not, simply rename the file extension to e.g. FileName.der

Also ensure that the relevant device operating system and certificate store have been selected before clicking the ‘Add’ button.

The CA certificate profile should now be visible on the BES12 and you can now assign the profile to various user groups or specific users. To do so navigate to either the ‘Users and Devices’ tab or ‘Groups’ tab.

3.       For specific users;

a.       For specific users simply click on the user you wish to assign the CA certificate profile to and then click the ‘+’ icon next to ‘IT policy and profiles’.

b.      Select ‘CA certificate’ and locate the appropriate ‘CA certificate profile’ from the drop-down menu (Please note: If the CA certificate has already been applied to a user, this certificate will no longer appear in the drop-down menu).

c.       The selected CA certificate profile should now be visible in the overview of IT policies and profiles applied to the specified user.

4.       For groups;

a.       Click the group for which you wish to apply the CA certificate profile.

b.      Click the ‘Settings’ tab for that group.

c.       Click the ‘+’ icon next to ‘IT policy and profiles’ and select ‘CA certificate profile’.

d.      Select the appropriate CA certificate profile and press ‘Assign’.

Please note, as with the deployment of the MindLink Mobile client, it may take some time before the BES12 pushes the CA certificate profile on to the device(s).

 

1.4   SECTOR (Android) – BlackBerry Secure Workspace

This section details deployment of the “MindLink for SECTOR” Android application inside the BlackBerry Secure Workspace container.

 

1.4.1   Deployment through BlackBerry Enterprise Service 10

1.       Using your browser navigate to your BlackBerry Enterprise Service – Please note: When using BES10 please navigate to BES10 – Universal Device Service.

image045.png 

Figure 61: BlackBerry Enterprise Service 10 - Universal Device Service

2.       Add the Playstore app to BES10

a.       Navigate to ‘Library’ on the top navigation bar

b.      Click the ‘+’ icon on ‘Application Definitions’

c.       Below on the right of ‘Application sources’ click the ‘+’ icon again.

d.      Select ‘App store app’

image066.png

Figure 62: Creating a new application definition

e.      You will now be prompted to fill in the following fields as depicted in the image below.

image067.jpg

Figure 63: Adding a new application source

f.   For ‘Application name’ fill in a useful name like: MindLink for SECTOR

g.       For ‘Application version’, make sure it corresponds with the version available on Google Playstore. Please Note: Do not use full stops, rather if the version number is for example, 3.3.0.5 enter: 3030005 instead (replace each full stop with a 0).

h.      For ‘Application Identifier’ please include the URL suffix of the Playstore URL for the app. E.g. https://play.google.com/store/apps/details?id=com.mindlinksoft.mindlinkmobile.SSE_APP

i.   For ‘Secure Application’, tick the box.

j.   For ‘Application web address’, fill in the entire Playstore URL.

3.       Create a new software configuration for the Android version of the MindLink Mobile client for SECTOR. Assign the application to the software configuration.

image068.png

Figure 64: Creating a new software configuration for MindLink Mobile for Sector

4.       Create a new user account for the Android device user within your respective BlackBerry Enterprise Server.

image069.png

Figure 65: Add new user – BES10

5.       Ensure to specify an activation password.

image070.jpg

Figure 66: Device Activation – BES10

6.       Apply the software configuration from Step 3 to the user by clicking the ‘+’ icon and selecting the profile from the drop-down menu.

image071.png

Figure 67: Applying a software configuration to a user

7.       Send an activation email to the user. The user will receive the activation email including the activation password and further instructions.

8.       Download & install the BES12 Client (mobile) on the Android device from the Google Playstore or instruct the user to do so (as well as follow the instructions from the activation email).

9.       Open the BES12 Client (mobile) and enter the activation details received in the activation email.

10.   After activation is complete the user will be requested to enter a Secure Work Space password. Additionally the user will be prompted to download any applications that have been specified for the user/group. This includes MindLink Mobile for SECTOR. (Please Note: After each application is downloaded the user may need to press the back button to initiate the next download).

 

1.4.1.1   Installing Certificates through BES10

1.       Export the required certificates from your certificate store using the Management Console (MMC) and store the file in a known, accessible location.

image072.jpg

Figure 68: Exporting Certificates from the Management Console

2.       Log onto the BES10 Universal Device Service

3.       In the ‘Available Settings’ menu click the ‘+’ icon next to ‘Profiles’

image053.png

Figure 69: Creating a CA certificate profile

4.       From the drop-down menu, select ‘CA certificate’

5.       Type in a name for the certificate and optionally enter a description then browse to the file location and upload the certificate.

