Вы находитесь на странице: 1из 84

Mobile Content Management Guide

Configuring secure distribution and mobile access to your


organization's content

AirWatch v8.0

2015 VMware, Inc. All rights reserved.


This document, as well as the software described in it, is furnished under license. The information in this manual may only be used in accordance with the terms of the license. This
document should not be reproduced, stored or transmitted in any form, except as permitted by the license or by the express permission of AirWatch, LLC.
All other marks and names mentioned herein may be trademarks or trade names of their respective companies.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.
Table of Contents
What's New 5
Introduction to Mobile Content Management (MCM) 6
Overview 6
In This Guide 10
Before You Begin 11
Overview 11
In This Section 11
Requirements 11
Recommended Reading 11
Content Management Setup 13
In This Section 13
Creating Content Categories 14
Whitelisting and Blacklisting File Types 15
Setting Required Content for AirWatch Content Locker Onboarding 16
Determining Storage Method 17
AirWatch Managed Content 18
Overview 18
In This Section 18
Uploading and Configuring Managed Content 18
Adding Document Versions 20
Uploading Content Batches to the AirWatch Admin Console 21
Corporate File Servers 22
Overview 22
In This Section 22
Adding an Admin Repository 23
Adding Content Repository Details 26
Adding a User Repository 28
Creating Content Exceptions 30
Personal Content 31
Overview 31
In This Section 32
Enabling Personal Content 32
Configuring the Content Viewer 36
Self-Service Portal 38
Managing User Storage Quotas 38

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 2
Integrating with Socialcast 39
File Storage 40
Overview 40
In This Section 40
Setting Admin Storage Capacity 41
Implementing Network File Storage 43
Content Management 45
Overview 45
In This Section 45
Navigating the Content Management Dashboard 46
Using the Content Management Dashboard 48
Using the Content List View 50
Using the Action Menu 51
User Facing Features 54
Overview 54
In This Section 54
Configuring AirWatch Content Locker 55
Deploying and Using AirWatch Applications 57
Using Custom URLs for Linking to Content with iOSAirWatch Content Locker 59
Configuring AirWatch Content LockerSync 59
Deploying and Using AirWatch Content Locker Sync 61
Configuring AirWatch Content Locker Outlook Add-In 61
Installing and Using the Outlook Add-In 62
SDK Functionality 66
Overview 66
In This Section 66
Authentication Type 67
Single Sign On (SSO) 69
Compromised Protection 69
Data Loss Prevention 70
Network Access Control 71
Offline Access 71
Geofencing 71
Branding 72
Logging 72
Analytics 73
AirWatch Content Locker Capabilities by Platform 75

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 3
Appendix Supported File Type by Platform Matrix 81
Finding Additional Documentation 83

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 4
What's New

What's New
AirWatch v8.0 supports several new features. The list below describes these features and where you can find them:
l Added repository support. See Adding an Admin Repository on page 23.

l New Personal Content Configurations.


o Configure the HTML5 viewer. See Configuring the Content Viewer on page 36
o Enable the View Only feature to lock shared links in a view only format. See Configure Shared Links. Enable Link
Sharing to allow end users to share links from the AirWatch Content Locker and the Self Service Portal. Complete
the fields that appear: on page 34.
o Share folders to external users. See Enabling Personal Content on page 32

l Enable end-users to upload their Personal Content in Socialcast by integrating with Socialcast. See Integrating with
Socialcast on page 39

l RFS 2.0. See File Storage on page 40.

l Managing Added Content now has a detailed explanation of the Action Menu. See Using the Action Menu on page 51

l Outlook Add-In enhancements. See Configuring AirWatch Content Locker Outlook Add-In on page 61.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 5
Introduction to Mobile Content Management (MCM)

Introduction to Mobile Content Management (MCM)

Overview
The use of mobile devices in the enterprise makes accessing corporate content easier and more convenient than ever
before, as they provide constant access to important material. However, the benefits of accessibility come with increased
security concerns for protecting sensitive corporate information. AirWatch offers a Content Management Strategy that
enables your organization to strike the delicate balance between accessibility and security.

Content Management Strategy


The AirWatchMobile Content Management solution helps your organization address the challenge of securely deploying
content to a wide variety of devices using a three part strategy.
l Configure Content in the AirWatch Admin Console Take action in the console on any of the three Types of
Content. Upload and configure AirWatch Managed content, sync and configure Corporate File Servers and/or
configure Personal Content in the AirWatch Admin Console.

l Configure AirWatch Features Configure the available AirWatch Features. The features include AirWatch Content
Locker, AirWatch Content Locker Sync and the Outlook Add-In. Your end users interact with these features directly,
and the configurations you set in the AirWatch Admin Console determine the level of freedom your end users have
accessing content in the AirWatch Content Locker.

l Deploy Content to Devices Deploy Managed Content, Corporate File Server Content, and/or Personal Content to
end user devices via the AirWatch Content Locker using the security parameters you configured in the AirWatch
Admin Console.

Types of Content
There are three primary forms of content that you configure in the AirWatch Admin Console. This content deploys to end
user devices in the AirWatch Content Locker: Uploaded AirWatch Managed Content, synced Corporate File Server
Content, and end user's Personal Content.
l AirWatch Managed Content Consists of files that you upload manually to the AirWatch Admin Console. Manage
uploaded content from the AirWatch Managed List View. End users view this content in the AirWatch Content
Locker.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 6
Introduction to Mobile Content Management (MCM)

l Corporate File Servers Consists of content synced from your corporate network repositories. Manage synced
content from the Corporate File Servers List View. End users access synced corporate content from their devices in
the AirWatch Content Locker.
Integrate your existing corporate infrastructure into the AirWatch Admin Console using the two available repository
types:
o Admin Repositories Admin repositories integrate directly into your corporate infrastructure to streamline
updating and managing content. After integration, AirWatch maintains a synchronous relationship with
repositories of up to 200 folders and deploys up-to-date content to the AirWatch Content Locker.
o User Repositories User repositories give end users access to specific folders of a repository, such as a user
folder in a Network Share or a specific folder in SharePoint. Configure a single user repository, from which all
users access their portion of the repository. There are two types of templates you can configure to give end
users access to these user-specific folders:
n Automatic Templates Dynamically assign end-users to their own folder or personal repository based on
look-up values. Admins can configure a single template from which all users can access their portion of the
repository.

n Manual Templates Enable end users to assign themselves to specific folders or repositories. Admins can
create one to many manual templates that will allow end users to add their own sites from SSP or AirWatch
Content Locker.

l Personal Content Personal Content consists of content end users add themselves from one of three places:
o Their device with AirWatch Content Locker. Enable Personal Content in the AirWatch Admin Console to:
n Create a separate Personal Content repository within the AirWatch Content Locker.

n Allow end users to securely add, manage, view and share their content from their device.

o Any web browser through their Self Service Portal. Enable Personal Content in the AirWatch Admin Console to:
n Create a separate My Content section within the Self-Service Portal.

n Allow end users to securely add, manage, view and share their content from the Self-Service Portal.

o Their personal computer with AirWatch Content Locker Sync. End users download AirWatch Content Locker
Sync to:
n Create a sync folder on their personal computer.

n Allow end users to securely add, manage, view and share their content from their Personal Computer.
Personal Content differs from AirWatch Managed and Corporate File Server content in that it is not directly managed
from a List View in the AirWatch Admin Console. Rather, Administrators configure permissions and behaviors in the
AirWatch Admin Console that specify the level of freedom or security end users have when adding, deleting and
sharing Personal Content.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 7
Introduction to Mobile Content Management (MCM)

Security
AirWatch provides security measures for every part of its content management strategy.
l Data at Rest in the Admin Console Protect AirWatch Managed Content and Personal Content at rest in the
console using role-based access to limit who can manage content deployment for your organization. Further protect
this content using security PINs for admin downloads. This PIN ensures that content stays within the AirWatch
Admin Console.

l Data in Transit Protect data in transit by leveraging the Mobile Access Gateway (MAG) for sending data using SSL.
AirWatch Content Locker settings remain protected using Secure Channel for distribution.

l Data at Rest on the Device Protect deployed content with AES 256-bit encryption. Additionally, the AirWatch
Content Locker for iOS v2.2+ utilizes NSFileProtectionComplete class to store content.

Managing Content
AirWatch Managed Content and Corporate File Servers display in the AirWatch Admin Console for easy accessibility and
management.

Note: You configure Personal Content in the AirWatch Admin Console, but end users upload and control it. As this
content is user specific, it does not display in a comprehensive list view within the console.

There are two primary locations within the AirWatch Admin Console for content access and management.
l Content Management Dashboard Provides a general overview of the content health of your entire device fleet,
reporting important statistics that allow you to take immediate administrative action, if necessary.

l Content List View Lists every file made available through AirWatch, and allows you to manage content on an
individual file level. The List View is split into two views: AirWatch Managed Content and Corporate FIle Server
Content.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 8
Introduction to Mobile Content Management (MCM)

Storing Content
The storage location of your content depends on your AirWatch deployment and the type of content you add. The
storage locations that do not require additional configuration are the default storage locations.
SaaS
AirWatch Cloud Corporate Server Remote File Storage
AirWatch Managed
Corporate File Servers
Personal Content *

On-Premise
AirWatch Server Corporate Server Remote File Storage Network File Storage
AirWatch Managed *
Corporate File Servers
Personal Content * *
* Indicates this file storage location requires additional configuration.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 9
Introduction to Mobile Content Management (MCM)

In This Guide
This guide explains how to deploy and manage content from the AirWatch Admin Console as well as configure the
AirWatch Content Locker to utilize advanced content management solutions.
l Before You Begin Details useful background information and things to keep in mind before diving into AirWatch
Mobile Content Management, including prerequisites and suggested reading.

l Content Management Setup Overviews configurations that are helpful to consider before uploading AirWatch
Managed Content, syncing Corporate File Server content, and enabling Personal Content.

l AirWatch Managed Content Explains how to upload content manually to the AirWatch Admin Console. End users
access uploaded content in the AirWatch Content Locker.

l Corporate File Servers Details the process for integrating into your existing corporate infrastructure to update and
manage content in one system. End users access integrated content in the AirWatch Content Locker.

l Personal Content Explains how to enable and configure Personal Content to enable end users to securely access
their own files from the AirWatch Content Locker.

l File Storage Overviews the different options for storing content separately from the AirWatch database.

l Content Management Details navigating the Content Dashboard, the Content List view, and the actions you can
take on content from these views.

l User Facing Features Overviews AirWatch Admin Console configurations for three key user facing features of
Content Management: AirWatch Content Locker, AirWatch Content Locker Sync, and the Outlook Add-In.

l SDK Functionality Details how the SDK can be used to enhance AirWatch Content Lockerfunctionality.

l AirWatch Content Locker Platform Capabilities Overviews AirWatch Content Locker capabilities by platform in a
comprehensive matrix .

l Appendix - Supported File Type by Platform Overviews the files supported in AirWatch Content Locker for iOS,
Android, Win 8.1/RT, and Win Phone 8.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 10
Before You Begin

Before You Begin

Overview
Prior to implementing Mobile Content Management, you should consider the following requirements, supporting
materials, and helpful suggestions from the AirWatch team. Familiarizing yourself with the information available in this
section will help prepare you for implementing Mobile Content Management.

In This Section
l Requirements Details requirements for successful Mobile Content Management.

l Recommended Reading Lists helpful background and supporting information available from alternate AirWatch
guides

Requirements
Ensure you have the proper Roles and Resources enabled to determine the level of access rights both end users and
administrators have within the AirWatch Content Locker.
l Enable Manage Content for end users by granting Full Access to a role or creating a Custom role to enable.

l Enable Content for Administrators to access the content management page. Additionally,enable Content Device
Install and Content Device Remove to control content distribution. Select a role that has these features enabled by
default, or create a custom role to ensure Administrators have the correct permissions.

Note: For more information on creating custom roles or selecting the appropriate default role, please read the Roles
and Added Resources Guide, available via AirWatch Resources.

Recommended Reading
This guide explains how to configure Mobile Content Management settings that directly effect how content is deployed
and accessed by end users in the AirWatch Content Locker. For a full explanation of the AirWatch Content Locker from a
end user perspective, please see the following guides which are available in the Resources Portal:
l AirWatch Content Locker for iOS User Guide Learn the fundamentals of AirWatch Content Locker for iOS.

l AirWatch Content Locker for Android User Guide Learn the fundamentals of AirWatch Content Locker for
Android.

l AirWatch Content Locker for Windows 8/RT User Guide Learn the fundamentals of AirWatch Content Locker for
Windows 8/RT.

l AirWatch Content Locker for Windows Phone 8 User Guide Learn the fundamentals of AirWatch Content Locker
for Windows Phone 8.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 11
Before You Begin

The Mobile Content Management Guide refers to other guides throughout. They include:
l Mobile Application Management (MAM) Guide Provides additional information on Single Sign-On and
integrating a Google Account with MDM.

l Mobile Access Gateway (MAG) Guide Supplies comprehensive information on the MAG.

l Mobile Email Management (MEM) Guide Contains configuration instructions on opening email attachments in
the AirWatch Content Locker.

l AirWatch Email Container (AWEC) Guide Provides comprehensive information on the AWEC.

l Roles and Added Resources Guide Supplies additional information on creating custom roles and appropriate
default roles.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 12
Content Management Setup

Content Management Setup


This section explains content settings that are beneficial to configure prior to uploading, syncing, or enabling content.
You can configure these settings at any time and change them as necessary, but doing so before you begin may help you
to start thinking about how you intend to manage your content.

