Using Wipe Protection. VMware AirWatch

AirWatch is a mobile device management platform designed to help organizations manage, secure, and protect their mobile devices and data. It provides a centralized console for managing and monitoring all types of mobile devices, including iOS, Android, Windows, and BlackBerry.

PDF

Document

Chapter 15: Managing Devices

Setting

Send Email To

Description

None – Send no confirmation email upon a successful device block, enrollment, or unenrollment.

User – Send a confirmation email to the device user informing them of the successful device block, enrollment, or unenrollment.

CC – Send the same confirmation email to a single email address or multiple, commaseparated email addresses.

Message Template – Select the desired message template from the drop-down listing. You have the option of adding a new message template or editing an existing template by selecting the "Click here..." hyperlink that takes you to the Devices & Users > General >

Message Templates settings page.

Administrator – Send a confirmation email to the AirWatch Administrator informing them of the successful device block, enrollment, or unenrollment.

To – Send the same confirmation email to a single email address or multiple, commaseparated email addresses.

Using Wipe Protection

By configuring Wipe Protection settings, you can exert more control over how and when devices can be wiped to avoid mass device wiping. To prevent this, set a wipe threshold.

A wipe threshold is when a certain number of devices are automatically wiped or wiped as a result of an enterprise wipe or device wipe command, within a defined period of time. Once this wipe threshold is exceeded, all future wipe commands are temporarily put on hold. You and other administrators can optionally be notified when this occurs.

You can review wipe logs to see when devices were wiped and for what reason. After reviewing the information you can accept or reject the on-hold wipe commands and unlock the system to reset the wipe threshold counter.

Configuring Wipe Protection Settings

Set a wipe threshold limit and amount of time in minutes during which the wipes must occur to trigger the wipe hold. You can only configure these settings at the Global or Customer level organization group.

1. Navigate to Devices > Lifecycle > Settings > Wipe Protection.

2. Configure the following settings.

Setting Description

Wiped

Devices

Enter the number of Wiped Devices that acts as your threshold for triggering wipe protection.

Within

(minutes)

Enter the value for Within (minutes) which is the amount of time the wipes must occur in order to trigger wipe protection.

VMware AirWatch Mobile Device Management Guide | v.2016.02 | February 2016

153

Chapter 15: Managing Devices

Setting Description

Email

Select a message template to email to administrators.

Create a message template for wipe protection by navigating to Devices & Users > General > Message

Templates, adding a new template and selecting Device Lifecycle as the Category and Wipe Protection

Notification as the Type. You can use the following lookup values as part of your message template: l

{EnterpriseWipeInterval} – The value of Within (minutes) on the settings page.

{WipeLogConsolePage} – A link to the Wipe Log page.

Enter the email addresses of administrators who should receive this notification message. You should only notify administrators who have access to the Wipe Log page.

3. Select Save.

Viewing Wipe Logs

You can view the Wipe Log page to see when devices were wiped and for what reason. After reviewing the information you can accept or reject any on-hold wipe commands and unlock the system to reset the wipe threshold counter, or the time after which the number of devices wiped (device or enterprise) has exceeded a previously-defined number of devices or amount of time.

If the system is locked, then you will see a banner at the top of the page indicating this status.

1. Navigate to Devices > Lifecycle > Wipe Log. Access to this page is managed by the Report Device Wipe Log resource and is available by default for system admins, SaaS admins, and AirWatch admins. You can add it to any custom admin role using the Roles page.

2. You may optionally Filter the Wipe Log by the following parameters: l

Date Range l

Wipe Type l

Status l

Source l

Ownership

3. View the list of devices and determine whether these are valid wipes. Devices pending action will have a status of On

Hold. Devices wiped before the threshold limit was reached will display as Processed.

If they are valid wipes, then select each device and then select Approve wipe(s) from the command list. The status changes to Approved.

If they are not valid wipes, then select each device and then select Reject wipe(s) from the command list. The status changes to Rejected.

After you have taken action on each device, you must unlock the system to reset the device threshold counter to zero and allow wipe commands to go through until the threshold limit is exceeded.

4. Select Unlock System from the top of the page.

You can only perform this action at a Global or Customer level organization group.

VMware AirWatch Mobile Device Management Guide | v.2016.02 | February 2016

154

Key features

Manage large-scale deployments of devices
Enroll devices quickly and easily
Configure and update device settings over the air
Enforce security and compliance policies
Secure mobile access to corporate resources
Remotely lock and wipe managed devices

Frequently asked questions

AirWatch is a mobile device management platform that helps organizations manage, secure, and protect their mobile devices and data.

AirWatch supports a wide range of mobile devices, including iOS, Android, Windows, and BlackBerry.

AirWatch provides a range of features, including device enrollment, configuration, security policy enforcement, app management, and data protection.

You can get started with AirWatch by contacting VMware or an authorized reseller.

User questions

Michael O.

How to unassign a Smart Group from an application, book, compliance policy, device profile, or product provision?

To unassign a Smart Group, navigate to the edit screen for the specific item (application, book, compliance policy, device profile, or product provision). Then, in the Assignment tab or Assigned Smart Groups field, select the Delete (X) icon next to the Smart Group you wish to unassign. Finally, save the changes. This only removes the assignment and does not delete the Smart Group.

James I.

How to remove a smart group?

To delete a smart group, navigate to Groups & Settings > Groups > Assignment Groups, locate the desired smart group, select the checkbox next to its name, and then choose Delete from the actions menu. Note that you can only delete one smart group at a time, and a smart group cannot be deleted if it's currently assigned.

James U.

How to integrate a list of contacts into the mobile device manager so that they appear on the respective devices?

It is not possible to integrate a list of contacts directly into the mobile device manager for distribution to devices. MDM systems often allow for the configuration of email accounts and potentially the synchronization of contacts via those accounts, the direct upload and management of contact lists may not be a standard feature. Check the specific capabilities of device and MDM platform.