I found two products open sourced in Github called MDM and EMM of WSO2
I didn't get completely what is the difference btw both of them.
WSO2 EMM is a unique mobile solution that is open source, user-friendly and distributed under the Apache Software License v2.0. WSO2 EMM includes two key aspects: Mobile Device Management (MDM) and Mobile Application Management (MAM). EMM enables organizations to secure, manage and monitor Android and iOS powered devices (e.g., smart phones, ipod touch devices and tablet PCs), irrespective of the mobile operator, service provider, or the organization. In addition, EMM also enables organizations to manage mobile application (app) life cycles via the Publisher, distribute mobile apps to users registered with EMM via the Store, and manage mobile apps (i.e., install and uninstall in bulk, blacklist, and more) via the EMM Console. EMM, maintains a compliance monitoring process to detect devices that are non-compliant to the assigned policy. In addition, EMM supports SSO and multi-tenancy.
Documentation - https://docs.wso2.com/display/EMM110/WSO2+Enterprise+Mobility+Manager
Features - http://wso2.com/products/enterprise-mobility-manager/
Enterprise Mobility Management (EMM) is the term for the comprehensive security and enablement platforms that are evolving specifically for mobility. Mobile Device Management (MDM) is one of the facets within a complete EMM solution, providing a broader set of tools for IT. These include the ability to require a PIN lock, identify and exclude jailbroken or hacked devices, and the power to remotely lock the device in case of loss. While today’s EMM products feature more granular and less intrusive controls, MDM features remain an important foundational piece of mobile enablement.
WSO2 MDM is of products which was in the 1st release (1.0.0) of WSO2 Enterprise Mobility Manager suite. MDM was targeted for managing Enterprise mobile devices (iOS & Android). Its other component is MAM which is targeted for managing Enterprise mobile applications. You can find that component in github. However in the latest release of WSO2 Mobility suite, MDM & MAM components were merged into a single product called EMM. It contains the bug fixes & some improvements also.
Related
I want to setup all my devices as COPE. WSO2 EMM setup is complete and working fine. Only thing is left is to sign the system service application with the firmware key. I am using Google devices only (Android one, Motorola G2). From where I can find the key and password to sign the application.
Is there any other alternative way to get the application signed?
As per documentation, "Sign the application via the device firmware signing key. If you don’t have access to the firmware signing key, you have to get the system application signed via your device vendor."
But I am not able to find the device firmware signing key.
Any guidance will be really helpful.
There are couple of COPE enrollment types WSO2 IoT server supports,
1. Device owner mode
2. Kioski mode
3. System application
The first 2 options can be used with any out of the box Android device. However system app is targetted towards original equipment manufacturers(OEM) who builds Android devices and maintain their own Android versions. This mean they maintain a version of Android OS image and does the installation to some customer device. If you are an OEM, you should have these keys with you. If you are not an OEM and still needs to use out of the box devices such as Motorola or Samsung to install system app, you need to form a partnerships with those vendors to get the sign the system service app. Unless you need to perform operations such as reboot or firmware upgrade. You do not need systrm service app. In that case i would recommend you to go for option 1 or 2. What are the features that you are looking at? Also it is best to seek wso2 professinal services if thats an option for you https://wso2.com/contact/
Good day
Ime looking to bring the EMM onboard in our already successful WSO2 environment but just need some help.
1) The latest EMM (2.0.0) seem to not be able to restrict/enforce the applications a device is allowed to have installed. I want to have only white listed apps installed on a device. Is this possible?
2) If a policy disables functionality e.g. the camera, all the user has to do is click on the app, deregister from EMM and bypass the policy as needed. After the user is done he/she can just register again. This does introduce the risk of a user installing unwanted software on a COPE device thus compromising the device.
3) If you have a COPE device registered and the user uninstalls the EMM app, do you loose all the monitoring functionality and control?
Thanks in advance for you assistance. :-)
Please see the answers in line.
1) That whitelisting and blacklisting part is still in progress. With a future release you should be able to block the Google play app, Apple app store app etc. and enforce only the whitelisted apps to your devices.
2) Yes that is where the monitoring helps. It needs to track whether the user has removed the app or not. Anyway if you have policies created in advance and assigned it to roles with enforce selection even after they enroll again it should get pushed back to that device.
3) Yes it is. Specially in Andorid it rely on this agent app. Other platforms like iOS will have the OS based MDM capability where this will not have any effect. Anyway Android is also going towards the same profile concept in newer Android versions. Apparently we are going to support them in a future release. For the existing versions that is how Android has provided the APIs.
I want to create an iOS app to manage the devices that enroll such the same functions on the webpage (monitor devices status and push configurations to devices). Does EMM provide some API or SDK for development?
We do have APIs for every platform. Check here for iOS. Others are listed there as well.
You will need to get a account from apple developer. In order to manage apps and distribute you will need this. Read the full doc and it will mention about the provisioning of apps in development portal.
I'm trying out the beta/unreleased code for EMM 2.0 (which I believe is now MDM) and I undestand that the mobile app store and publisher function have been moved to Enterprise Store, however I'm unable to see/add mobile apps - I only see Gadgets and Sites.
I was looking for the source in case I missed the plugin, but at https://github.com/wso2/carbon-store/tree/master/features/extensions I only see Gadgets and Sites.
Can someone tell me how to enable mobile apps and/or point me to the mobile app plugin source?
FYI, I installed ES from http://wso2.com/products/enterprise-store/ and also master branch from the following:
https://github.com/wso2/product-mdm.git
https://github.com/wso2/carbon-device-mgt-plugins.git
https://github.com/wso2/carbon-device-mgt.git
You can use WSO2 App Manager,
Please read this doc to integrate it with WSO2 EMM
https://docs.wso2.com/display/APPM100/Mobile+Apps+Configurations
WSO2 is working on integrating app management features with WSO2 EMM 2.0.0. Device and App Management both features will be shipped with EMM 2.0.0 once it is released.
I would like to know whether current version of enterprise mobility manager support Email containerization via Nitrodesk Touchdown & app containerization? If yes, Please provide me the steps..
WSO2 EMM does not support Email containerization & app containerization at the moment. But you could use WSO2 EMM to configure Email settings & control the apps that can be installed on a device.
WSO2 EMM supports email containerization via Nitrodesk touchdown. Anyway this goes with the support customers. But app containerization is not supported at the moment. For app containerization strategies you may look at Knox or iOS provided containerization strategies to be integrated into this.