In This Section
l Creating Content Categories Covers creating Content Categories to ensure you upload your AirWatch Managed
Content in an organized manner.

l Whitelisting and Blacklisting by File Types Details how to control the file types you can upload or sync as AirWatch
Managed content, Corporate File Server content, and Personal Content in the AirWatch Admin Console and the Self
Service Portal.

l Setting Required Content for AirWatch Content LockerOnboarding Explains how to enable Onboarding to keep
your end users from using their devices until they view required content.

l Determining Storage Method Overviews the different options for storing content, and directs you to the
appropriate resources for configuration instructions.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 13
Content Management Setup

Creating Content Categories


Before you begin uploading actual content into the AirWatch Admin Console, first take some time to add categories to
create an intuitive, highly organized document structure within the AirWatch Admin Console and in the AirWatch
Content Locker. Consider:
l Which users access content

l How users access content

l What the organization sub-groups are

l How deeply to tier content


Assigning categories adds an additional layer of organization to your files, allowing you to organize and search for your
documents with custom tags. Categories are searchable from the AirWatch Admin Console and display in the AirWatch
Content Locker in the AirWatch Content Repository.

Note: Content Categories only apply to AirWatch Managed Content and are unnecessary for content deployments
that solely utilize Content Repository Integration.

Use the following step-by-step instructions to add a category:

1. Navigate to Content Categories Add Category.

2. Configure the fields that appear:


l Managed By Select the Organization Group or
groups that you want the category to apply to.

l Name Create a name that is easily recognizable


and applies to a clear set of your content.

l Description Provide a brief description of the


category.

3. Save.

Adding Sub-Categories
Create sub-categories before adding content, because you cannot add subcategories to a folder with content in it. Use
the following step-by-step instructions to create a sub-category:
1. Navigate to Content Categories.

2. Select Add button from the Action Menu next to the Category you want to give a Sub-Category.

3. Provide a Name, Description and Organization Group, following the same conventions you used to configure

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 14
Content Management Setup

Categories.

4. Save.

Whitelisting and Blacklisting File Types


Use whitelisting or blacklisting by file type to specify the file types you can upload as AirWatch Managed Content, sync
through Corporate File Servers in the AirWatch Admin Console, as well as upload and sync as an end user via Personal
Content .
Whitelist, Blacklist, or permit the upload and download of Any files in the AirWatch Admin Console as well as the Self
Service Portal.
1. Navigate to Content Settings Advanced File Types.

2. Set Allowed File Types to one of the following:


l Whitelist Add or delete file types from the list that populates in the field in this default view. Separate
extensions using a new line, a comma or a space.

l Blacklist Provide the extensions you would like to exclude. Separate extensions using a new line, comma or a
space.

l Any Select to allow any file type for upload or sync.

3. Select Save to apply the configuration. If an admin or an end user attempts to download an unaccepted file type,
they receive an error message explaining that the file type they tried to upload is not allowed. Repositories apply the
configuration and sync specified file types without any end user or administrator interaction.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 15
Content Management Setup

Setting Required Content for AirWatch Content Locker Onboarding


Require end users to review and acknowledge training materials and videos before they are allowed to use the rest of the
applications on their devices.

Requirements
You must meet all three requirements in order to enable this feature.
l iOS AirWatch Content Locker v2.4+

l iOS 7+ device

l Supervised device

Requiring Content
1. Navigate to Content Settings Advanced Required Content.

2. Set Onboarding to Enabled to lock devices in the AirWatch Content Locker until end users read required content. Set
the additional configurations that appear, if desired:
l Administrative Unlock Code Set this code to override supervised mode as an admin.

l Entrance Message Provide a message to end users explaining that they must view the required content before
they can use their device.

l Exit Message Provide a message to end users explaining they viewed all the require content and are now free
to use their device.

3. Select Save.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 16
Content Management Setup

Determining Storage Method


Before you upload your content, it is important to understand where your content stores by default, and configure a
storage alternative, if desired. The storage location of your files depends on if your deployment is SaaS or On-Premise
and on the type of file you are storing.
SaaS
AirWatch Cloud Corporate Server Remote File Storage
AirWatch Managed
Corporate File Servers
Personal Content *

On-Premise
AirWatch Server Corporate Server Remote File Storage Network File Storage
AirWatch Managed *
Corporate File Servers
Personal Content * *
* Indicates this file storage location requires additional configuration.

Storage Options
The storage options include:
l AirWatch Cloud Store content directly into the AirWatch cloud when you upload AirWatch Managed Content or
end users upload Personal Content. You have 5 GB total for storage.

l AirWatch Server Store content directly onto the AirWatch Server when you upload AirWatch Managed Content or
end users upload Personal Content.

l Corporate Server Sync content stored on your Corporate File Server with AirWatch and display its meta data in the
AirWatch Admin Console.

l Remote File Storage Store Personal Content on-premise but as part of the AirWatch space as an alternative to
storing it in the AirWatch Cloud or the AirWatch Server.

l Network File Storage Store on-premise AirWatch Managed Content on a backend server to keep it from slowing
down your AirWatch Server.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 17
AirWatch Managed Content

AirWatch Managed Content

Overview
This section covers AirWatch Managed Content, which requires AirWatch administrators to manually upload content to
the AirWatch Admin Console.

In This Section
l Uploading and Configuring AirWatch Managed Content Explains how to upload content, individually or in bulk, to
the AirWatch Admin Console, and set deployment configurations that determine the behavior of content within the
AirWatch Content Locker.

l Adding Document Versions Overviews the AirWatch capability to upload multiple versions of a file from the
Content List View.

l Uploading Content Batches to the AirWatch Admin Console Covers how to add content in bulk if you have a
hardened network on a dedicated SaaS or on-premise deployment and do not want to integrate with repositories.

Uploading and Configuring Managed Content


Upload Managed Content to the console individually or in bulk. Determine the behavior and security level of this content
when it deploys to end users in the AirWatch Content Locker by configuring the Info, Details, Security, Assignment and
Deployment settings in the upload screen that appears.

Prerequisites
Meet the following prerequisites in order to successfully add and configure AirWatch Managed Content:
l Establish content Categories and Sub-Categories before uploading content. You cannot add subcategories to
categories that have content in them.

Uploading and Configuring


1. Navigate to Content List View. You can upload your content into the AirWatch Admin Console in one of two ways:
l Add Content Select Add Content and choose Select Files. Then select the file or files you want to upload from
the file dialog.

l Drag and Drop Upload multiple files or folders at once to save time using one of the two methods below:
o Multi-Select Select multiple files and select Open.
o Drag and Drop Select multiple files from your computer and drop them directly into the AirWatch
Managed List View window.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 18
AirWatch Managed Content

2. Configure content Info settings:


l Name Review the file name that automatically populates in this field.

l Organization Group Review the Organization Group this content deploys to.

l File Review the file that automatically populates in this field.

l Storage Type Ensure the field says AirWatch Managed.

l Version Ensure the version is 1.0 since you are adding this content to the AirWatch Admin Console for the first
time. You can upload new versions from the Action Menu in the AirWatch Managed List View.

l Description Provide a description of the file(s) you uploaded.

l Importance Set the content importance as High, Normal or Low.

l Category Map content to a configured Category.

3. Provide additional metadata about content in the Details settings:


l Author Name the author of the file.

l Notes Provide notes on the file.

l Subject Provide a subject.

l Keywords List Keywords and topics this file covers.

4. Complete the fields on the Security tab to control how end users share and move sensitive documents outside of
corporate mediums.
l Document Sharing Leave the settings in this section disabled for maximum security, or enable them for
maximum end user collaboration freedom.
o Access Control Set to Allow Offline Viewing to give end users the most viewing freedom for their
document. Configure Allow Online Viewing Only to ensure that all devices accessing content are
compliant, as AirWatch cannot scan offline devices for compliance.
o Force Encryption Select to force documents to open in the AirWatch Content Locker.
o Open in Email Allow content to open in emails.
o Allow Open in Third Party Apps Give permission to open this content in other applications. You can set a
list of approved apps in the SDK Profile.
o Allow Saving to Other Repositories Select to allow your end users to save this file to their Personal
Content.
o Enable Watermark Select to add a watermark overlay to the file.
Configure the Overlay Text for the watermark as part of an SDK profile.

l Allow Printing Give permission for the application to print from devices. Once printed, content falls out of the
control of the AirWatch Administrator.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 19
AirWatch Managed Content

Note: Only PDF documents from the iOS AirWatch Content Locker print via AirPrint server.

l Allow Edit This setting only applies to write-enabled repositories.

5. Tailor the Assignment settings to control which users have access to content. This function ensures that only
authorized employees have access to confidential or sensitive material and allows you to set up a tiered hierarchy of
content access.
l Device Ownership Define as Any, Corporate-Dedicated, Corporate-Shared, Employee Owned or Undefined.

l Organization Groups Start typing in the field to assign the content to a new group..

l User Groups Designate groups if you are integrating with Directory Services or custom user groups.

6. Use the Deployment settings to control how and when your end users access content.
l Transfer Method Specify Any method or Wi-Fi Only from the dropdown menu. Restricting transfers to Wi-Fi
forces devices to check in with AirWatch to ensure compliance.

l Download While Roaming Enable to allow your end users to download content while roaming.

l Download Type Set to deploy content one of two ways:


o Automatically Installs on devices as soon as content becomes available.
o On Demand Installs on devices only at the end user's request.

l Download Priority Define to let your end users know if the content download is Normal, High or Low priority.

l Required Select to flag content as required in the AirWatch Content Locker. End users must download and
review required content in order for their devices to maintain compliance withAirWatch.

l Effective Date and Expiration Date Specify to configure a limited range of content availability.

7. Select Save.

8. Manage your newly added content from the Content List View.

Adding Document Versions


Once you upload content to the AirWatch Admin Console, it displays in the Content List View, and is available for
administrative action. From the Action Menu in the Content List View, you can replace the original file with an updated
version. Please see Adding Versions of AirWatch Managed Content on page 52 for information about adding document
versions and other administrative actions available from the Action Menu in the Content List View.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 20
AirWatch Managed Content

Uploading Content Batches to the AirWatch Admin Console


Utilize this option if you have a hardened network on a dedicated SaaS or on-premise deployment and do not want to
integrate with an external file share, but still want to quickly add content.
1. Navigate to Content Batch Status.

2. Select Batch Import.

3. Provide a Batch Name and a Batch Description.

4. Select the information icon ( ) to download a .csv template file.

5. Fill out the .csv file with the file path and other information for content you want to upload.

6. Select Choose File and choose your .csv you created.

7. Select Open to select the .csv.

8. Select Save to upload your populated Batch File.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 21
Corporate File Servers

Corporate File Servers

Overview
This section covers syncing Corporate File Servers with the AirWatch Admin Console for management from the List View.
Sync AirWatch with your Corporate File Servers to:
l Integrate with SharePoint and Network File Systems.

l Synchronize SharePoint libraries with AirWatch Content Locker.

l Apply defaults for security assignment or deployment.

l View author, version, file path and last modified date.

l Authenticate using SharePoint credentials (AD/LDAP).

l Browse approved SharePoint folders and documents.

l Secure access to SharePoint without VPN (using MAG).


Integrate your existing corporate infrastructure into the AirWatch Admin Console using the two available repository
types:
l Admin Repositories Admin repositories integrate directly into your corporate infrastructure to streamline updating
and managing content. After integration, AirWatch maintains a synchronous relationship with repositories of up to
200 folders and deploys up-to-date content to the AirWatch Content Locker.

l User Repositories User repositories give end users access to specific folders of a repository, such as a user folder in a
Network Share or a specific folder in SharePoint. Configure a single user repository, from which all users access their
portion of the repository. There are two types of templates you can configure to give end users access to these user-
specific folders:
o Automatic Templates Dynamically assign end-users to their own folder or personal repository based on look-
up values. Admins can configure a single template from which all users can access their portion of the repository.
o Manual Templates Enable end users to assign themselves to specific folders or repositories. Admins can create
one to many manual templates that will allow end users to add their own sites from SSP or AirWatch Content
Locker.

In This Section
l Adding an Admin Repository Covers integrating with your existing repository structure to send software, files and
other content to devices.

l Adding Content Repository Details Details editing the Security, Assignment and Deployment options for your
Admin and User Added repositories.

l Adding a User Repository Explains the configurations for enabling user added and automatic user repositories in

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 22
Corporate File Servers

the Self-Service Portal.

l Creating Content Exceptions Explains how to deploy repository content to a specific user segment.

Adding an Admin Repository


Integrate with your existing content repositories so that end users can access internal content from the AirWatch
Content Locker.
1. Navigate to Content Repositories Admin Repositories.