6.       Next, click ‘Save’.

7.       The newly created profile must now be assigned to the device user. Select the user you wish to add the profile to and click the ‘+’ icon in the ‘IT policies and profiles’ box.

8.       Select ‘CA certificate’ from the drop-down menu.

image073.jpg

Figure 70: Selecting CA certificate from list of profiles to add

 

9.       Now select the CA certificate profile from ‘CA certificate profiles’ drop-down menu and press ‘Apply’.

image074.jpg

Figure 71: Applying a CA certificate profile

 

1.4.2   Deployment through BlackBerry Enterprise Service 12

1.       Using your web browser, navigate to your BES12

image075.jpg

Figure 72: BES12 Login

2.       Using the navigation bar click ‘Apps’

image076.jpg

Figure 73: BES12 Navigation Bar

3.       Click the ‘Add an app’ icon

image077.png

Figure 74: Adding an app

4.       You will now see a selection of locations to add an app from, please select Google Play (for Android).

image078.jpg

Figure 75: Select Google Playstore for Android apps

5.       A window titled ‘Add Android apps’ will now appear as shown below.

image079.jpg

Figure 76: Adding an app for Android

6.       Fill in all required fields:

a.       App name; give the app a relevant/useful name like MindLink Mobile SECTOR for Android

b.      App icon; choose an icon for the app.

c.       Add the Google Playstore URL of the app

7.       To finalize, press ‘Add’

8.       The app should now appear in the ‘App Management’ screen in BES12

9.       In order to deploy MindLink for Workspace to your mobile device you must assign the application to individual users or user groups.

a.       To assign an app to individual users, proceed to the ‘Users and Devices’ tab.

b.      To assign an app to groups, proceed to the ‘Groups’ tab.

10.   For each user or group you wish to assign the application to find and click the ‘+’ icon in the corresponding ‘App’ table to assign an app.

image080.jpg

Figure 77: Assigning applications in BES12

                Clicking ‘Next’ will bring up the following options illustrated in the image below:

image081.jpg

Figure 78: Disposition choices: Optional & Required

11.   Depending on which ‘Disposition’ you have selected for your users/user groups will affect the way the MindLink Mobile Client is deployed on each of the users’ devices.

a.       Choosing ‘Optional’ will result in each user having to individually download the app onto their device. Additionally, by choosing for ‘Optional’ the user may also remove the application at their own discretion.

b.      Choosing ‘Required’ will push/force the application onto the device directly. Please allow some time for this to occur. Users cannot uninstall the application, this is done remotely on the BES12.

12.   Once the application has been deployed, depending on whether you have selected either ‘Optional’ or ‘Required’ you may be prompted to restart the device, if so please restart the device before attempting to log on to the MindLink Mobile client.

 

1.4.2.1   Installing Certificates through BES12

To ensure the correct functioning of the MindLink Mobile Client, it is important that all the necessary certificates have been imported onto the device. Please observe the instructions below to install a Certification Authority (CA) certificate and any other required certificates.

1.       Export the required certificates from your certificate store using the Management Console (MMC) and store the file in a known, accessible location.

 

image063.jpg

Figure 79: Exporting Certificates from the Management Console

2.       Once the certificate has been exported it must be uploaded to the BlackBerry Enterprise Server (BES12). Navigate to the Administration Portal of the relevant BES. 

image082.jpg

Figure 80: BES12 Navigation Bar - 'Policies and Profiles'

Once logged on the BlackBerry Enterprise Server (BES12), navigate to the ‘Policies and Profiles’ tab. After navigating to ‘Policies and Profiles’ there is a menu bar visible on the left of the page. In the list of menu items click ‘+’ next to ‘CA certificate’.

image083.jpg

Figure 81: Importing a CA certificate to BES12

Ensure the certificate has the file suffix: .der if not, simply rename the file extension to e.g. FileName.der

Also ensure that the relevant device operating system and certificate store have been selected before clicking the ‘Add’ button.

The CA certificate profile should now be visible on the BES12 and you can now assign the profile to various user groups or specific users. To do so navigate to either the ‘Users and Devices’ tab or ‘Groups’ tab.

3.       For specific users;

a.       For specific users simply click on the user you wish to assign the CA certificate profile to and then click the ‘+’ icon next to ‘IT policy and profiles’.

b.      Select ‘CA certificate’ and locate the appropriate ‘CA certificate profile’ from the drop-down menu (Please note: If the CA certificate has already been applied to a user, this certificate will no longer appear in the drop-down menu).

c.       The selected CA certificate profile should now be visible in the overview of IT policies and profiles applied to the specified user.

