article-detail-page
knowledge
close
menu
keyboard_arrow_left
Training
close

Quick Links

keyboard_arrow_left
Resources
close

Quick Links

keyboard_arrow_left
Contact Us
close

keyboard_arrow_left
Profile
close

search

TC51 - Nougat Device Owner AirWatch Environment

Minimum version of AirWatch console required is: 9.2.3.6

Create an Organization Group - Parent Group

  • Under the Voalte Connect Pink Parent Group, navigate to Groups & Settings > Groups > Organization Groups > Organization Group Details.
    • In CN700 this must be done as a purchase through Logistics
  • Select the “Add Child Organization Group” Tab to create the Organization Group. This should only be done for new sites.
    • The Organization Group Name should be the name of the hospital (ex: UCSF Medical Center). 
    • Group ID: [hospitalabbreviation]vcp — add to Confluence Page created by the Project Manager
      • NOTE: Hospital abbreviation should be all lower case
    • Organization Group Type: Customer
    • All else is defaulted 
    • Select “Save” 
  • THESE CHANGES ARE FOR THE CUSTOMER GROUP JUST CREATED, NOT VOALTE'S ORGANIZATION GROUP
    • Navigate to Groups & Settings>All Settings
      • Navigate to Devices & Users > General > Friendly Name
        • Ensure that the Current Setting is "Override"
        • Check Enable Custom Friendly Name
        • Set the Smart Phone Friendly Name Format as {EnrollmentUser} {DeviceOperatingSystem} {DeviceSerialNumber}
        • Ensure the Child Permissions are set to “Inherit or Override” 
        • Select Save
      • Navigate to Devices & Users > Android > Intelligent Hub Settings
        • Change the Current Setting to "Override"
        • Under General
          1. Require Google Account: Disabled
          2. Block User Unenrollment: Enabled
          3. SafetyNet App Verification: Disabled
        • NOTE: All other settings should be left defaulted
        • Under AirWatch Cloud Messaging
          1. AWCM Client Deployment Type: "Always Running"
          2. Enable box titled Use AWCM Instead of C2DM/GCM As Push Notification Service
        • Ensure the Child Permissions are set to “Inherit or Override” 
        • Select Save
        • NOTE: All other settings should be left defaulted
      • Navigate to Devices & Users > Android > Service Applications
        • Uncheck Always use the Latest Version of Telecom Sampler
        • Uncheck Always use the Latest Version of Secure Launcher
        • Change the Secure Launcher Version to the newest version
        • Ensure the Child Permissions are set to “Inherit or Override” 
        • Select Save
      • Navigate to Apps >Workspace One> AirWatch Catalog > General
        • Click on Publishing 
        • Change Current Setting to Inherit to ensure that the App Catalog is disabled for Android
        • Save

  • Android Enterprise Staging WiFi (Still at Parent Level)

    • Navigate to Devices→ Staging & Provisioning→ Components→ Profiles
      • Add Profile→ Android
      • General: 
        • Name: [Hospital] Enrollment WiFi
        • Profile Scope: Staging
      • WiFi Payload:
        • Add WiFi information
        • Save

 

Create an Organization Group - Child Group

  • Under the desired Parent Group, navigate to Groups & Settings > Groups > Organization Groups > Organization Group Details.
  • Select the “Add Child Organization Group” Tab to create the Organization Group. There should ALWAYS be at least one child group under the site's Parent. There may be several children under the site’s Parent with additional children under that to accommodate different hospital branches. There will ALWAYS be separate “Grandchildren” for different Device Types. 
    • The Organization Group Name should be [Hospital Name] [Device Type]. 
    • Group ID: [hospitalabbreviation]vcp — add to Confluence Page created by the Project Manager
    • Organization Group Type: Container
    • All else is defaulted
    • Select “Save” 
  • Ensure all of the above settings are true for the Child Group
  • Navigate to Devices->

Quick Navigation

 

  • Android for Work
  • Applications
  • Export Barcode

    • Checklist

    • Create Organization Groups and User
    • Create Profiles
    • Upload Applications
    • Create Files/Actions
    • Create Products 
    • Create Staging Barcode 
    • Create and Assign Smart Groups