2. Select Add.

3. Complete the fields in the screen that appears:


l Name Label the content directory.

l Type Provide the type of content repository with which you wish to integrate.

o Unknown Default to Network


Share or SharePoint WebDAV,
depending on the link URL.
o Network Share Shared Drive or
Network Folder.
o WebDAV Any WebDAV supported
server and/or file share.
o SharePoint SharePoint Web
Services.
o SharePoint WebDAV WebDAV for
backward compatibility from
SharePoint WebServices.
o SharePoint O365 SharePoint Web
Services hosted in the cloud by
Office 365.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 23
Corporate File Servers

o SharePoint O365 ADFS SharePoint Web Services hosted in the cloud by Office 365 with Active Directory
Federation Services authentication.
o SharePoint Windows Auth SharePoint web services supporting NTLM and Kerberos authentication.
o SharePoint ADFS SharePoint Web Services supporting Active Directory Federation Services
authentication.
o Google Drive Google's cloud file hosting service.
o OneDrive Microsoft's cloud file hosting service.
o OneDrive ADFS Microsoft's cloud file hosting service supporting Active Directory Federation Services
authentication.
o SharePoint - Personal (MySites) SharePoint Web Services for Personal Sites.
o SharePoint O365 - Personal (OneDrive Pro) SharePoint Web Services for Personal Sites hosted in the
Cloud by Office 365.
o SharePoint O365 ADFS - Personal (OneDrive Pro) SharePoint Web Services for Personal Sites hosted in
the Cloud by Office 365 with Active Directory Federation Services authentication..
o CMIS Content Management Interoperability Services is an open standard that allows different content
management systems to inter-operate over the Internet.
o Box Repository support with Box Integration.

l Link Provide the full path to the directory location rather than the root domain.
For example, input http://SharePoint/Corporate/Documents instead of http://SharePoint.

l Organization Group Select the level with access to this Content Repository to control which end users can
access Administered Content.

l Authentication Type Set to User to require end users to authenticate into administered content repositories
from their devices on the AirWatch Content Locker using credentials.
o Username and Password Complete the fields that appear when you select User. Enter in service account
credentials to allow browsing of the repository file structure.

Note: Select None for a non-administered content repository. This choice keeps all AirWatch
Administrators from viewing the contents of folders from the AirWatch Admin Console.

l Access via EIS/MAG Enable to communicate with a SharePoint directory within the corporate network.
Complete this action if the file system or SharePoint drive is not accessible from AirWatch servers domain.

Note:When setting up repository access via the MAG, the entire folder hierarchy does not sync when you
add the repository. By default, repository content only syncs up to two folder levels. Other sub-folders sync
as the AirWatch Admin Console or devices request them. On the Console, the sync occurs when performing a
manual sync action inside of a sub-folder. On the device, the sync occurs when an end user navigates to a

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 24
Corporate File Servers

sub-folder.

For additional information on the MAG, refer to the AirWatch Mobile Access Gateway Guide in the Resource
Portal.

l Allow Inheritance Select to allow child Organization Groups to access this Content Repository.

l Enable Sync Select to allow the AirWatch Admin Console to periodically sync with your repository.

l Allow Write Select to provide write access to the Admin Repository. Write access allows end users to create
and upload files and folders, edit documents and check-in/check-out files to external repositories on their
devices.

4. Select Test Connection to verify connectivity. If successful, the content repository is successfully added.

5. Select Continue to automatically redirect to the Add Content Repository Details Screen and finish configuring your
Admin Repository.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 25
Corporate File Servers

Adding Content Repository Details


Configure Security, Assignment and Deployment details to ensure the content of a newly synced admin repository
remains secure. You automatically redirect to this page when you click Continue while adding an Admin Repository.
You can reconfigure these setting at any time by selecting Edit from the Action Menu in the Corporate File Servers List
View or the Admin Repositories List View.

Note: The fields for the Security, Assignment and Deployment are identical for Admin Repositories and User Added
Repository templates.

1. Complete the fields on the Security tab to control how end users share and move sensitive documents outside of
corporate mediums.

l Document Sharing Leave the settings in this section disabled for maximum security, or enable them for maximum
end user collaboration freedom.
o Access Control Set to Allow Offline Viewing to give end users the most viewing freedom for their document.
Configure Allow Online Viewing Only to ensure that all devices accessing content are compliant, as AirWatch
cannot scan offline devices for compliance.
o Force Encryption Select to force documents to open in the AirWatch Content Locker.
o Open in Email Allow content to open in emails.
o Allow Open in Third Party Apps Give permission to open this content in other applications. You can set a list
of approved apps in the SDK Profile.
o Allow Saving to Other Repositories Select to allow your end users to save this file to their Personal Content.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 26
Corporate File Servers

o Enable Watermark Select to add a watermark overlay to the file.


Configure the Overlay Text for the watermark as part of an SDK profile.

l Allow Printing Give permission for the application to print from devices. Once printed, content falls out of the
control of the AirWatch Administrator.

Note: Only PDF documents from the iOS AirWatch Content Locker print via AirPrint server.

l Allow Edit This setting only applies to write-enabled repositories.

4. Tailor the Assignment settings to control which users have access to content. This function ensures that only
authorized employees have access to confidential or sensitive material and allows you to set up a tiered hierarchy of
content access.
l Device Ownership Define as Any, Corporate-Dedicated, Corporate-Shared, Employee Owned or Undefined.

l Organization Groups Start typing in the field to assign the content to a new group..

l User Groups Designate groups if you are integrating with Directory Services or custom user groups.

5. Use the Deployment settings to control how and when your end users access content.
l Transfer Method Specify Any method or Wi-Fi Only from the dropdown menu. Restricting transfers to Wi-Fi
forces devices to check in with AirWatch to ensure compliance.

l Download While Roaming Enable to allow your end users to download content while roaming.

l Download Type Set to deploy content one of two ways:


o Automatically Installs on devices as soon as content becomes available.
o On Demand Installs on devices only at the end user's request.

l Download Priority Define to let your end users know if the content download is Normal, High or Low priority.

l Required Select to flag content as required in the AirWatch Content Locker. End users must download and
review required content in order for their devices to maintain compliance withAirWatch.

l Effective Date and Expiration Date Specify to configure a limited range of content availability.

6. Select Save.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 27
Corporate File Servers

Adding a User Repository


User repositories give end users access to specific folders in a large repository, such as a user folder. Configure a single
user repository, from which all users access their portion of the repository. You can implement user repositories as a
scalable alternative to admin repositories for a number of reasons, including:
l Not all of your end users have access to the root share path you established as an admin repository.

l The 'share path' you configured is not a folder, but a dynamic link.

l You have multiple 'user' folders at the root share path and do not want end users to see other users' folders.

l You have an extremely large amount of folders (over 1,000)at your root share path.

l You have a large number of repositories and dont want the administrative overhead of adding each one.
There are two types of templates you can configure to give end users access to these user-specific folders:
l Automatic Templates Utilize look-up values to automatically create a user repository via the provided link and
look-up field.

l Manual Templates Create a template with a repository link that end users match in the Self Service Portal to add
their own repositories.

Automatic Templates
Automatic templates create a user repository in the AirWatch Content Locker upon end user login. After you add the
template, you can check which end users have the end user repository on their device by selecting Show Users from the
Action Menu toolbar on the Automatic Templates List View.
1. Navigate to Content Repositories Templates Automatic. Select Add.

2. Complete the fields under the Info tab:


l Name Label the content directory.

l User Repository Name Use look-up values to select the name that displays to the end user in the AirWatch
Content Locker.

l Repository Type Provide the type of content repository with which you wish to integrate.

l Link Use look-up values to automatically create a user repository when an end user accesses the AirWatch
Content Locker.
For example: https://sharepoint.acme.com/share/{EnrollmentUser}

l Organization Group Select the level with access to this Content Repository to control which end users can
access uploaded content.

l Access via EIS/MAG Enable to communicate with a SharePoint directory within the corporate network.
Complete this action if the file system or SharePoint drive is not accessible from AirWatch servers domain.

Note:When setting up repository access via the MAG, the entire folder hierarchy does not sync when you
add the repository. By default, repository content only syncs up to two folder levels. Other sub-folders sync

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 28
Corporate File Servers

as the AirWatch Admin Console or devices request them. On the Console, the sync occurs when performing a
manual sync action inside of a sub-folder. On the device, the sync occurs when an end user navigates to a
sub-folder.

For additional information on the MAG, refer to the AirWatch Mobile Access Gateway Guide in the Resource
Portal.

l Allow Inheritance Enable to allow child Organization Groups access.

l Allow Write Select to provide write access to the Admin Repository. Write access allows end users to create
and upload files and folders, edit documents and check-in/check-out files to external repositories on their
devices.

3. Complete the remaining fields under the Security, Assignment and Deployment tabs using the same parameters as
an Admin Repository.

4. Select Save.

Manual Templates
1. Navigate to Content Repositories Templates Manual Add.

2. Complete the fields under the Info tab:

l Name Label the content directory.

l Link Provide the path to the directory


location using * as a wild-card for a
domain link.
For example http://*.sharepoint.com
o Repository Type Select the type
of content repository with which
you wish to integrate from the
drop down menu.
o Add Select to add more links and
repository types.

l Organization Group Select the level with access to this Content Repository to control which end users can
access uploaded content.

l Access via EIS/MAG Enable to communicate with a SharePoint directory within the corporate network.
Complete this action if the file system or SharePoint drive is not accessible from AirWatch servers domain.

Note:When setting up repository access via the MAG, the entire folder hierarchy does not sync when you
add the repository. By default, repository content only syncs up to two folder levels. Other sub-folders sync

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 29
Corporate File Servers

as the AirWatch Admin Console or devices request them. On the Console, the sync occurs when performing a
manual sync action inside of a sub-folder. On the device, the sync occurs when an end user navigates to a
sub-folder.

For additional information on the MAG, refer to the AirWatch Mobile Access Gateway Guide in the Resource
Portal.

l Allow Inheritance Enable to allow child Organization Groups access.

l Allow Write Select to provide write access to the Admin Repository. Write access allows end users to create
and upload files and folders, edit documents and check-in/check-out files to external repositories on their
devices.

3. Complete the remaining fields under the Security, Assignment and Deployment tabs using the same parameters as
an Admin Repository.

4. Direct end users to the Self Service Portal where they can manually add and access their repository.

Creating Content Exceptions


When integrating with a repository,you may want to deploy content to very specific user segments. Easily manage
exceptions by browsing to desired content on the Corporate File Server List View and selecting Edit from the Action
Menu. Edited settings only affect the selected repository content.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 30
Personal Content

Personal Content

Overview
Personal Content consists of content end users add themselves from one of three places:
l Their device with AirWatch Content Locker. Enable Personal Content in the AirWatch Admin Console to:
o Create a separate Personal Content repository within the AirWatch Content Locker.
o Allow end users to securely add, manage, view and share their content from their device.

l Any web browser through their Self Service Portal. Enable Personal Content in the AirWatch Admin Console to:
o Create a separate My Content section within the Self-Service Portal.
o Allow end users to securely add, manage, view and share their content from the Self-Service Portal.

l Their personal computer with AirWatch Content Locker Sync. End users download AirWatch Content Locker Sync to:
o Create a sync folder on their personal computer.
o Allow end users to securely add, manage, view and share their content from their Personal Computer.
Personal Content differs from AirWatch Managed and Corporate File Server content in that it is not directly managed
from a List View in the AirWatch Admin Console. Rather, Administrators configure permissions and behaviors in the
AirWatch Admin Console that specify the level of freedom or security end users have when adding, deleting and sharing
Personal Content.

Note: This guide covers the Administrative actions that pertain to enabling and configuring user settings for Personal
Content. Please read the AirWatch Content Locker User Guide in the appropriate platform for a comprehensive look
at adding, managing and sharing Personal Content as an end user from the AirWatch Content Locker application, the
Self Service Portal or AirWatch Content Locker Sync. These guides are available in the Resource Portal.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 31
Personal Content

1. End User Files Any AirWatch Content Locker supported file types end users want to access from multiple devices.

2. Uploading content End users can upload Personal Content in one of three ways:
l Add content to mobile devices via the Content Locker

l Upload content to the Self-Service Portal

l Sync content through a shared folder with AirWatch Content Locker Sync

3. Personal Content Repository End user added, uploaded and synced content pools in their Personal Content
Repository.

4. Downloading Content End users access their Personal Content repository in one of three ways:
l Content Locker

l Self-Service Portal

l Content Locker Sync

5. View Files on Devices End users can combine all three access options to make sure that they can view their
personal content whenever, and wherever they want.

In This Section
l Enabling Personal Content Overviews the settings and AirWatch Admin Console side configurations provided for
enabling Personal Content.

l Configuring the Content Viewer Details how to configure the HTML5 Content Viewer for advanced Personal Content
viewing security.

l Self-Service Portal Explains the basic function of the Self-Service Portal and its importance to Personal Content.

l Integrating with Social Cast Overviews the Social Cast integration process which allowed end users to upload
personal content into Social Cast.

l Managing User Storage Quotas Details how to edit and delete content, as well as export data to a CSV.

Enabling Personal Content


Enable and configure Personal Content in the AirWatch Admin Console so that end users can download and manage
their Personal Content in the AirWatch Content Locker and the Self-Service Portal.

Prerequisites
You must meet the following prerequisite to configure Storage Allocations:
l Customer level Organization Group.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 32
Personal Content

Enabling and Configuring


1. Navigate to Groups and Settings All Settings Content Personal Content.

2. Set Personal Content to Enabled to ensure that your end users can upload and view their Personal Content from
your AirWatch Content Locker application.

