AirWatch's Mobile Content Management solution, Content Locker, allows you to manage document distribution and mobile access to corporate documents through the web-based console. Content Locker, available for free in the iTunes App Store, Google Play Store and Microsoft store, gives administrators full control over the documents installed on their managed devices, while guaranteeing the integrity and security of the data. In this example, we will install the Content Locker on a device, upload and deploy content, and integrate with an internal SharePoint server using the Mobile Access Gateway.
Publishing a document
Watch the Video!
The first step to publishing a document is to create a document category. Document categories help organize content and group related documents together to simplify and enhance the end user experience. Before adding a document, create a document Category:
- Navigate to Content > Content Locker > Categories
- Select Add Category
- Fill in all necessary information:
- Managed By - The organization group than can edit, add subcategories and delete the category.
- Name - The name of the category.
- Description - A description of the category.
- Click Save.
You can also add Subcategories:
- Select the Add button from the Actions Menu next to the parent categories name from the Categories View.
- Enter in the Name and Description
- Select Save to complete the process.
Now that a category has been created, you can upload a document. Documents can be added from your corporate network shares or uploaded directly to the AirWatch Admin console.
To distribute documents over-the-air through AirWatch Content Locker:
- Navigate to Content > Content Locker > List View
- Click the Add Content button, then Select files. You may also drag and drop files directly from your computer to the AirWatch window.
- Navigate to the files you wish to upload to console. Then select Open.
- Select the Organization Group level that will be receiving the document and the category you want this document to be placed in.
- Select the Security Tab to configure access control settings. These fields are described below:
Access Control Select Allow Online Viewing Only to force the device to be online and actively connected to the AirWatch Server. The device can still cache the document, but can only open and view it when actively connected. Force Encryption Determine whether Content Locker stores the document encrypted. Large encrypted files may experience a slight delay while opening on the device. Allow Open In Email Allows documents to be opened from Content Locker into a mail application. Open In Third Party Applications Selecting this allows the Document to be opened in other applications on the device - such as Mail, iBooks, etc. Allow Saving to Other Repositories Selecting this allows the Document to be saved to other repositories - such as personal repositories. Enable Watermark Watermark overlay text can be added to documents after it has been enabled from an SDK profile. Allow Printing This is only available to print PDF documents via the AirPrint server from the iOS Content Locker. Allow Edit Allows end-user to make edits/annotations and requires enabling of supported SDK library for use.
- Select the Assignment Tab to filter the recipients of the document.
- Optionally, select a device ownership to only send the document to devices enrolled under that ownership category
- Assign the document to one or more Organization Groups
Now that the document has been added, your users are ready to download it to their device using the Content Locker application.
Deploying Content Locker
Watch the Video!
To view content on a device, users need to download AirWatch Content Locker. Prompt users to install Content Locker by adding it as a recommended Public app in the AirWatch app catalog.
- Navigate to Apps & Books > Applications > List View
- Select Public from the list of tabs
- Select Add Application
- Choose the applicable Platform for the application
- Search for AirWatch Content Locker and click Select.
- Select a Smart Group on the Assignment tab, and specify how the app will be deployed from the deployment tab
- Click Save and Publish
Accessing content on the device
Once content has been uploaded in the web console and Content Locker has been downloaded on the device, documents can now be securely accessed using the application. Similar to enrollment, users will authenticate in the application by entering a server URL and organization Group ID (this step is only required the first time the application is used). After clicking Next , they may also be prompted to accept a EULA. Finally, enter the same Username and Password used for enrollment to log-in to the application.
Enabling Single Sign On (SSO) for applications will only require the user to authenticate to the application using a passcode. SSO can be enabled for all apps containing the AirWatch SDK from Apps & Books / Settings / Settings and Policies / Security Policies.
Using the Content Dashboard
The content dashboard provides a high level look at your content deployment. View the number of documents shared, storage utilization, user content status, most viewed files, and recent activity.
Content repository integration with the MAG
Watch the Video!
AirWatch Content Locker combined with the AirWatch Mobile Access Gateway allows you to integrate with your corporate resources and share internal documentation securely. While Content Locker helps you guarantee the integrity of the files on the device, the MAG allows devices to access these files from the server in a secure manner. The diagram below shows how the MAG can be utilized in the AirWatch SaaS deployment.
To download and install the MAG:
- Navigate to Groups & Settings > All Settings > System > Enterprise Integration > Mobile Access Gateway
- Download the Install Guide and the installer executable.
- After configuring your environment for the mentioned pre-requisites, run the installer to complete the MAG installation.
Once the MAG for Windows is installed you can begin publishing internal content to devices via Content Locker. To begin, you will first add a Content Repository:
- Navigate to Content > Repositories > Admin Repositories
- Click the Add button to bring up the Add Content Repository form
- Complete the fields as needed:
- Name- Enter a name relevant to the content directory
- Link- Enter the full path of the directory location
- Organization Group - Select the Organization Group level that will have access to this content repository
- Authentication type - Select User to authenticate administered SharePoint content repositories to view comprehensive metadata and
browse your SharePoint library’s folder structure directly from the Content Management page. Select "None" for a non-administered repository.
- Access Via EIS/MAG - Completethis action if the file system or SharePoint drive is not accessible from AirWatch server’s domain. This is required for content integration in SaaS deployments where the repository is not public facing and for specific server-hardened on-premise deployments.
- Allow Inheritance- Allow child Organization Groups to have access to this repository.
- Enable Sync - Allow the AirWatch Admin Console to periodically sync with the repository.
- Allow Write - allow write access to Content Repository, as well as create and upload files and folders.
Configuring Content Security Settings
While the administrator can configure security features for individual documents on the Security tab when publishing or editing individual documents, they can also set additional general security settings for Content Locker. To configure these settings, navigate in the web console to Content > Settings > Applications > Secure Content Locker.
Supported file types
- iWork - Keynote( including Keynote09), Numbers (including Numbers09), Pages (including Pages 09)
- MS Office - Excel, PowerPoint, and Word
- Pictures- .png, .jpeg, .gif, .tif, .bmp
- Videos- .mov, .mp4, .m4a, .m4p, .m4b, .m4r, .m4v
- Audio- .mp3, .m4a, .m4b, .m4p, .m4v, .m4r, .mp4, .aac, .alac
- Other- .pdf, .xml, .txt, .csv, .zip, .rtf, .ftdf, .html, ePUB, .rar, gzip, bzip, and iBooks