    Android for Work

    Setting Up Android for Work

    • Navigate to Groups & Settings>All Settings
    • Navigate to Devices & Users > Android > Android for Work
      • Click Configure
      • Click "Sign in with different account"
      • Either select the account you wish to use or Use another account→More Options→Create Account
        • Recommended to use a new account specific to Voalte and this hospital
        • Information needed:
          • Name: First, Last
          • Username@gmail
          • Password
            • At least 8 characters
          • Birthday
          • Gender (Rather not say)
          • Mobile Phone
          • Current e-mail address
            • Use a shared account, will need to confirm e-mail
      • Enrollment Settings
        • Ensure that the Current Setting is "Override"
        • Work Managed Enrollment Type: Device-Based
        • Save
      • Under Configuration click "Test Connection"

    Collect Organization Information for release of Voalte One

    • One creating the account, in the same browser window Navigate to https://play.google.com/work
    • Click Admin Settings
    • Record the Organization Name and Organization ID and provide it to Voalte

    Create two Users for Enrollment 

    • Create an automated user for production provisioning

      • In the Child Group, navigate to Accounts
      • Select Add
      • Select Add User
        • Username: [hospitalabbreviation][devicetype]auto (ex: ucsfmc40auto or bchiosauto)
        • Set the password
        • Set the account First Name as the name of the hospital
        • Set the account Last Name as the device type
        • Set the account email as (the user name created above)@voalte.com
        • Select Save – add to Confluence Page created by the Project Manager

    • Create a non-automated user for troubleshooting

      • In the Child Group, navigate to Accounts
      • Select Add
      • Select Add User
        • Username: [hospitalabbreviation][devicetype] (ex: ucsfmc40 or bchios)
        • Set the password
        • Set the account First Name as the name of the hospital
        • Set the account Last Name as the device type
        • Set the account email as (the user name created above)@voalte.com
        • Select Save – add to Confluence Page created by the Project Manager

     

    Create Android Profiles - Place in Child Groups

    • All devices will need a Wi-Fi payload, a Permissions profile, a Disable COSU profile, a Secure Launcher Profile, and a Zebra MX Profile.

    Wi-Fi Profile 

    • Currently included in Zebra payload due to Fusion settings being split
    • Under the desired Child Group, navigate to the “Devices” Tab, then to the “Profiles” Sidebar
    • Select “List View” 
    • At the top of the page, directly under the “List View” header, click “+ Add” 
    • For the Platform, select Android (not Legacy)
    • Under the “General" Tab, Name the profile [Customer or Customer Child] Wi-Fi Profile 
      • Allow Removal: select “With Authorization” from the dropdown menu
      • Set the password
      • Assign to the "Profiles" Assignment Group
    • Select “Save & Publish” at the bottom of the PopUp window
    • Select “Publish” to push the Profile to the selected devices 

    Permissions Profile

    • Under the desired Child Group, navigate to the “Devices” Tab, then to the “Profiles” Sidebar
    • Select “List View” 
    • At the top of the page, directly under the “List View” header, click “+ Add” 
    • For the Platform, select Android (not Legacy)
    • Under the “General" Tab, Name the profile [Customer or Customer Child] Permissions Profile 
      • Allow Removal: select “With Authorization” from the dropdown menu
      • Set the password
      • Assign to the "Profiles" Assignment Group
    • Select the Permissions Payload:
      • Permissions Policy: Grant all permissions
        • This only applies to MDM-managed apps
    • Select “Save & Publish” at the bottom of the PopUp window
    • Select “Publish” to push the Profile to the selected devices 

    Zebra MX Profile

    • Under the desired Child Group, navigate to the “Devices” Tab, then to the “Profiles” Sidebar
    • Select “List View” 
    • At the top of the page, directly under the “List View” header, click “+ Add” 
      • For the Platform, select Android (not Legacy)
      • Under the “General" Tab, Name the profile [Customer or Customer Child] Zebra MX Profile 
      • OEM Settings: Enable
      • Select OEM: Zebra
      • Allow Removal: select “With Authorization” from the dropdown menu
      • Set the password
      • Assign to the "Profiles" Assignment Group
    • Select the Wifi Payload: (We will separate this payload from the Zebra MX once we can set WiFi frequency and channels via a separate payload from MX Restrictions)
      • Click Configure
      • Enter the customer-given Service Set Identifier (SSID) *case sensitive
      • Check "Set as Active Network"
      • Enter the Security Type from the dropdown menu 
      • Enter the SSID Password 
    • Select the Zebra MX Payload:
      • WiFi
        • Check “Include Fusion Settings” 
        • Uncheck Set Fusion 802.11d
        • Check Set RF Band 
        • Change the Settings for available Wi-Fi Channels according to the Services Info Sheet