3. Configure Storage Allocations:

l Storage Quota Display the total available


storage for Personal Content for all users at or
below the Organization Group.

l Storage Quota Slider Allocate available


Personal Content storage. By default, the slider is
positioned to the far right, meaning that no limit
is set to Personal Content storage.

l User Quota Enter a quota in MB into the field


to set a general quota for users.

l User Group Quota(s) Select Add New and


configure quotas by User Group to override the
general User Quota.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 33
Personal Content

4. Configure Shared Links. Enable Link Sharing to allow end users to share links from the AirWatch Content Locker and
the Self Service Portal. Complete the fields that appear:

l View Only Enable to set View Only


as the default for shared links. You
must configure the HTML5 viewer for
this feature to work.
Disable to leave the fields open for end
users to configure when they share
their links. You must configure the
HTML5 viewer for this option to
display.

l Auto Expire Days Enable and fill in a


numerical value to specify the number
of Days links remain available for
sharing.
Disable to leave the fields open for end
users to configure when they share
their links.
l Auto Expire Downloads Enable and input a numerical value to set the maximum number of Downloads
before the link expires.
Disable to leave the fields open for end users to configure when they share their links.

l Require Password Protection Enable and set the Minimum Length in characters and the Complexity of the
password.
Disable to leave the fields open for end users to configure when they share their links.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 34
Personal Content

5. Configure Shared Folders. Enable Folder Sharing to allow end users to share folders from the Self-Service Portal or
the AirWatch Content Locker. Complete the fields that appear:

l Share with External Users Enable to allow end users to share folders with external users, and complete the
settings that appear:
o Available Sharing Roles Select Editor to enable external users to edit the shared folders. Select Reader
to limit external users to a read-only role. Select Editor and Reader to enable end users sharing folders to
select the role for the external user.
Editor Reader
View File and Folders
Download Files to Computer *
Add Comments to Files
Upload Files to Folder
Delete Files or Sub-folders
Edit Files
View Other Folder Collaborators
View Other Collaborators Activity in Feed

o Allow External Reader to Download* Enable to give the reader role permission to download shared
content to their computer.
o User Quota Leave the quota at 0 to have all external user uploads count against the folder sharer's
quota.
Set a quota to give external users dedicated space for uploads.

6. Configure Email Notification:

l Email Notifications Enable to alert


users via email that another user shared
a folder with them.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 35
Personal Content

7. Leave the Data Loss Prevention settings Disabled for maximum security, or move them to Enabled to provide your
end users with maximum collaboration freedom.

l Allow Open in Email Enable to


allow content to open in emails.
Disable for maximum security.

l Allow Open in Third Party Apps


Enable to open personal content
in other applications. You can set
a list of approved apps in the SDK
Profile.
Disable for maximum security.

l Allow Printing Enable printing of personal content. Once printed, content falls out of the control of the
AirWatch Administrator.
Disable for maximum security.

Note: Only PDF documents via the AirPrint server from the iOS AirWatch Content Locker print.

l Watermark Enable to apply a dynamic email watermark to files rendered in the HTML5 Viewer. By default, the
user's email applies as the file's watermark. You can reconfigure the watermark text in the SDK.

Configuring the Content Viewer


Render files stored in RFS in a HTML5 Content Viewer to convert files to images for viewing purposes, increasing their
overall security. The benefits of the HTML5 Viewer Include:
l Minimizing the amount of actual content end users have on their devices.

l View-Only capabilities for shared files.

l Ability to apply dynamic watermarking to files.

Requirements
l Configure and install RFS 2.0 on your organization's server.

Note: For configuration instructions, please see the RFS Installation Guide available in the Resources Portal.

l Install Content Rendering Engine 1.0 on your organization's server.

l Customer level Organization Group.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 36
Personal Content

Configurations
1. Navigate to Content Settings Content Viewer.

2. Select Configure.

3. Complete the fields that appear:

l Assignment Assign an active RFS node. The content from this node gets delivered to the Content Viewer for
rendering in the Self Service Portal.
o RFS Node Select an RFS Node from the same network or data center as the Content Rendering Engine for the
best performance.

l Details Provide appropriate details to name and locate the Content Rendering Engine.
o Name Provide a name for the content viewer. This name displays in the AirWatch Admin Console.
o CRE URL Provide the externally accessible URL for the CRE you set up on your server.

l Authentication The content rendering engine requires a public certificate to establish trust.
o Public SSL Certificate Assign the certificate used to establish trust between the rendering engine and the
content viewer.

l Summary Verify the settings and press Save to finish the configuration.

4. Set Content Viewer to Enabled.

5. Select Download under the Installer column and follow the prompts to download the viewing engine.

6. Activate the Content Rendering Engine to ensure a successful connection between AirWatch, the Content Rendering
Engine, and RFS by moving the Active status to the left. An active status displays as a green button.

7. Save.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 37
Personal Content

Self-Service Portal
Enable Personal Content to enable end users to upload an manage their own content from the Self-Service Portal. As the
administrator, you control what actions end users can take in the Self-Service Portal. However, adding, deleting, and
sharing content from the Self-Service Portal are user dependent actions. Please see the Personal Content section of the
AirWatch Content Locker End User Guide in the appropriate platform in the Resources Portal for step by step
instructions on using and downloading the app.

Managing User Storage Quotas


Manage Personal Content from the User Storage Screen. Use this screen to edit and delete user's stored content, as well
as export data to a CSV.
1. Navigate to Groups and Settings All Settings Content User Storage.

2. View the available content using the Summary overview available on the main screen.

3. Select Edit to override User Storage on an individual level. This takes precedence over Organization Group or User
Group storage quota configurations.

4. Select Delete to enter a pin and delete a user's content. A pin configuration is in place to protect user content from
being deleted by administrators without precaution.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 38
Personal Content

Integrating with Socialcast


AirWatch now supports Socialcast integration capabilities, allowing end-users to upload their personal content files to
Socialcast. Integration requires configurations in both the AirWatch Admin Console and the Socialcast Admin Console.
Enable your end users to upload their personal content in Socialcast by completing the following configurations:
l Generating an API token in the AirWatch Admin Console

l Uploading the API token in the Socialcast Admin Console

Generating an API token in the AirWatch Admin Console


1. Navigate to Groups and Settings All Settings System Advanced API Rest API Add.

2. Complete the fields that appear to generate your token:


l Service Enter Socialcast as the service name.

l Account Type Select Admin from the dropdown menu.

l API Key Copy the key that automatically generates.

3. Save.

Uploading the API token in the Socialcast Admin Console


1. Log into the Socialcast Admin Console.

Note: For more information on setting up a Socialcast Community, please see


http://developers.socialcast.com/admin/setting-up-a-socialcast-community/.

2. Navigate to the Security tab.

Note: For more information on Security configurations for Socialcast, please see
http://developers.socialcast.com/admin/customizing-the-community/security/#restrict-attachments.

3. Enable Secure Content Locker attachments and complete the fields:


l AirWatch Domain Provide the URL of your AirWatch instance.

l API Key Paste the API key you copied from the AirWatch Admin Console into the field.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 39
File Storage

File Storage

Overview
File Storage is an alternative solution for saving content that enables you to save your files separately from the AirWatch
database without sacrificing security.
AirWatch offers a couple of file storage options for the following scenarios:
l If you are not integrating with a content repository.

l If you are not uploading content directly do the AirWatch Console.

l If you want to separate end-user Personal Content in its own file server.
There are two options available for file storage. The option that works best for you depends on your deployment
strategy and organization needs. These options include:
l Network File Storage On-premise customers can set up Network File Storage to store content in an alternate
backend storage server, instead of directly in the AirWatch database. This approach can help save space in your
AirWatch database and increase download/upload times.

l Remote File Storage Both SaaS and on-premise customers can set up Remote File Storage in their internal network
to store end-user Personal Content. The main benefit of this approach over NFS is that it can be used to set up
multiple RFS instances in different countries that may have their own data storage and privacy laws. Remote file
storage is a high availability, scalable solution for storing personal content. Additionally, RFS supports integration
with the Content Rendering Engine. This provides increased security for Personal Content files shared from the Self-
Service Portal. For more information on installing RFS , please see the RFS Install Guide, available on the Resources
Portal.

In This Section
l Setting Admin Storage Capacity Details setting the amount of storage capacity for content, by Organization Group.

l Implementing Network File Storage Explains how to implement Network File Storage (NFS) to leverage a separate
backend file storage folder.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 40
File Storage

Setting Admin Storage Capacity


Set the amount of storage capacity for content, by Organization Group. Once the content capacity is reached, you
cannot add any more content. End user's can view the amount of space that they have available for uploads in their Self-
Service Portal.

Requirements
l On-premise deployment

l Customer or Global Organization Group level

Setting Capacity
1. Navigate to Groups & Settings All Settings Admin Storage.

2. Select Content from the Type dropdown menu.

3. Select the Edit icon, a pop-up window displays.

4. Complete the form:


l Organization Group Name Specify the group you want to apply content storage restrictions to.

l Application Configure the storage parameters for a content application including:


o Capacity Set maximum storage space in MB a content application can use.
o Overage Allowed Specify the amount of overage you want to allow, if any.
o Max File Size Set the largest size, in MB, of a file you can upload.
o Encryption Set AES - 256 file level encryption on all Administered Applications to ensure data security and
privacy.

l Content Configure the storage parameters for content including:


o Capacity Set maximum storage space in MB your content can take up.
o Overage Allowed Specify the amount of overage you want to allow, if any.
o Max File Size Set the largest size, in MB, of a file you can upload.
o Encryption Set AES - 256 file level encryption on all Administered Content to ensure data security and
privacy.

5. Save.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 41
File Storage

Migrating Data
Migrate existing data to an encrypted state using the File Migration Scheduler. Set your scheduler to run at a defined
interval. Migration only occurs for Tenant Organization Groups that have encryption enabled.
1. Navigate to Groups & Settings All Settings Admin Scheduler.

2. Use the Search bar to find the File Encryption Migration Scheduler.

3. Select Edit from the Action Menu.

4. Edit the migration frequency by configuring the Recurrence Type fields:


l Schedule Type Select a schedule from the dropdown menu. The configuration options that appear change
depending on the schedule type you select.
o Daily Set the Frequency as the total number of times you want the scheduler to run. Enable Weekdays
Only to limit migration to Monday through Friday.
o Monthly Set the Frequency as the total number of times you want the scheduler to run. Specify a Day of
the month you want migration to occur by entering a numerical value into the field. Alternatively, enable
End of the Month to set migration at the end of the calendar month.
o Weekly Set the Frequency as the total number of times you want the scheduler to run. Enable the day of
the week you want to migrate on. You can enable multiple days.
o Simple Set the Frequency as the total number of times you want the scheduler to run. Apply an Interval
Type in Hours or Minutes to the Frequency, using the dropdown menu.

5. Edit the Range of dates in which migration occurs:


l Start Choose a date and time of day for migration to occur.

l End Enable No End Date to perpetually migrate data. Alternatively, enable End By and set a specific date in
which to cease migration.

6. Select Save.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 42
File Storage

Implementing Network File Storage


On-premise customers can implement Network File Storage (NFS) to leverage a separate backend file storage folder, if
you opt to add content directly to the AirWatch Admin Console. File storage serves as an alternative to storing AirWatch
Managed content in your AirWatch database.
You should consider making this change if:
l You are deploying large files as AirWatch Managed content.

l You are pushing out a large number of documents through AirWatch. File storage will help conserve space in your
database by storing your content files elsewhere.

Network File Share Requirements


You must meet the following requirements for the NFSserver you are hosting on-premise:

Network Configurations
Configure the file storage process using the SMB or NFS protocol.
l Samba, which uses SMB, requires opening ports 445 and 139.

l NFS requires opening ports 111 and 2049.

Server Configurations
Create the shared folder on any server that connects to the device services server(s), console server(s) and AirWatch
database.

Service Account with Correct Permissions


In order for the AirWatch console to authenticate to the shared location, you need a domain service account with read
and write permissions to the shared storage directory. You can use the same service account that is configured to access
your AirWatch database since this should have access to all AirWatch services.

Configuring Network File Storage


Configure Network File Storage settings in the AirWatch Admin Console.
1. Navigate to Groups &Settings All Settings Installation File Path and scroll to the bottom of the page.

2. Select File Storage Enabled, and configure the fields that appear:
l File Storage Path Enter your path in the following format: \\{Server Name}\{Folder Name}, where Folder Name
is the name of the shared folder you created on the server.

l File Storage Caching Enabled Enable if you have a weak connection between the web server and the Network
File Storage server. If you enable caching, accommodate for the amount of space needed on the web server
where these files will be cached.

l File Storage Impersonation Enabled Select to add a service account with the correct permissions.
o File Storage Impersonation Username Provide for a valid service account with both read and write
permissions to the shared storage directory.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 43
File Storage

o Password Provide for a valid service account with both read and write permissions to the shared storage
directory.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 44
Content Management

Content Management

Overview
There are two primary locations within the AirWatch Admin Console for content access and management.
l Content Management Dashboard Provides a general overview of the content health of your entire device fleet,
reporting important statistics that allow you to take immediate administrative action, if necessary.

l Content List View Lists every file made available through AirWatch, and allows you to manage content on an
individual file level. The List View is split into two views: AirWatch Managed Content and Corporate FIle Server
Content.
This section of the guide overviews the navigation and management features available from the Content Management
Dashboard and the Content List View.

In This Section
l Navigating the Content Management Dashboard Overviews the main navigation menu for content management
available from the Content Management Dashboard.

l Using the Content Management Dashboard Covers the management capabilities of the Content Management
Dashboard.

l Using the Content List View Describes the actions you can take from the AirWatch Managed List View and the
Corporate File Servers List View.

l Using the Action Menu Learn about the available menu options for managing content.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 45
Content Management

Navigating the Content Management Dashboard


View and manage the general content status of your device fleet from the Content Management Dashboard.The Content
Management Dashboard is the default content view. Use this centralized page in the console gain immediate insights
about your users and content for business decisions, as well as address warnings.

