Boxer Standalone Enrollment Configuration and Limitations

Overview

Standalone enrollment though VMware Boxer is available for AirWatch Administrators who are interested in providing secure email, calendar and contacts environment without a light or full management profile on the device.

This enrollment method allows users to download VMware Boxer, authenticate, and come to value quickly without the requirement of an anchor application such as Workspace ONE or the AirWatch Agent. It should be noted that standalone enrollment does not support all AirWatch enrollment flows and restrictions.

 

Setting configurations for desired operating mode

Console versions prior to AirWatch 9.3

When configuring VMware Boxer as a public application, the highlighted setting (Device must be MDM Managed to Install this App) controls how end users can enroll into the Workspace ONE platform with Boxer.

1.png

Operating Mode

Description

Boxer Flag

Standalone Mode

Allow app to enroll into Workspace ONE platform and deliver app settings to device.

Disabled

Container w/o MDM*

Block app from enrolling into Workspace ONE platform. App can be configured if the device is already enrolled through Workspace ONE or Container.

N/A

Full MDM

Block app from enrolling into Workspace ONE platform without MDM. App can be configured if the device is already enrolled with MDM.

Enabled

*It’s not possible to block Boxer enrollment and force users to enroll through Workspace ONE or Container without also requiring MDM. When Boxer Flag is Disabled, user can enroll through Boxer or Workspace ONE or Container.

 

Console Version 9.3+

The following flags need to be set on both the Content Locker settings page and Boxer Assignment page, as both of these configurations impact Boxer with standalone enrollment as mode of operation.

  • Block Enrollment via Content Locker, Boxer, and Browser
    • Changes to this flag impact all AirWatch productivity apps that support standalone enrollment.
  • Device must be MDM managed install this App
    • Changes to this flag only impact the Boxer productivity app.
2.png
3.png

Operating Mode

Description

Content Locker Flag

Boxer Flag

Standalone

Allow app to enroll into Workspace ONE platform and deliver app settings to device.

Disabled

Disabled

Container w/o MDM

Block app from enrolling into Workspace ONE platform. App can be configured if the device is already enrolled through Workspace ONE or Container.

Enabled

Disabled

MDM

Block app from enrolling into Workspace ONE platform without MDM. App can be configured if the device is already enrolled with MDM.

Enabled

Enabled

 

Functionality Support

Enrollment Flow

Standalone Enrollment with Boxer

Username and Password

Supported

Auto-discovery

Supported

Check-in / Check-out

Not Supported

Staging Device

Not Supported

Token Enrollment

Not Supported

QR Code Enrollment

Not Supported

User Group and Organization Group Mapping

Not Supported (Devices are always enrolled to a “Customer” type OG)

 

Enrollment Restriction

Standalone Enrollment with Boxer

Prevent Compromised Devices from Enrolling

Supported

Restrict Enrollment to Known Users

Not Supported

Restrict Enrollment to Configured Groups

Not Supported

Allowed Ownership Types

Not Supported

Allowed Enrollment Types

Not Supported

Device Limit per User

Not Supported

Allowed Device Types (Includes OS, Model and Platform Restrictions)

Not Supported

 

Other Languages: 日本語

Have more questions? Submit a request

0 Comments

Article is closed for comments.