Orb Data

Orb Data's Blog Site

Mobile Device Containerisation, IEM and Enterproid Divide [ Part 2 of 2 ]

This is Part 2 of the blog on Mobile Device Containerisation, IBM Endpoint Manager and Enterproid Divide. Actually to be correct this should just be Divide as since Part 1 of this blog  was published, Enterproid Divide has been rebranded simply as Divide on the back of fresh funding led by Google Ventures.

Divide as previously discussed, is a container solution for Apple iOS and Android devices. Divide is an app that acts as a secure workspace containing device capabilities like email, calendar, browser and corporate apps while remaining isolated from the rest of the device. This container solution allows information from within Divide to be secured and managed separately.

The latest release of IBM Endpoint Manager for Mobile Devices allows for management of endpoints with Divide containers. This allows you to manage either the physical mobile device, the container or both.

Here we discuss the integration of Divide and IBM Endpoint Manager for Mobile Devices.

Architecture Overview – IBM Endpoint Manager + Divide

The high level architecture of the IBM Endpoint Manager and Divide integration is described in the following diagram. We then go on to discuss installation, deployment and configuration of the solution.

High Level Architecture

Divide Installation and Configuration on Device

The first part of installation is to download and install the Divide app from Apple’s app store, Google Play or Divide. The installation of the app is discussed in Part 1 of this blog, as is the ability to manage your container from My Divide.

Once the app is downloaded to your device There are now a couple of things that require deployment and configuration from the IBM Endpoint Manager end.

IBM Endpoint Manager Deployment and Configuration

Deploying the Divide Management Extender

To deploy a Divide Management Extender, perform the following steps:

After a Divide Management Extender has been deployed, it is listed as an individual computer with the name Divide Container <##> (<Relay_Name>) where <##> is the numerical number of the extender and <Relay Name> is the hostname of the relay that the extender is installed on.  This behavior is different from other management extenders, and allows Divide Management Extenders to be multitenant-capable without further configuration.

Configuring the Divide Management Extender

After a Divide Management Extender has been deployed, it must be configured.  Configuration requires the domain you registered with Divide as well as the associated access token; these are provided by your Divide administrator.

To configure a Divide Management Extender, perform the following tasks:

Note: If you click the underlined computer name link, the console displays the properties of that computer.  Click Back to return to the Configure Extenders window.

p2-7

At this stage you should now have at least one device (perhaps many) with the Divide app installed and an IBM Endpoint Manager Divide Extender deployed and configured.

Divide Tasks from IBM Endpoint Manager

Apple iOS and Android devices that have been enrolled in a Divide deployment and are managed by a Divide Management Extender can have tasks performed on them through IBM Endpoint Manager for Mobile Devices. These tasks are initiated on the IBM Endpoint Manager, but are facilitated through Divide.

The following tasks can be performed only on Android devices running Divide.

NOTE: Use caution when initiating this task.  This task completely deletes all information on the target device.  The device will no longer be enrolled in any deployments including Divide or IBM Endpoint Manager.  Selectively wiping Divide data only can be performed using Fixlet 617: Wipe Enterproid Divide Container Data – Divide.

The following tasks can be performed on both Apple iOS and Android devices:

NOTE: The password created using this task is not secure and will be visible in the console’s action history. In addition, Android device users may not be notified that the password has change.

NOTE: This task will delete the enrollment credentials of the Divide container.  This means the device cannot be managed by Divide unless a user enrolls the device again.  In addition, this task my never complete, because the target device will be unable to communicate to the Divide deployment to report its status.

Divide Manager

Finally the Divide containers under management through IBM Endpoint Manager are also available within Divide Manager. This allows you to manage your Android / iOS devices outside of IBM Endpoint Manager.

If you are interested in Divide for your business please contact us at sales@orb-data.com for more information.

Disclaimer: All content provided on this blog is for informational purposes only. The owner of this blog makes no representations as to the accuracy or completeness of any information on this site or found by following any link on this site. The owner will not be liable for any errors or omissions in this information nor for the availability of this information. The owner will not be liable for any losses, injuries, or damages from the display or use of this information. The opinions found on this site are completely those of the author. These terms and conditions of use are subject to change at anytime and without notice.

, , , , , , , ,

Leave a Reply

Your email address will not be published. Required fields are marked *