Overview
Standalone enrollment though VMware Boxer is available for AirWatch Administrators who are interested in providing secure email, calendar and contacts environment without a light or full management profile on the device.
This enrollment method allows users to download VMware Boxer, authenticate, and come to value quickly without the requirement of an anchor application such as Workspace ONE or the AirWatch Agent. It should be noted that standalone enrollment does not support all AirWatch enrollment flows and restrictions.
Setting configurations for desired operating mode
Console versions prior to AirWatch 9.3
When configuring VMware Boxer as a public application, the highlighted setting (Device must be MDM Managed to Install this App) controls how end users can enroll into the Workspace ONE platform with Boxer.
|
Operating Mode |
Description |
Boxer Flag |
|
Standalone Mode |
Allow app to enroll into Workspace ONE platform and deliver app settings to device. |
Disabled |
|
Container w/o MDM* |
Block app from enrolling into Workspace ONE platform. App can be configured if the device is already enrolled through Workspace ONE or Container. |
N/A |
|
Full MDM |
Block app from enrolling into Workspace ONE platform without MDM. App can be configured if the device is already enrolled with MDM. |
Enabled |
*It’s not possible to block Boxer enrollment and force users to enroll through Workspace ONE or Container without also requiring MDM. When Boxer Flag is Disabled, user can enroll through Boxer or Workspace ONE or Container.
Console Version 9.3+
The following flags need to be set on both the Content Locker settings page and Boxer Assignment page, as both of these configurations impact Boxer with standalone enrollment as mode of operation.
- Block Enrollment via Content Locker, Boxer, and Browser
- Changes to this flag impact all AirWatch productivity apps that support standalone enrollment.
- Device must be MDM managed install this App
- Changes to this flag only impact the Boxer productivity app.
|
Operating Mode |
Description |
Content Locker Flag |
Boxer Flag |
|
Standalone |
Allow app to enroll into Workspace ONE platform and deliver app settings to device. |
Disabled |
Disabled |
|
Container w/o MDM |
Block app from enrolling into Workspace ONE platform. App can be configured if the device is already enrolled through Workspace ONE or Container. |
Enabled |
Disabled |
|
MDM |
Block app from enrolling into Workspace ONE platform without MDM. App can be configured if the device is already enrolled with MDM. |
Enabled |
Enabled |
Functionality Support
|
Enrollment Flow |
Standalone Enrollment with Boxer |
|
Username and Password |
Supported |
|
Auto-discovery |
Supported |
|
Check-in / Check-out |
Not Supported |
|
Staging Device |
Not Supported |
|
Token Enrollment |
Not Supported |
|
QR Code Enrollment |
Not Supported |
|
User Group and Organization Group Mapping |
Not Supported (Devices are always enrolled to a “Customer” type OG) |
|
Enrollment Restriction |
Standalone Enrollment with Boxer |
|
Prevent Compromised Devices from Enrolling |
Supported |
|
Restrict Enrollment to Known Users |
Not Supported |
|
Restrict Enrollment to Configured Groups |
Not Supported |
|
Allowed Ownership Types |
Not Supported |
|
Allowed Enrollment Types |
Not Supported |
|
Device Limit per User |
Not Supported |
|
Allowed Device Types (Includes OS, Model and Platform Restrictions) |
Not Supported |
Other Languages: 日本語
0 Comments