In addition to this default view in the console, there are several other screens that simplify content management. They
display in a secondary navigation menu in the AirWatch Admin Console to the left of the Content Dashboard.
This menu includes:
1. Content Management Dashboard Overview the device fleet's content behavior from the Dashboard in this default
view.

2. Content List View Use this view to Add Content and use the Action Menu to manage any added content from the
comprehensive List View.

3. Repositories Select Repositories to access all your configuration options for repositories. There are two types of
repositories, admin added repositories and user added repositories. Users add repositories using the Templates you
configure in the console.
l Admin Repository Use this view to Add Admin Repositories. All added repositories display on this screen in a
list view with an action menu. Use the action menu in the list view to edit the fields you configured, delete an
individual repository, view the repository's content, and sync the repository.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 46
Content Management

l User Repository View the User Added Repositories that display on this screen in a list view with an action
menu. Use the action menu to edit the fields you configured, delete an individual repository, view the
repository's content and sync the repository.

4. Templates Enable end users to add their own repositories by adding Manual Templates and Automatic Templates.
Each template type has its own list view for viewing and managing purposes. From the action menu in either list
view, edit existing manual or automatic template configurations, delete individual templates or view the users who
added the repository.

5. Categories Use this view to Add Categories. All added categories display on this screen in a list view with an action
menu. Edit existing category configurations, add a Subcategory, delete an individual category or add the category to
Featured Content from the available action menu.

6. Featured Content Manage the Featured Content you added from the List View or the Categories List View on this
screen. Featured Content displays prominently within the AirWatch Content Locker, providing one-click access to
high volume content.Use this screen to control the order in which Featured Content displays in the AirWatch
Content Locker using drag and drop or deleting irrelevant content.

7. Batch Status Perform a Batch Import and review the details of your uploaded batch from this screen.

8. Settings Select to access content specific settings.


l Applications Select to access the three available user facing content management features for configuration.
o AirWatch Content Locker Manage the behavior of the application that houses the content and
repositories you configure in the AirWatch Admin Console as well as the Personal Content end users add
themselves.
o AirWatch Content Locker Sync Enable end users to sync personal content on their personal computers
with the AirWatch Content Locker. Set the basic parameters of this app using these configurations.
o Outlook Add-In Enable end users to share content as links within the AirWatch Content Locker instead of
as attachments in emails. Specify link sharing behaviors with these settings.

l Personal Content Enable and configure Personal Content settings for end users from this screen.

l User Storage Edit or delete User Storage Quotas you enabled in Personal Content.

l Remote Storage Configure Remote File Storage from this page using a configuration wizard.

l Content Viewer Configure the Content Rendering Engine that provides View Only capabilities for files shared
from the Self-Service Portal.

l Advanced There are two types of advanced configurations. Consider implementing advanced configurations
before you begin uploading content:
o File Types Specify the File Types to whitelist or blacklist for upload or sync.
o Required Content Enable Required Content for onboarding purposes.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 47
Content Management

Using the Content Management Dashboard


Select any of the available data views from the Content Dashboard to quickly access content summaries.

Storage History
Overview storage quotas using the six-bar graphical summary.
1. Months Select the Storage history display schedule from the filter:
l 1 Displays the storage quotas in weekly increments over a six week time frame.

l 3 Shows storage quota summaries from the 1st and 15th over a three month period.

l 6 Displays the storage quota in monthly increments over a six month time frame.

2. Quota Hover over each bar to see the storage allocations for that time period:
l Total View the allocated storage for Corporate and Personal content.

l Corporate Note the amount of storage assigned to content managed from the AirWatch Admin Console.

l Personal Note the amount of storage assigned to the content end users upload in the Self Service Portal or
from the AirWatch Content Locker on their devices.

l Over Quota By View the amount you exceed your allocations by. Click on the bar to navigate directly to User
Storage to reconfigure your user quota assignments.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 48
Content Management

User/Content Status
Summarize device content compliance at a glance using the status icon graphics. Each graphic fills to represent the
percentage of devices or files that are in trouble. Click these icons for an out of compliance devices list view, and take
administrative action.
3. Missing Required Docs Click the icon, the number or the text to navigate directly to a page displaying the devices
that have not installed required documents.Use this shortcut to address critical issues on the appropriate devices.

4. Missing Latest Version Click the icon, the number or the text to navigate directly to a page displaying end users
who do not have the most current versions of documents installed, and may not know a more current version is
available. Use this shortcut to alert the appropriate devices about the new content versions available.

5. Files Near Expiration Click the icon, the number or the text to navigate directly to a page displaying content that is
set to expire in the next 14 days. Use this shortcut to manage files before they expire.

Content Engagement
Learn which documents are the most useful and in-demand for your end users, as well as the documents that you might
consider deprecating. Click the displayed information to navigate directly to a screen where you can edit your content.
6. Most Viewed Files/Least Viewed Files Switch between one of these two views to list the 50 most or least viewed
files.

7. Views See the number of views for each file in the column on the right.

User Breakdown
Utilize this info-graphic to gain an at-a-glance understanding of end-user activity Today, This Week or This Month. The
icons represent your end users and are filled in with the percent of end users who are active.
8. Active View the users who have recently opened the AirWatch Content Locker on their device.

9. Added Personal Content See the users who have recently added their own content.

10. Shared a Link Look at the percentage of your users who shared a link.

11. Shared a Folder Look at the percentage of your users who shared a folder.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 49
Content Management

Using the Content List View


Take action on uploaded AirWatch Managed or synced Corporate File Server content from the AirWatch Admin Console
Content List View. The Content List View populates with the information you entered while uploading your content or
repositories, providing an overview of all content. Access this list by navigating to Content List View.

1. AirWatch Managed View and manage the


content you directly added to the AirWatch
Admin Console in this default list view.

2. Corporate File Servers Select the Corporate


File Servers tab to view and manage the
content from repositories you synced with
the AirWatch Admin Console in this list view,
as well as the repositories themselves.

3. List View Menu Take action on a Content


List View using the available menu options.
The menus differ slightly between the two list
views.
l AirWatch Managed List View Select
Add Content to add AirWatch Managed
Content to the AirWatch Admin Console.

l Corporate File Servers List View Select


Show Repositories to display configured
repositories in the list view.

4. Filter Drill down to desired documents using the available filters.


l Category Filter content using the categories assigned from the AirWatch Admin Console.

l Type Filter content based on the file type.

l Expiration Status Filter content to only display content set to expire in 14 days.

5. Active/Inactive Use the circles next to each content item to gain an at a glance understanding of what content is
end user accessible.
l Green circles display next to active content.

l Red circles display next to inactive content. Inactive content is not searchable, viewable or sent automatically to
devices.

6. Name Select to edit the general Info, Details, Previous Version, Security, Assignment, and Deployment information
you configured when adding your content. Additionally, download or delete previous content versions.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 50
Content Management

7. Action Menu Manage your content using the available menu options. The two Content List View action menus
differ slightly.
Managed Content Corporate File Servers

Edit

Add Version

Sync

View Devices

Additional Options

Using the Action Menu


The action menu is available for added AirWatch Managed content, corporate content synced from repositories, and to
manage synced corporate repositories. Available actions change based on the List View you are in:
AirWatch Managed List View Corporate File Servers List View
l Editing Content l Editing Content

l Adding Versions of AirWatch Managed Content l Editing Corporate File Servers

l Viewing Devices l Syncing Repository Content

l Utilizing Additional Options l Viewing Devices


o Add to Featured Content l Utilizing Additional Options
o Download o Add to Featured Content
o Delete o Download

Editing Content
Edit AirWatch Managed Content as well as Corporate File Server content:
1. Upload Content or Add a Corporate File Server.

2. Navigate to the AirWatch Managed Content List View, or the Corporate File Server List View.

3. Navigate to the file you want to edit.Select Edit from the file's action menu.
l Review the Info tab. If necessary, edit the previously configured settings.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 51
Content Management

l Review the Details tab. If necessary, edit the previously configured settings. Note the new fields that appear:
o Date Created Review the date the file was uploaded to the console.
o Created By Review who added the file to the console.
o Date Modified Review the date of file modification.
o Modified By Review who modified the file.

l Review the Previous Version tab if you uploaded multiple versions of the document. From this tab perform the
following actions:
o Download Download a local copy of the previous file version.
o Delete Delete the previous file version from the console.

l Review the Security tab. If necessary, edit the previously configured settings.

l Review the Assignment tab. If necessary, edit the previously configured settings.

l Review the Deployment tab. If necessary, edit the previously configured settings.

4. Save.

Editing Corporate File Servers


1. Add a Corporate File Server.

2. Navigate to the Corporate File Servers List View.

3. Select Show Repositories to view added repositories in a list view, and select a repository from the list that appears.

4. Select Edit from the Action Menu beside the repository you want to edit.
l Review the Security tab and make necessary edits.

l Review the Deployment tab and make necessary edits.

5. Save.

Adding Versions of AirWatch Managed Content


Upload a new file version from the Content List View.
1. Upload Content.

2. Navigate to the AirWatch Managed Content List View.

3. Select Add from the Action Menu beside the file you want to edit, and complete the fields that appear:
l Managed By Review the Organization Group that auto-populates in the field.

l File Click upload and select the new document version to upload.

l Current Version Refer to the auto-populated version to determine the version of your new upload.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 52
Content Management

l Version Set the version number that displays in the list view.

l Notes Provide notes on the new version.

4. Save.

Syncing Repository Content


Sync files to get the latest content.
1. Add a Corporate File Server.

2. Navigate to the Corporate File Servers List View.

3. Select Sync from the Action Menu beside the repository you want to sync.

Viewing Devices
View devices assigned to AirWatch Managed Content as well as Corporate File Server content:
1. Upload Content or Add a Corporate File Server.

2. Navigate to the AirWatch Managed Content List View, or the Corporate File Server List View.

3. Select View Devices from the Action Menu beside the file you want to view the devices of. From the screen that
displays, you can:
l Install Push content to a device.

l Delete Delete installed content from a device.

4. Close the screen to return to the List View.

Utilizing Additional Options


Utilize Additional Options for AirWatch Managed Content as well as Corporate File Server content:
1. Upload Content or Add a Corporate File Server.

2. Navigate to the AirWatch Managed Content List View, or the Corporate File Server List View.

3. Select Additional Options from the Action Menu, and select the action you want to take:
l Add to Featured Content Add content to Featured Content. Featured Content displays prominently within
the AirWatch Content Locker, providing one-click access to high volume content.

l Download Download a local copy of the selected content.

l Delete Delete AirWatch Managed Content from the AirWatch Admin Console.

Note: You cannot delete repository content from the AirWatch Admin Console.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 53
User Facing Features

User Facing Features

Overview
AirWatch offers three end user facing features that facilitate your organization's content management. In addition to the
robust configurations and management options available within the AirWatch Admin Console for content, you can also
configure the behavior of these user facing features.
l AirWatch Content Locker Allows end users to access important content on their devices while simultaneously
safeguarding those files. Any content accessed through the AirWatch Content Locker opens inside the application,
ensuring that it cannot be copied, saved, or shared without approval.

l Content Locker Sync Allows end users to add files to a shared folder on their computers that syncs with their
Personal Content repository. This gives them access to those files on their mobile device's AirWatch Content Locker
application or from the Self-Service Portal.

l Outlook Add-In Allows end users to send shared links to a file in their Personal Content repository instead of
sending the file as an email attachment.

Note: Downloading, installing and/or using these features are user dependent actions. Please see the AirWatch
Content Locker End User Guide in the appropriate platform for step by step instructions on downloading and using
the AirWatch Content Locker as an end user as well as installing and using AirWatch Content Locker Sync. These
guides are available in the Resources Portal.

In This Section
l Configuring the AirWatch Content Locker Details the application settings you can configure to tailor your
application's behavior to meet your organization's security requirements.

l Deploying and Using AirWatch Apps Explains the basic concepts for application deployment and use, and
recommends the appropriate platform's AirWatch Content Locker End User Guide in the Resource Portal for an in-
depth understanding of these topics.

l Using Custom URLs for Linking to Content with iOSAirWatch Content Locker Learn how to create custom links that
open the Secure Content Locker for iOS in other apps.

l Configuring AirWatch Content Locker Sync Covers enabling the AirWatch Content Locker Sync for download as well
as the additional admin-level options.

l Deploying and Using AirWatch Content Locker Sync Overviews the basic concepts for AirWatch Content Locker
Sync deployment and use, and recommends the appropriate platform's AirWatch Content Locker End User Guide
in the Resource Portal for an in-depth understanding of these topics.

l Configuring Content Locker Outlook Add-In Covers enabling the AirWatch Content Locker Outlook Add-In
download as well as the additional admin-level options.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 54
User Facing Features

l Installing and Using Content Locker Outlook Add-In Explains how to install and use the Outlook Add-In for sharing
links.

Configuring AirWatch Content Locker


Configure AirWatch Content Locker to manage how end users view and access files and content from their device.
1. Navigate to Groups and Settings All Settings Content Applications Content Locker.