4.       For groups;

a.       Click the group for which you wish to apply the CA certificate profile.

b.      Click the ‘Settings’ tab for that group.

c.       Click the ‘+’ icon next to ‘IT policy and profiles’ and select ‘CA certificate profile’.

d.      Select the appropriate CA certificate profile and press ‘Assign’.

Please note, as with the deployment of the MindLink Mobile client, it may take some time before the BES12 pushes the CA certificate profile on to the device(s).

 

1.5   BlackBerry Enterprise Server (BES)

This section will cover the deployment of MindLink Mobile through BlackBerry Enterprise Server (BES) BES10 and BES12. You will find instructions regarding deployment for each version of BES under the corresponding headings. Each set of deployment instructions has been illustrated with screenshots.

 

1.5.1   BES10

To upload MindLink Mobile to your BlackBerry Enterprise Server 10 please use the following steps:

1.       Using your internet browser, navigate to the BES10 Administration Portal and use your Administrator credentials to log in.

image084.jpg

Figure 82: BES10 Login page

 

2.       Using the navigation on the left side of the webpage, go to Software > Applications > Add or update applications.

image085.jpg

Figure 83: BES10 Navigation Menu

3.       Browse to the file location, select the MindLinkWorkspace.bar file and click ‘Next’

image086.jpg

Figure 84: Uploading an application to BES10

4.       To finalize; click > Publish application

image087.png

Figure 85: Option to publish application

5.       Once the file has been successfully uploaded you can add/update the application to an existing software configuration, or create a new software configuration for the application.

a.       To create a new software configuration, click on Software > Create a software configuration.

                 i.      After clicking ‘Create a new software configuration’ you can give your new software configuration a name and enter a brief description.

                 ii.      Press ‘Save’ to continue.

b.      After creating a new software configuration or to update an existing software configuration click on Software > Manage a software configuration and select your software configuration.

                 i.      Select the software configuration you wish to add the application to and then click ‘Edit software configuration’.

image088.png

 Figure 86: Editing an existing software configuration

                                                             ii.      Click the ‘Applications’ tab next to the ‘Configuration Information’ tab, followed by clicking ‘Add applications to software configuration’.

image089.png 

Figure 87: Adding applications to a new software configuration

6.       Locate the application you wish to add to the software configuration and mark the checkbox. Additionally you may select whether the application is either ‘Required’ or ‘Optional’. After selecting the desired settings; click ‘Add to software configuration’.

 

image090.jpg

image091.jpg

Figure 88: Selecting/configuring an application

7.       If the application has been updated in an existing software configuration, the configuration may already be applied to existing users and groups. If this is the case the MindLink Mobile client will be deployed once the configuration has been updated. Depending on your settings for deployment jobs it may take some time for deployment to occur.

8.       If the application has been added to a new software configuration; the software configuration must be applied to a user or groups for the MindLink Mobile Client to deploy on the devices.

 

1.5.1.1   Simple Certificate Enrolment Protocol (SCEP)

To ensure the correct functioning of the MindLink Mobile Client, it is important that all the necessary certificates have been imported onto the device. Please observe the instructions below to install a Certification Authority (CA) certificate and any other required certificates.

1.       Go to the BlackBerry Enterprise Server 10 (BES10) Administration portal and navigate to Profiles > Create a SCEP profile or Manage SCEP profiles.

image092.jpg

Figure 89: Creating a SCEP profile

2.       After pressing continue you can configure the SCEP profile settings. Fill in all required fields and click ‘Save’. The default settings are shown in the image below.

image093.jpg

Figure 90: SCEP Profile Settings

3.       Certificate enrolment will start once the profile has been distributed to the device(s). To view deployment/distribution configurations navigate to Deployment Jobs > Specify job schedule settings.

4.       The device will automatically download CA profiles during the activation process or when a SCEP profile is changed or assigned to a user. After the download has completed the client certificate and corresponding certificate chain are stored on the device in the keystore for Workspace.