      • Restrictions

        • Uncheck Allow AirPlane Mode

        • Uncheck Force WiFi On
        • Check Allow Background Data
        • Allow WiFi to Disconnect During Sleep: Always On
        • Allow Bluetooth: Specific to Site
        • Check Allow Clipboard
        • Uncheck Allow Network Monitoring Notification

      • Date/Time

        • Default:
          • Enable Date/Time
          • MM/DD/YYYY
          • Time Format: 12 hours

      • Volumes

        • Enable Sound Settings
        • Ringtones and Notifications: Max
        • Check Enable Default Location
        • Uncheck:
          • Enable Dial Pad Touch Tones
          • Enable Touch Tones
          • Enable Screen Lock Sounds
          • Enable Vibrate on Touch

    Auto Update Profile

    • Under the desired Child Group, navigate to the “Devices” Tab, then to the “Profiles” Sidebar
    • Select “List View” 
    • At the top of the page, directly under the “List View” header, click “+ Add” 
      • For the Platform, select Android (not Legacy)
      • Under the “General" Tab, Name the profile [Customer or Customer Child] Auto Update Profile
      • Assign to the "Profiles" Assignment Group
      • Payload: Public App Auto Update
        • Configure
        • Public Apps Auto Update Policy: Never Auto Update
        • Save & Publish

    Secure Launcher Profile

    • https://voalte.atlassian.net/wiki/display/VT/HOWTO%3A+Create+a+Secure+Launcher+profile+in+Airwatch
    • Under the desired Child Group, navigate to the “Devices” Tab, then to the “Profiles” Sidebar
    • Select “List View” 
    • At the top of the page, directly under the “List View” header, click “+ Add” 
    • For the Platform, select Android (not Legacy)
    • Under the “General" Tab, name the Profile [Customer or Customer Child] Secure Launcher Profile
      • Allow Removal: With Authorization
      • Set the password
      • Assign to the "Profiles" Assignment Group
    • Under the “Secure Launcher” Tab, click configure
    • Select “Multi App"
    • Delete the second app page by selecting the grey dot in between the blue dot and the ‘+'
    • Change the view from Landscape to Portrait
    • Lock orientation
    • Change the text at the top of the Secure Launcher homescreen
      • Click the Pencil next to "Secure Launcher" and erase the text
      • Type in: "[hospitalabbreviation] - {DeviceSNLast6}"
        • It can sometimes take a minute for the Last 6 digits to populate. 
        • Please make sure you have created the Custom Lookup Field "DeviceSNLast6"
    • While in Add Apps, select the drop down to the right and go to Miscellaneous 
      • Select “Add an App” 
        • Below the list of applications, a prompt will come up titled “Specify app if not in the list"
          • Notepad
            • Application Name: Notepad
            • Application ID: com.example.android.notepad
            • Select Add 
      • Repeat for the following Applications
        • Calculator 
          • Application Name: Calculator
          • Application ID: com.android.calculator2
        • Clock
          • Application Name: Clock
          • Application ID: com.android.deskclock
        • Zebra Light
          • Application Name: Zebra Light
          • Application ID: com.symbol.toggleflashlight
        • Voalte One Platform P3
          • Application Name: Voalte One
          • Application ID: com.voalte.platform.android.one
          • Select Launch app on startup
        • Stage Now —Hidden Applications
          • Application Name: Stage Now
          • Application ID: com.symbol.tool.stagenow
          • NOTE: Drag to Hidden Applications, not the Secure Launcher Home screen
        • Battery Manager —Hidden Applications
          • Application Name: Battery Manager
          • Application ID: com.symbol.batterymanager
          • NOTE: Drag to Hidden Applications, not the Secure Launcher Home screen
        • Camera — ONLY FOR P3/DESIRED
          • Application Name: Camera
          • Application ID: org.codeaurora.snapcam
          • NOTE: Drag to Hidden Applications, not the Secure Launcher Home screen
        • Browser — ONLY NEEDED WITH WEBCLIPS
          • Application Name: Browser
          • Application ID: com.android.browser
          • NOTE: Drag to Hidden Applications, not the Secure Launcher Home screen
    • Drag the desired apps to the grey launcher box in the desired order and location. Apps can be removed by dragging them over to the trash located at the bottom left of the screen. Change dropdown menus between Internal and Miscellaneous to view all possible applications.
    • Navigate to the Organize Tab
      • Change the Background image if specified
    • Navigate to Settings and change the following
      • Administrative Set the password
      • Under the Administrative passcode, select the check mark next to “Persist Administrative Passcode If Kiosk Profile is Removed from Device"
      • Prevent Icon Rearranging: Enabled
      • Icon Size: Large
      • Allow Agent Icon On Home Screen: Diabled
      • Allow Phone Icon: Disabled
      • Allow Contacts Icon: Disabled
      • Display Setting: Enabled
      • Sound Setting: Enabled
      • Screen Lock: Disabled
      • Language Setting: Disabled
      • Bluetooth Setting: Customer Specific
      • WiFi Settings: Disabled
      • Security Settings: Disabled
      • Application Setting: Disabled
      • Allow Cellular Data Setting: Disabled
      • Allow Tethering Setting: Disabled
      • Allow GPS Setting: Disabled
      • Allow Widgets: Disabled
      • Allow App Manager: Disabled
      • Allow Recent Task List: Disabled
      • Allow Stay Awake
      • Quick Launch Bluetooth: Customer Specific
      • Quick Launch WiFi: Disabled
    • Select Save
    • Select Save & Publish