2. Configure the Settings and Policies settings listed below:


l Application Profile Set to define security policies and settings used by this application. By default, all
applications will use the default security policies and settings, but you can override the defaults and create a
custom profile for this specific app by selecting Custom.
o Default Select to use the default applications settings and policies defined on the Security Policies and
Settings pages under Apps in system settings.
o Custom Select to use custom applications settings for this application. The settings are listed below.
For more information, including the differences between these "custom"profiles and the "default"security
policies, please see the Advanced ApplicationManagement section of the AirWatch Mobile
ApplicationManagement Guide, which is available via AirWatch Resources.
n iOS Profile Select a custom-created SDKprofile from the drop-down list the settings profile for iOS
devices.

n Android Profile Select a custom-created SDKprofile from the drop-down list the settings profile for
Android devices.

n Use Legacy Settings and Policies Enable to configure legacy settings and policies.
n Default Authentication Method Select the authentication method for the applications.

n Enable "Keep me signed in" Enable to allow end users to remain signed in between uses.

n Maximum Number of Failed Attempt Set the number of passcode entry attempts allowed before
all data in the AirWatch Content Locker will be wiped from a device.

n Authentication Grace Period (min) Enter the time (in minutes) after closing the AirWatch Content
Locker before reopening the AirWatch Content Locker will require users to enter credentials again.

n Prevent Compromised Devices Enable to prevent compromised devices from accessing AirWatch
Content Locker.

n Enable Offline Login Compliance Enable to allow offline login compliance.

n Maximum Number of Offline Logins Enter the number of offline logins allowed before you have
to go online.

3. Configure the General settings located below


l Numbers of Days to Keep Content New Select the number of days recently added documents will be labeled
as new in the AirWatch Content Locker.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 55
User Facing Features

l Require MDM Enrollment Enable to allow only enrolled devices to access the AirWatch Content Locker.

l Enable Editing/Annotation Enable or disable the ability to edit documents or add annotations to documents.

l Change Repository Name Enable to change the repository name in the Root Repository Name field below.
o Root Repository Name Enter the new repository name you want to use.

l Allow Hyperlinks Enable to allow end users to open hyperlinks located in documents.
o Open Internet Links with Select the application in which to open hyperlinks.

l Local Storage Enable to allow end users a place to store files locally on their device that will not be synced to
any server. Disable local storage to force any content created on saved in AirWatch Content Locker to be backed
up to a repository.

l Upload on Wi-Fi Only Enable to restrict uploads from AirWatch Content Locker to Wi-Fi connections only.

4. Implement a Terms of Use agreement for your app.

5. Assign Notifications to Content Locker applications for the specified platform:


l Application Type Indicate as System or Internal.

l Application Name Assign to the application.

l Bundle ID Assign to the application..

l Badge Count Set to Required or Download Only.

6. Set the Client Download for Content Locker for Desktop to Enabled to allow your end users to download the
Content Locker for their desktop from the Self-Service Portal.

7. Select Save.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 56
User Facing Features

Deploying and Using AirWatch Applications


Control how AirWatch applications deploy to your end users and other security configurations from the AirWatch Admin
Console. Once deployed, end users can download and use these apps. Please see the end user guides in the appropriate
platform in the Resources Portal for step by step instructions on using and downloading the app.
While the AirWatch Content Lockerapplication is available in the public app store, your organization needs to purchase
licenses per device to take advantage of the AirWatch MCMsolution. Please see http://www.air-watch.com/pricing or
contact your AirWatch representative for more information.

Note: The Mobile Application Management (MAM) Guide covers the process for deploying public applications in full
detail. Basic deployment instructions are provided below. For in-depth instructions, please reference the MAM Guide
available in the in the Resources Portal.

1. Navigate to Apps & Books Applications List View Public.

2. Select Add Application.

3. Configure the fields on the screen that appears:


l Managed By View the organization group the application uploads in.

l Platform Choose the appropriate platform.

l Name Enter a descriptive name in the field to help search for the application in an app store.

l Search App Store Select to search for the application in Apple App Store, Google Play Store (Android Market) or
Microsoft Windows Phone Store.

Note: In order to search the Google Play Store in an on-premise deployment, you must integrate a Google
Account with the AirWatch MDM environment. See Google Play Integration in the MAM Guide, available via
AirWatch Resources, for more information.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 57
User Facing Features

4. Review the information that automatically populates in the Info tab.

5. Add Smart Groups from the Assignment tab.

6. Use the Deployment tab to determine how your end users receive the app. End users find and download
recommended apps in the app store. To make finding and deploying it easier, you can recommend it through
AirWatch or automatically push it to your devices.

7. Assign Terms of Use, if desired.

8. Save and Publish.

Note: For more information on recommending public apps to the AirWatch App Catalog from the AirWatch
Admin Console, please see the Mobile Application Management (MAM) Guide, available via AirWatch Resources.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 58
User Facing Features

Using Custom URLs for Linking to Content with iOSAirWatch Content Locker
If your organization has internal apps that you distribute to various teams and those apps access or reference corporate
content from the AirWatch Content Locker, then you can create custom URLs that, when clicked, open the AirWatch
Content Lockerand access content without losing containerization. You can also include custom URLs in AirWatch
Content Lockerdocuments or emails, text and instant messages to link to and open other documents in the AirWatch
Content Locker. A list of custom URLs and their applicability is listed below.
Custom URL Function
awscl:// Open the AirWatch Content Locker.
awscl://content Opens the AirWatch Content Locker to the Content tab. Also available:transfers, search,
updates, messages and settings.
awscl://search?query= Opens the AirWatch Content Locker and searches for the specified text string.
{search text}
awscl://content/allcontent Opens the AirWatch Content Locker to the Content tab, displaying All content. Also
available:newcontent, recentactivity, favoritecontent, allcontent/installed,
allcontent/notinstalled, newcontent/viewed, newcontent/notviewed,
recentactivity/updated and recentactivity/downloaded.
awscl://categoryid= Opens the AirWatch Content Locker to the specified content category.
{category ID}
awscl://contentid= Opens the AirWatch Content Locker to the specified document/content.
{content ID}
awscl://contentid= Opens the AirWatch Content Locker to the specified document with the options menu
{content ID}&option open. Also available:option=info, option=find, option=outline.
awscl://contentid= Opens the AirWatch Content Locker to the specified page of a document.
{content ID}&page={page
number}

Configuring AirWatch Content LockerSync


AirWatch Content Locker Sync allows end users to add files to their Personal Content folders and sync that content with
their Personal Content Repository. AirWatch Content Locker Sync creates a folder on the end-user's device so content
can be copied and pasted or simply dragged into the folder and automatically synced with the user's Personal Content
Repository. In addition, Windows PC end users can create and distribute shared links for content in the Personal Content
repository. These links allow outside users access the content stored in the Personal Content repository without sending
the actual document, which keeps the document in your control.

Prerequisites
You must operate a 32- or 64-bit version of Windows Vista SP1 or later, Windows 7, Windows 8, or Mac OS X Lion or later
to install AirWatch Content Locker Sync.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 59
User Facing Features

Enabling AirWatch Content Locker Sync


Determining the behavior of your AirWatch Content Locker Sync client requires configuration in the AirWatch Admin
Console. This section covers the configurations for enabling the Sync Client and its basic features. However, there are
additional settings that impact the AirWatch Content Locker Sync Client's behavior, particularly Link Sharing covered in
the Personal Content section.
1. Navigate to Groups and Settings All Settings Content Applications AirWatch Content LockerSync.

2. Enable the features you want for your Sync Client:

l Enable AirWatch Content Locker Sync to


allow syncing.

l Enable Client Download if you want users


to download the Content Locker Sync
Client from the Self Service Portal.

l Enable Require MDM Enrollment to


require end users to have managed
devices in order to successfully
authenticate into Content Locker Sync.

Note: End users who authenticate into


the Sync Client before you enable this
feature, remain able to login without
MDM Enrollment.

3. Select a Terms of Use agreement for Windows.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 60
User Facing Features

Deploying and Using AirWatch Content Locker Sync


AirWatch Content LockerSync is a feature that syncs personal content between the AirWatch Content Locker, the Self-
Service Portal (SSP), and an end user's PCor Mac computer. End users download the application from the SSP and install
it on their PC orMac. From there, they can add files to a folder they designate on their computer, which is then synced
with their SSP for viewing on other computers and their AirWatch Content Lockerapplication on mobile devices.
As the administrator, you control if AirWatch Content Locker Sync is available for your end users and other security
configurations from the AirWatch Admin Console. However, downloading and using AirWatch Content Locker Sync are
user dependent actions. Please see the Personal Content section in any of the AirWatch Content Locker End User
Guides (any platform) in the Resource Portal for step by step instructions on downloading and using this feature.

Configuring AirWatch Content Locker Outlook Add-In


The AirWatch Content Locker Outlook Add-In enables end users to send shared links to a file in their Personal Content
repository as opposed to sending the file as an attachment. This option secures files by allowing only those with access to
the link ability to view the file, forcing file sharing to occur within the confines of the AirWatch Content Locker. The add-in
also allows you to update the file while still letting others use the shared link as well as revoke access to the link whenever
you need.

Prerequisites
Your device must have the following:
l Windows Vista, Windows 7 (32-bit or 64-bit), or Windows 8 (32-bit or 64-bit).

l Microsoft Outlook 2007+ (32-bit or 64-bit)

l Link Share setting enabled in Personal Content

Configuring the Outlook Add-In


Before end users can download and install the AirWatch Content Locker Outlook Add-In, you must enable access to the
add-in through the AirWatch Admin Console.
1. Navigate to Groups & Settings All Settings Content Applications Outlook Add-In.

2. Configure the settings as follows:


l Client Download Enable to allow end users to download the AirWatch Content Locker Sync client to their Mac
OS X or Windows PC devices from the Self-Service Portal.

l Automatically convert attachments to links Enable to automatically convert large attachments into a link.
o Exceeding Enter the amount that triggers the automatic conversion of attachments to links.

l Recommend converting attachments to links Enable to recommend end users convert attachments into a
link.
o Exceeding Enter the amount that triggers the recommendation to convert attachments to links.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 61
User Facing Features

Installing and Using the Outlook Add-In


As the administrator, you control if the Outlook Add-In is available for your end users and other security configurations
from the AirWatch Admin Console. However, downloading and using Outlook Add-In are user dependent actions. This
section details how end users can install and use this feature.

Installing AirWatch Content Locker Outlook Add-In


Direct end users to follow the steps detailed below to download and install the Outlook AirWatch Content Locker Add-In:
1. Navigate to the Self-Service Portal (SSP).

2. Select the Managed Content tab.

3. Select the Outlook Content Locker Add-in download.

4. Run the installer.

5. Open Outlook and select any option from the AirWatch Content Locker Outlook Add-In to authenticate:
l Enter the Server URL and Group ID.

l Enter Username and Password.

Using the AirWatch Content Locker Outlook Add-In


You can view the installed add-in one of two places in the Outlook Ribbon: the Home Tab or the Message Tab. The drop-
down menus contain the various options for sending and receiving email attachments.

Home Tab of Outlook Ribbon

1. Save to Personal Content Select to save


received attachments and other content
to the Personal Content Repository.

2. Settings Set general and security


configurations for the add-in.

3. Pick Attachment Convert a file into a link


Message Tab of Outlook Ribbon for sharing before attaching it.

4. Personal Content Share a file from


Personal Content.

5. Convert Attachment Convert an


attached file in an already composed email
into a link.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 62
User Facing Features

Save to Personal Content

1. Select Save to Personal Content from the Add-In


drop-down menu on the Home Tab of the Outlook
Ribbon.

2. Select a location to save the attachment in the


Personal Content dialog that opens.

Note: The Refresh button, located above the


cancel button, refreshes the listing of Personal
Content for an up-to-date listing of Personal
Content. Only the content you can share
displays.

3. Select Next to begin uploading the attachment(s) to


the Personal Content folder.

Settings
1. Select Settings from the Add-In drop-down menu on the Home Tab of the Outlook Ribbon or the Message Tab of the
Outlook Ribbon.

2. Complete the options on the General tab.


l Default Upload Folder Select or update the folder location for files to upload into.

l Default Save Folder Select or update the folder location for files to save in.

l Automatically convert attachments exceeding Select to automatically convert large attachments into a link.

Note: If you set this amount in the console, end users cannot override the amount.

l Recommend converting attachments exceeding Select to recommend converting large attachments into a
link.

Note: If you set this amount in the console, end users cannot override the amount.

3. Complete the options on the Security tab.

Note:If you configure settings for all Shared Links in the AirWatch Admin Console, end users cannot override
those configurations.

l Password Protect Set a password to apply an additional layer of security to all links shared from this Add-In.

l Limit Days Available Configure a range of availability of all links shared from this Add-In.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 63
User Facing Features

l Maximum Download Limit Limit the size of downloads from this Add-In.

4. Review account settings on the Account tab.

5. Review the Add-In version, AirWatch Admin Console version, legal notice, and privacy policy on the About tab.

6. Save.

Pick Attachment
1. Select Pick Attachment from the Add-In drop-down menu on the Message Tab of the Outlook Ribbon.

2. Navigate to the file to upload and select Open.

3. In the Personal Content dialog that opens, choose the file


location to upload the attachment and select Next.

Note: The Refresh button, located above the cancel


button, refreshes the listing of Personal Content for an
up-to-date listing of Personal Content. Only the
content you can share displays.

4. Select the desired security options to add to the share link.

5. Select Create Link, automatically inserting the link into the


email.

6. Send email.

Personal Content
1. Select Personal Content from the Add-In drop-down menu on the Message Tab of the Outlook Ribbon.