 

1.5.2   BES12

To upload MindLink Mobile to your BlackBerry Enterprise Server 12 please use the following steps:

1.       Using your internet browser, navigate to the BES12 Administration Portal and use your Administrator credentials to log in.

image094.jpg

Figure 91: Logging on to BES12

2.       Using the navigation bar, click on the ‘Apps’ tab.

image095.jpg

Figure 92: BES12 Navigation Bar

3.       Find and click the ‘+’ icon to add an application.

image096.png

Figure 93: Adding applications in BES12

4.       Browse and locate the ‘MindLink for Workspace.bar’ file to upload it to BES12.

image097.png

Figure 94: Uploading the app to BES12

5.       Once the upload has completed it will appear as a listed app in the ‘App Management’ page.

image098.jpg

Figure 95: App Management screen showing MindLink

6.       In order to deploy MindLink for Workspace to your mobile device you must assign the application to individual users or user groups.

a.       To assign an app to individual users, proceed to the ‘Users and Devices’ tab.

b.      To assign an app to groups, proceed to the ‘Groups’ tab.

7.       For each user or group you wish to assign the application to find and click the ‘+’ icon in the corresponding ‘App’ table to assign an app.

image099.jpg

Figure 96: Assigning applications in BES12

                Clicking ‘Next’ will bring up the following options illustrated in the image below:

image100.jpg

Figure 97: Disposition choices: Optional & Required

8.       Depending on which ‘Disposition’ you have selected for your users/user groups will affect the way the MindLink Mobile Client is deployed on each of the users’ devices.

a.       Choosing ‘Optional’ will result in each user having to individually download the app onto their device. Additionally, by choosing for ‘Optional’ the user may also remove the application at their own discretion.

b.      Choosing ‘Required’ will push/force the application onto the device directly. Please allow some time for this to occur. Users cannot uninstall the application, this is done remotely on the BES12.

9.       Once the application has been deployed, depending on whether you have selected either ‘Optional’ or ‘Required’ you may be prompted to restart the device, if so please restart the device before attempting to log on to the MindLink Mobile client.

 

1.5.2.1   Certificates

To ensure the correct functioning of the MindLink Mobile Client, it is important that all the necessary certificates have been imported onto the device. Please observe the instructions below to install a Certification Authority (CA) certificate and any other required certificates.

1.       Export the required certificates from your certificate store using the Management Console (MMC) and store the file in a known, accessible location.

image063.jpg

Figure 98: Exporting Certificates from the Management Console

2.       Once the certificate has been exported it must be uploaded to the BlackBerry Enterprise Server (BES12). Navigate to the Administration Portal of the relevant BES. 

image064.jpg

Figure 99: BES12 Navigation Bar - 'Policies and Profiles'

Once logged on the BlackBerry Enterprise Server (BES12), navigate to the ‘Policies and Profiles’ tab. After navigating to ‘Policies and Profiles’ there is a menu bar visible on the left of the page. In the list of menu items click ‘+’ next to ‘CA certificate’.

image101.jpg

Figure 100: Importing a CA certificate to BES12

Ensure the certificate has the file suffix: .der if not, simply rename the file extension to e.g. FileName.der

Also ensure that the relevant device operating system and certificate store have been selected before clicking the ‘Add’ button.

The CA certificate profile should now be visible on the BES12 and you can now assign the profile to various user groups or specific users. To do so navigate to either the ‘Users and Devices’ tab or ‘Groups’ tab.

3.       For specific users;

a.       For specific users simply click on the user you wish to assign the CA certificate profile to and then click the ‘+’ icon next to ‘IT policy and profiles’.

b.      Select ‘CA certificate’ and locate the appropriate ‘CA certificate profile’ from the drop-down menu (Please note: If the CA certificate has already been applied to a user, this certificate will no longer appear in the drop-down menu).

c.       The selected CA certificate profile should now be visible in the overview of IT policies and profiles applied to the specified user.

4.       For groups;

a.       Click the group for which you wish to apply the CA certificate profile.

b.      Click the ‘Settings’ tab for that group.

c.       Click the ‘+’ icon next to ‘IT policy and profiles’ and select ‘CA certificate profile’.

d.      Select the appropriate CA certificate profile and press ‘Assign’.

Please note, as with the deployment of the MindLink Mobile client, it may take some time before the BES12 pushes the CA certificate profile on to the device(s).

 1.6 Airwatch (iOS only)

please contact your account manager while this section is updated.

End user information : https://wiki.mindlinksoft.com/tiki-index.php?page=MindLink+Mobile+-+iOS#Mindlink_for_Airwatch

 1.7 Citrix (iOS only)

please contact your account manager while this section is updated.

End user information : https://wiki.mindlinksoft.com/tiki-index.php?page=MindLink+Mobile+-+iOS#MindLink_for_Citrix