    Disable COSU Profile

    • Under the desired Child Group, navigate to the “Devices” Tab, then to the “Profiles” Sidebar
    • Select “List View” 
    • At the top of the page, directly under the “List View” header, click “+ Add” 
      • For the Platform, select Android (not Legacy)
      • Under the “General" Tab, Name the profile "[Hospital] TC51 Disable COSU Profile"
        • Allow Removal: With Authorization
        • Set the password
        • Assign to the "Profiles" Assignment Group
      • Navigate to Custom Settings payload
      • Paste in:
        • <characteristic type="com.airwatch.android.androidwork.launcher" uuid="568bc89d-1df8-4ce9-a041-e5a24acdb7ec">
          <parm name="SkipCosuSetup" value="True"/>
          </characteristic>
        • Click Save
      • Save and Publush

    Create Smart Groups

    • Navigate to Groups & Settings > Groups > Assignment Groups
    • Select Add Smart Group
    • Choose “Select Devices or Users” for only select devices in the Child Group. 
      • NOTE: For “Select Devices or Users,” there must be at least one device in the group enrolled to be able to save the Smart Group.
      • There will be separate Smart Groups for Profiles (all devices, will never change), one for the Voalte App, one for WiFi, one for 3rd party apps, and at least one for different patches. 
    • Give the Smart Group a descriptive name for its use in the deployment
    • Select the "[hospitalabbreviation][devicetype]auto" user
    • Select Save
    • Generally, these are the Assignment Groups needed
      • Voalte One
      • Third Party Apps/Bookmarks
      • Profiles
      • Wifi

    Assigning Assignment Groups 

    Profiles Smart Group

    • Assigned to: Restrictions and Secure Launcher Profiles, RxLogger Config Product
    • Profiles
      • Navigate to the desired child group, then Devices > Profiles > List View
      • Select the Edit pencil button next to the Restrictions Profile 
        • Next to Assigned Groups, select the Profiles Smart Group
        • Select Save
      • Select the Edit pencil button next to the Secure Launcher Profile
        • Next to Assigned Groups, select the Profiles Smart Group
        • Select Save
      • Select Edit for the WiFi Profile
        • Next to Assigned Groups, add the WiFi Smart Group
        • Select Activate
        • Select Save
    • Voalte One Smart Group
      • Assigned to: Voalte One Application 
      • Navigate to the desired child group, then Apps & Books > Applications > List View 
      • Select Edit for the Voalte One application 
        • Select Save & Assign
          • Select Add Assignment
            • Add the Voalte One Smart Group 
            • Change Assignment Type to be Auto
            • Select Add
    • 3rd Party App
      • Assigned to: 3rd Party Applications
      • Navigate to the desired child group, then Apps & Books > Applications > List View 
      • Select Edit for the 3rd party application 
        • Select Save & Assign
          • Select Add Assignment
            • Add the 3rd Party Application
            • Change Assignment Type to be Auto
            • Select Add