2. In the Personal Content dialog that opens, choose the file location to upload the attachment to and select Next.

Note: The Refresh button, located above the cancel button, refreshes the listing of Personal Content for an up-to-
date listing of Personal Content. Only the content you can share displays.

3. Select the desired security options to add to the share link.

4. Select Create Link, automatically inserting the link into the email.

5. Send email.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 64
User Facing Features

Convert Attachment

1. Select Convert Attachment from the Add-In drop-down


menu on the Message Tab of the Outlook Ribbon.

2. In the dialog that opens, select Yes to convert the


attachment and upload it to the Personal Content folder.

3. In the Personal Content dialog that opens, choose the file


location to upload the attachment and select Next.

4. Select the desired security options to add to the share link.

5. Select Create Link, automatically inserting the link into the


email.

6. Send email.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 65
SDK Functionality

SDK Functionality

Overview
Apply additional AirWatch functionality to your AirWatch Content Locker application by creating and assigning an SDK
profile. Deploying an SDK profile to your AirWatch Content Locker application allows you to implement additional
authentication, branding, analytics, logging, and geofencing capabilities.
This section explains how to configure the default SDKsettings you can apply to the AirWatch Content Locker. For
information on how to apply a custom or default SDK profile to the AirWatch Content Locker, see Configuring AirWatch
Content Locker Settings.
You can define SDKprofiles using two different profile types: a Default or a Custom SDK application profile.
Default Custom
Share SDK profile settings across all Apply SDK profile settings to a specific
Implementation applications set up at a particular Organization applications, and override the Default Settings
Group (OG) or below. SDK profiles.
Provides a single point of configuration for all Offers granular control for specific applications
Advantage of your apps in a particular OG and its child and overrides the Default Settings SDK
groups. profiles.
Groups and Settings All Settings Apps Groups and Settings All Settings Apps
Configure
Settings and Policies Security Policies Settings and Policies Profiles
Learn how to configure a default SDK profile
Learn more about custom SDK profile settings
Read More for the AirWatch Content Locker in the SDK
in the MAM Guide, in the Resources Portal.
Functionality section.

In This Section
l Authentication Type View how to set an authentication requirement for AirWatch applications, wrapped
applications, and applications created with the SDK.

l Single Sign On (SSO) Review how to allow access to applications with a single authentication session.

l Compromised Protection View how to enable protecting the network from compromised devices.

l Data Loss Prevention See the available options to configure to prevent data losses.

l Network Access Control View how to control access to mobile networks including the control of cellular and wi-
fi connections.

l Branding Read how to reflect your organization's image in your AirWatch applications.

l Offline Access Learn how to allow access using the Single Sign On identity to applications when the device is
offline.

l Geofencing Discover how to restrict access to applications depending on the distances set in Geofencing
settings in the AirWatch Admin Console.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 66
SDK Functionality

l Logging Explore how to view event records of errors or other actions in the AirWatch Admin Console

l Analytics See how to enable analytics, how to access SDK analytics for a specific internal application, and how
to access other SDK analytic records.

Authentication Type
The following step-by-step instructions explain how to configure this profile as part of the default settings that apply to all
applications. For more information about default versus custom profiles, refer to the "Default or Custom Settings for
Profiles"section of the AirWatch Mobile ApplicationManagement Guide.
l Passcode Designates a local passcode requirement for AirWatch applications or wrapped applications that have the
default settings profile applied to them. Device users set their passcode on the device at the application level when
they first access the application.

l Username and Password Requires a user to authenticate to AirWatch using the AirWatch credentials. Set these
credentials when you add users in the Accounts area of the AirWatch Admin Console.

l Disabled Requires no authentication to access the application.

Note: For AirWatch Video stand-alone applications, it is recommended to configure Username and Password so that
users can log out of the application.

Note: Authentication Type and SSO can work together or alone. If you enable an Authentication Type (passcode or
username/password)without SSO, then users must enter a separate passcode or credentials for each individual
application. If you enable both Authentication Type and SSO, then users enter either their passcode or credentials
(whichever you configure as the Authentication Type)once and do not have to re-enter them until the SSO session
terminates.

1. Navigate to Groups & Settings All Settings Apps Settings and Policies Security Policies.

2. Set the Authentication Type as Passcode, Username and Password, or Disabled options and complete the rest of
the settings:
l Passcode Enable this option to require a local passcode requirement.
o Authentication Timeout Set the allowable time for access to applications before disallowing access due to
inactivity. If SSO is enabled and the passcode times out, the SSO identity logs out of all AirWatch and
configured corporate applications and resources.
o Maximum Number Of Failed Attempts Set the maximum times a user can login with an incorrect
passcode before having to authenticate and set a new passcode.
o Passcode Mode Set as Numeric or Alphanumeric.
o Allow Simple Value Set the passcode to allow simple strings. For example, allow strings like 1234 and
1111.
o Minimum Passcode Length Set the minimum number of characters for the passcode.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 67
SDK Functionality

o Minimum Number Of Complex Characters (Alphanumeric) Set the minimum number of complex
characters for the passcode. For example, allow characters like [], @, and #.
o Maximum Passcode Age (days) Set the number of days the passcode remains valid before you must
change it.
o Passcode History Set the number of passcodes the AirWatch Admin Console stores so that users cannot
use recent passcodes.
o Biometric Mode (iOS only) Select the system to use to authenticate for access.
n EyeVerify scans an eye print using the device camera to allow access to the SDK application.
License Key integrates your EyeVerify system with AirWatch.

Note: The license key comes from your EyeVerify Representative.

n Touch ID (iOS 8+ only) uses a fingerprint using iOS TouchID supported on iPhone 5s and above.

Note:You must configure a device passcode and fingerprint prior to using the application.

n Disabled Require no use of biometric authentication systems to access the application.

l Username and Password Enable this option to set authentication to use the AirWatch credentials.
o Authentication Timeout Set the allowable time for access to applications before disallowing access due to
inactivity. If SSO is enabled and the passcode times out, the SSO identity logs out of all AirWatch and
configured corporate applications and resources.
o Maximum Number Of Failed Attempts Set the maximum times a user can login with an incorrect
passcode before having to authenticate and set a new passcode.
o Biometric Mode (iOS only) Select the system to use to authenticate for access.
n EyeVerify scans an eye print using the device camera to allow access to the SDK application.
License Key integrates your EyeVerify system with AirWatch.

Note: The license key comes from your EyeVerify Representative.

n Touch ID (iOS 8+ only) uses a fingerprint using iOS TouchID supported on iPhone 5s and above.

Note:You must configure a device passcode and fingerprint prior to using the application.

n Disabled Require no use of biometric authentication systems to access the application.

3. Save your settings.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 68
SDK Functionality

Single Sign On (SSO)


The following step-by-step instructions explain how to configure this profile as part of the default settings that apply to all
applications. For more information about default versus custom profiles, refer to the "Default or Custom Settings for
Profiles"section of the AirWatch Mobile ApplicationManagement Guide.

Note: For information about SSO for Apple iOS 7 using Kerberos authentication, refer to the AirWatch Apple iOS
Platform Guide, available via AirWatch Resources.

AirWatch's single sign on (SSO) feature allows end users to access all AirWatch apps, wrapped apps, and SDK-enabled
apps with a single SSO Passcode without having to enter login credentials for each application. Using either the AirWatch
Agent or the AirWatch Workspace as a "broker application", end users can authenticate once using either their normal
credentials or an SSOPasscode and then gain access to other applications so long as the SSOsession is active.

Enabling Single Sign On


Enable SSO as part of the Security Policies that you configure to apply to all AirWatch apps, wrapped apps, and SDK-
enabled apps using a Default SDKProfile. To enable SSO:
1. Navigate to Groups &Settings All Settings Apps Settings and Policies Security Policies.

2. Set Single Sign On to Enabled to allow end users to access all AirWatch applications and maintain a persistent login.

3. Optionally set Authentication Type to Passcode and set the Passcode Mode to either Numeric or Alphanumeric to
require an SSOPasscode on the device. If you enable SSObut do not enable an Authentication Type, end users will
use their normal credentials (either directory service or AirWatch account)to authenticate, and an SSOPasscode will
not exist.

SSO Session
Once an end user authenticates with either the Workspace or the Agent, an SSO session is opened. During an active
session, end users can access managed applications without having to enter their SSO Passcode. The sessions lasts as
long as the Workspace is running in the background or until the Passcode Timeout value defined in the Passcode Mode
settings is exceeded.

Compromised Protection
The following step-by-step instructions explain how to configure this profile as part of the default settings that apply to all
applications. For more information about default versus custom profiles, refer to the "Default or Custom Settings for
Profiles"section of the AirWatch Mobile ApplicationManagement Guide.

Configuring Compromised Protection


Enable Compromised Protection so that the AirWatch Admin Console blocks device access to the network if it is
compromised.
1. Navigate to Groups & Settings All Settings Apps Settings and Policies Security Policies.

2. Select Enabled to block a compromised device from accessing your mobile network.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 69
SDK Functionality

3. Save your settings.

Data Loss Prevention


The following step-by-step instructions explain how to configure this profile as part of the default settings that apply to all
applications. For more information about default versus custom profiles, refer to the "Default or Custom Settings for
Profiles"section of the AirWatch Mobile ApplicationManagement Guide.

Configuring Data Loss Prevention


Enable Data Loss Prevention (DLP) to protect sensitive data in applications. This setting controls copying and pasting,
printing, taking pictures and screen captures, using Bluetooth, and other areas where data transmits back and forth.
1. Navigate to Groups & Settings All Settings Apps Settings and Policies Security Policies.

2. Select Enabled for the specific DLP option:


l Enable Copy And Paste Allows an application to copy and paste on devices when set to Yes.

l Enable Printing Allows an application to print from devices when set to Yes.

l Enable Camera Allows applications to access the device camera when set to Yes.

l Enable Composing Email Allows an application to use the native email client to send emails when set to Yes.

Note:When you disable this option, Apple iOS device users receive a system message that states they do not
have an email account. This message is an artifact of the disabled functionality and does not reflect a true
issue.

l Enable Data Backup Allows wrapped applications to sync data with a storage service like iCloud when set to
Yes.

l Enable Location Services Allows wrapped applications to receive the latitude and longitude of the device when
set to Yes.

l Enable Bluetooth Allows applications to access Bluetooth functionality on devices when set to Yes.

l Enable Screenshot Allows applications to access screenshot functionality on devices when set to Yes.

l Enable Watermark Displays text in a watermark in documents in the AirWatch Content Locker when set to Yes.
Enter the text to display in the Overlay Text field or use lookup values. You cannot change the design of a
watermark from the AirWatch Admin Console.

l Limit Documents to Open Only in Approved Apps Enter options to control the applications used to open
resources on devices.

l Allowed Applications List Enter the applications that you allow to open documents.

3. Save your settings.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 70
SDK Functionality

Network Access Control


The following step-by-step instructions explain how to configure this profile as part of the default settings that apply to all
applications. For more information about default versus custom profiles, refer to the "Default or Custom Settings for
Profiles"section of the AirWatch Mobile ApplicationManagement Guide.

Configuring Network Access Control


Enable Network Access to allow applications to access the mobile network.
1. Navigate to Groups & Settings All Settings Apps Settings and Policies Security Policies.

2. Select Enabled and then complete the following options:


l Allow Cellular Connection Controls cellular connections by allowing them all the time, allowing connections
when the device is not roaming, or never allowing cellular connections.

l Allow Wi-Fi Connection Allows connections using wi-fi networks always or limits connections by Service Set
Identifier (SSID). Enter the SSIDs devices can use to access the wi-fi network in the Allowed SSIDs field.

3. Save your settings.

Offline Access
The following step-by-step instructions explain how to configure this profile as part of the default settings that apply to all
applications. For more information about default versus custom profiles, refer to the "Default or Custom Settings for
Profiles"section of the AirWatch Mobile ApplicationManagement Guide.

Configuring Offline Access


Select Offline Access to allow access using the SSO identity to applications when the device is offline. This allows
AirWatch Video users to watch videos with out a Wi-Fi connection.
1. Navigate to Groups & Settings All Settings Apps Settings and Policies Security Policies.

2. Select Enabled and then choose an acceptable time frame for offline access before the device requires re-
authentication to the network and applications in the Maximum Period Allowed Offline field.
Devices should return online periodically so the system can check device compliance and security status.

3. Save your settings.

Geofencing
The following step-by-step instructions explain how to configure this profile as part of the default settings that apply to all
applications. For more information about default versus custom profiles, refer to the "Default or Custom Settings for
Profiles"section of the AirWatch Mobile ApplicationManagement Guide.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 71
SDK Functionality

Configuring Geofencing
Enable Geofencing to restrict access to applications depending on the distances set in Geofencing settings in the
AirWatch Admin Console.
Set the Geofencing area in Device Profiles Profile Settings Geofencing.
1. Navigate to Groups & Settings All Settings Apps Settings and Policies Security Policies.

2. Select Enabled and then enter the specific area in the Geofencing Area field.

3. Save your settings.

Branding
The following step-by-step instructions explain how to configure this profile as part of the default settings that apply to all
applications. For more information about default versus custom profiles, refer to the "Default or Custom Settings for
Profiles"section of the AirWatch Mobile ApplicationManagement Guide.

Configuring Branding
Change the look and feel of applications to reflect your company's unique brand by configuring images and colors
through the use of Branding settings.
1. Navigate to Groups & Settings All Settings Apps Settings and Policies Settings.