     

    Applications

    Product Apps

    Upload appropriate Apps - Place in Child Groups

    • Navigate to Devices->Provisioning->Components->Applications
    • Select “+ Add Application"
      • Upload the appropriate file from your computer and select “Save"
      • Select “Continue"
      • In the new popup window, under the Info tab, enter the name of the Application without version number
      • Select “Save & Publish” at the bottom of the window 

    Create Installation Product - Place in Child Groups

    • This will need to be done for Zebra Light and any 3rd party apps with strict version requirements
    • Navigate to Devices->Provisioning→Products
    • Select "Add Product"
      • Select Android
      • Name: Install [Hospital Abbreviation] [Device] TC51 [App name]
      • Smart Group: If not Voalte then assign to the 3rd Party Apps group
      • Manifest: Install Application
        • Select Persist through reset 
        • Select the app you uploaded in the previous selection
        • Save
      • Activate

    Play Store Apps (including Voalte) - Place in Child Groups

    • Navigate to Apps & Books->Applications->Native→Public
    • Add Application
      • Platform: Android
      • Name: Search for the app name (if available, you can use a link to the app on the Play Store to go directly to that app)
        • If Voalte, ensure the app version you are looking for has been released to your Organization
      • Click Next
      • Select the app from the list, then "Approve", "Approve" again
        • Keep approved when app requests new permissions, "Save"
      • Save & Assign
      • Add Assignment
        • App Delivery Method: Auto
        • Assignment Group:
          • If Voalte: Voalte One
          • If not Voalte: 3rd Party Apps Group
        • Add
      • Save & Publish

    Configure RxLogger

    RxLogger Config File

    • Navigate to Devices > Staging & Provisioning > Components > Files & Actions
    • Select Add
    • Select Android
    • Under the General tab, enter a name for the File/Action, "TC51 N RxLogger Config File"
    • Under the Files tab, select Add Files
      • Upload the appropriate config.json file and select Save
      • Set the Download Path to "/sdcard/RxLogger/config.json”
    • Select Save twice to complete the File/Action

    Start RxLogger Intent

    • Navigate to Devices > Staging & Provisioning > Components > Files & Actions
    • Select Add
    • Select Android
    • Under the General tab, enter a name for the File/Action, “Start RxLogger"
    • Navigate to the Manifest tab
      • Under the Install Manifest area select Run Intent
      • Command Line and Arguments to run: "mode=implicit,broadcast=true,action=com.symbol.rxlogger.intent.action.ENABLE"
    • Select Save twice to complete the File/Action

     

    Disable Hangouts

    Disable Hangouts File/Action

    • Navigate to Devices > Staging & Provisioning > Components > Files & Actions
    • Select Add
    • Select Android
    • Under the General tab, enter a name for the File/Action, "Disable Hangouts"
    • Under the Files tab, select Add Files
      • Upload the appropriate StageNow xml file exported for MDM and select Save
      • Set the Download Path to "/data/tmp”
    • Select Save twice to complete the File/Action

    Disable Hangouts Product

    • Navigate to Devices > Staging & Provisioning > Product List View
    • Select Add Product and choose the Android option
      • Under the General tab:
        • Name the product "[Hospital] Disable Hangouts"
        • Assign to "Profiles"
      • Select Manifest
        • Add:
          • Set the Action Type to "Install Files/Actions"
          • Set the File/Action to be "Disable Hangouts"
          • Ensure Persistent through enterprise reset is checked
          • Select Save
      • Select Activate twice to save the Product

     

    Export Barcode

    Generate Staging Profile 

    • Navigate to the child level, then Devices→ Staging & Provisioning→ Staging, click "Add Staging", Android
    • Name: [Hospital] Enrollment Barcode [Date Enrollment Profile Added]
    • Owned By: Child level
    • Enrollment User: Auto user built above
    • Pass: Password for auto user
    • Hub: Latest VMWare WorkSpace One Intelligent Hub release

    Generate Barcode

    • Navigate to the child level, then Devices→ Staging & Provisioning→ Staging
    • Click the Radio button next to the Enrollment Profile with the newest date, then at the top bar "Stage Now Barcode"
      • Staging Relay Server: Relay Server previously setup
      • Staging Profile: Optional. Use if you created an Android Enterprise Staging Profile, otherwise WiFi can be added manually
      • Save