2. Select Enabled for Branding and then complete the following options:
l Reflect your company colors by choosing the Toolbar, Toolbar Text, Primary, Primary Text, Secondary, and
Secondary Text colors from a color palette.

l Reflect your company colors by choosing the Primary color from a color palette.

l Enter in your Organization Name.

l Upload a custom Background Image.

l Rebrand the following Apple iOS devices: iPhone, iPhone (Retina), iPhone 5 (Retina), iPad, and iPad (Retina).

l Rebrand Android devices by uploading the following sizes: Small, Medium, Large, and Extra Large.

l Upload a Company Logo for your Phone, or Tablet in regular or High Resolution.

3. Save your settings.

Logging
The following step-by-step instructions explain how to configure this profile as part of the default settings that apply to all
applications. For more information about default versus custom profiles, refer to the "Default or Custom Settings for
Profiles"section of the AirWatch Mobile ApplicationManagement Guide.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 72
SDK Functionality

Configuring Logging
View event records of errors or other actions in the AirWatch Admin Console with Logging.
1. Navigate to Groups & Settings All Settings Apps Settings and Policies Settings.

2. Select Enabled for Logging.

3. Choose your Logging Level from a spectrum of recording frequency options:


l Error Records only errors. An error displays failures in processes such as a failure to look up UIDs or an
unsupported URL.

l Warning Records errors and warnings. A warning displays a possible issue with processes such as bad response
codes and invalid token authentications.

l Info Records a significant amount of data for informational purposes. An info displays general processes.

l Debug Record all data to help with troubleshooting. This option is not available for all functions.
The AirWatch Admin Console reports the messages that match the configured logging level plus any logs with a
higher critical status. For example, if you set the logging level to Warning, messages with a Warning and Error
level display in the AirWatch Admin Console.

4. Select Send logs over Wi-Fi only to prevent the transfer of data while roaming and to limit data charges.

5. Save your settings.

Accessing SDK and Wrapped App Logs by Log File


Access SDK application logs from the App Logs page.
1. Navigate to Apps & Books Applications Analytics App Logs.

2. Download or delete logs using the actions menu.

Accessing Logs by the View Logs Page


Use the View Logs feature from the actions menu to quickly access available log files pertaining to applications that use
SDKfunctionality.
1. Navigate to Apps &Books Applications List View and select the Internal tab.

2. Select the View Logs option from the application's actions menu.

Analytics
The following step-by-step instructions explain how to configure this profile as part of the default settings that apply to all
applications. For more information about default versus custom profiles, refer to the "Default or Custom Settings for
Profiles"section of the AirWatch Mobile ApplicationManagement Guide.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 73
SDK Functionality

Configuring Analytics
Use SDKAnalytics to view useful content statistics on your Apple iOS devices. For example, you can use SDK analytics to
view how many times a file or an app is opened as well as how long the file or the app remained open. This creates an at-
a-glance view of which of your end users have downloaded and viewed high-priority content.
1. Navigate to Groups & Settings All Settings Apps Settings and Policies Settings.

2. Select Enabled for Analytics.

3. Save your settings.

Accessing SDK Analytics for a Specific Application


This feature allows you to export analytics data for your SDK applications.
1. Navigate to Apps & Books Applications List View Internal.

2. Select the SDK application and choose View Analytics from the actions menu.

Accessing SDK Analytics for Apps Using SDK Functionality


This feature displays events for applications that use SDK functionality. These events are custom and developers can
code any process or behavior they want to track. This page supports only events coded for the Apple iOS platform.
1. Navigate to Apps & Books Applications Analytics SDK Analytics.

2. View events for SDK applications and retrieve data including application ID, the device on which it happened, and the
event name.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 74
AirWatch Content Locker Capabilities by Platform

AirWatch Content Locker Capabilities by Platform


The following matrix applies to iOS AirWatch Content Locker v2.3, Android v2.1 and Win 8/8.1/RT v1.4, Win Phone 8 v1.2
and Win 7/XP v1.3.
Features iOS Android Win 8/8.1/RT Win Phone 8 Win 7/XP

Security
Authentication
Basic
AD/LDAP
Token
Second Factor Passcode
Encryption
SSL Encryption in Transit
AES 256-Bit Encryption at Rest
In Memory Encryption
FIPS 140-2
Certificate Pinning
IT Policies
Compromised Detection
Automatic offline revocation when device is

compromised
Require Enrollment
Automatic offline revocation when document expires
Maximum number of offline logins
Wipe content at Maximum number of failed login

attempts
Prevent deleting mandatory content
DLP
Prevent Copy/Paste
Enable/Disable Print
Enable/Disable Open in Third Party Application(s)
Enable/Disable Sharing via Email
Enable/Disable Document Level Encryption

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 75
AirWatch Content Locker Capabilities by Platform

Features iOS Android Win 8/8.1/RT Win Phone 8 Win 7/XP

Enable/Disable Document Watermarking


Enable/Disable Screen Capture
Data Collection
Install Content
Open/Close Content
Uninstall/Delete Content
Session Status
Mobile Experience
Access
Keep Me Signed In
Authenticate with back-end credentials (Active

Directory)
Integrate with AirWatch Single-Sign-On
AirWatch Single-Sign-On with Agent as Broker App
Allow Offline Access
Standalone MCM
Customize Terms of Use
Content Views
Featured Content (Folder, File, Category)
All Content (All/Installed/Uninstalled)
Recent Activity (Recently Updated and Viewed)
New Content
Favorite Content
Tile and List Views of content
Full-screen mode for images/PDFs
View Required Content
Swipe through all images in a folder/view
Grid view of all images
File Management
Sort Content (alphabetically, chronologically,

importance)

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 76
AirWatch Content Locker Capabilities by Platform

Features iOS Android Win 8/8.1/RT Win Phone 8 Win 7/XP

Filter Content (File Type, download status)


Delete On-Demand documents
Import and Upload new documents/new versions
2-way sync for WebDav, network shares
2- way sync for Google Drive, One Drive
Check-In/Check-Out to SharePoint
Add comments to files at SharePoint Check-in
User Generated Content- Capture Pictures or Video in

AirWatch Content Locker
Add, Copy, Multi-Select files or folders
User Generated Content Add Audio Files
User Generated Content Add Office Files
User Generated Content Add Text Files
Queue Multiple Document Downloads Simultaneously
Manage Downloads (Pause/Resume/Cancel/Re-order)
Manage Uploads (Pause/Resume/Cancel/Re-order)
Usability
Search Strings within Documents (PDF Only)
Thumbnail navigation/scrub bar
View Table of Contents
Multi-Tab Document Viewing
Bookmarking (PDF Only)
Edit Bookmarks
Night-Mode (PDF)
Presentation Mode (native pointer for presenting

content)
Support for Links in PDFs
View Updates
Search Documents Based on Keywords
Highlight search results
View Last Successful Sync (Sync Status)

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 77
AirWatch Content Locker Capabilities by Platform

Features iOS Android Win 8/8.1/RT Win Phone 8 Win 7/XP

User Managed Content (Personal/Local Storage)


Personal Content Policies
Enable/Disable access to Personal Content
Storage quota control by user and/or group
Store Personal Content in Remote File Storage (RFS)
Enable/Disable Link Sharing
Enforce link sharing polices for max days, max

downloads, password
Enable/Disable Folder Sharing
File Management
Add/Remove Files(s)
Add new version
Move File(s)/Folder(s)
Add/Remove Folder(s)
Removed files goes to Trash
Open external files into Personal Content
Automatically Upload document upon opening in

AirWatch Content Locker
Collaboration
Add and Save PDF Annotations
Edit and Save Office Documents (Word, Excel, PPT)
Generate and share links to Personal Content from the

device
Share Personal Content Folders and Add Collaborators

from device
View shared folders with Files (Co-Owner, Editor,

Reader)
Display Collaborators & Roles by each Shared Folder
Add Comments to File Versions
View Activity Feed of Comments & Revision History per

Document
Save Drafts locally
Notify User when update is available for document

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 78
AirWatch Content Locker Capabilities by Platform

Features iOS Android Win 8/8.1/RT Win Phone 8 Win 7/XP

Customization and Integration


Mobile SDK and API
Authentication Profiles
Whitelist/Blacklist 3rd party apps
Branding Profiles
Compromised Detection
Analytics Profiles
Geofencing Profiles
External File Repository Integration
Share Point 2007
Share Point 2010
Share Point 2013
Share Point Online (Office 365)
Network File Share
WebDAV
FileServer (HTTP)
Google Drive
OneDrive
CMIS
User Added Repository Support
Localization
Arabic
Chinese - Simplified
Chinese - Traditional
Chinese - Traditional
Dutch
English
French
Hebrew
German
Italian

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 79
AirWatch Content Locker Capabilities by Platform

Features iOS Android Win 8/8.1/RT Win Phone 8 Win 7/XP

Japanese
Korean
Portugese - Brazil
Russian
Spanish
Swedish
Turkish
Email Attachment and Integration
Allow Viewing of Attachments and saving to AirWatch

Content Locker
Allow Viewing, Extracting and Saving of zipped

attachments to AirWatch Content Locker
Allow Editing of Email Attachments
Allow Reshare of Email Attachments
Multi-Select Content and Send as Email Attachments

(Individual Attachments)
Select Folders and Send as Email Attachments (Zipped

Folder)
AirWatch Browser Integration
Allow Viewing and Saving of AirWatch Browser

Downloads
*File type supported for editing.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 80
Appendix Supported File Type by Platform Matrix

Appendix Supported File Type by Platform Matrix


The following matrix applies to iOS Secure Content Locker, Android, Win 8.1/RT, and Win Phone 8 available in the app
store as of 2/19/2015.

Note: Because the AirWatch Content Locker for Windows PC devices does not include a native file viewer, you can
only download and open files that your IT Admin has enabled to open in third-party applications.

Supported File Types iOS Android Win 8.1/RT Win Phone 8


AAC (audio/aac)
ALAC (audio/m4a)
WAV (audio/wav)
MP3 (audio/mpeg)
MOV (video/quicktime)
MP4 (video/mp4)
M4B, M4R, M4V
CSV (.csv)
ePub (.epub)
iBooks
iWorks - Keynote (.key) application/vnd.apple.keynote
iWorks - Numbers (.numbers)

application/vnd.apple.numbers
iWorks - Pages (.pages) application/vnd.apple.pages
MS Office - Excel (.xls/.xlsx) application/vnd.ms-excel * *
MS Office - Powerpoint (.ppt/.pptx) application/vnd.ms-
* *
powerpoint
MS Office - Word (.doc/.docx) application/msword * *
HTML (.html) text/html
PDF (.pdf) application/pdf * *
Rich Text Format (.rtf) application/rtf
Rich Text Format Dictionary (.rtfd) application/octet-stream
XML (.xml) application/xml
PNG (.png) image/png
JPG (.jpg) image/jpeg
TIF (.tif, .tiff) image/tif

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 81
Appendix Supported File Type by Platform Matrix

Supported File Types iOS Android Win 8.1/RT Win Phone 8


Bitmap (.bmp) image/bmp
GIF (.gif) image/gif
Zip (.zip) application/zip
Password Protected Zip
RAR (.rar) application/rar
GZIP (.gzip) application/zip
BZIP (.bzip) application/zip
BZIP2 (.bzip2) application/zip
TAR (.tar) application/zip
TXT
MSG
*File type supported for editing.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 82
Finding Additional Documentation

Finding Additional Documentation


While reading through this documentation you may encounter topics that reference other documents that are not
included here. You may also be looking for separate documentation that is not a part of this resource. You can access this
additional documentation through the AirWatch Resources page (https://resources.air-watch.com) on myAirWatch.

Note: It is always recommended you pull the document from AirWatch Resources each time you need to reference it.

To search for and access additional documentation via the AirWatch Resources page, perform the following step-by-step
instructions:
1. Navigate to http://my.air-watch.com and log in using your AirWatch ID credentials.

2. Select AirWatch Resources from the navigation bar or home screen. The AirWatchResources page displays with a list
of recent documentation and a list of Resources Categories on the left.

3. Select your AirWatch Version from the drop-down list in the search parameters to filter a displayed list of documents.
Once selected, you will only see documentation that pertains to your particular version of AirWatch.

4. Access documentation using the following methods:


l Select a resource category on the left to view all documents belonging to that category. For example, selecting
Documentation filters your search to include the entire technical documentation set. Selecting Platform filters
your search to only include platform guides.

l Search for a particular resource using the search box in the top-right by entering keywords or document names.

l Add a document to your favorites and it will be added to My Resources. Access documents you have favorited
by selecting myAirWatch from the navigation bar and then selected My Resources from the toolbar.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 83
Finding Additional Documentation

l Download a PDF of a document by selecting the button. Note, however, that documentation is frequently
updated with the latest bug fixes and feature enhancements. Therefore, it is always recommended you pull the
document from AirWatch Resources each time you need to reference it.

Having trouble finding a document?Make sure a specific AirWatch Version is selected. All Versions will typically
return many results. Make sure you select Documentation from the category list, at a minimum. If you know which
category you want to search (e.g., Platform, Install &Architecture, EmailManagement) then selecting that will also
further narrow your search and provide better results. Filtering by PDFas a File Type will also narrow your search
even further to only include technical documentation manuals.

Mobile Content Management Guide | v.2015.03 | March 2015


Copyright 2015 VMware, Inc. All rights reserved. Proprietary & Confidential.

Page 84

Вам также может понравиться