In this quick walkthrough we're going show you how to enroll and configure your iOS device for the iOS Healthcare Patient-facing device demo.
Before You Begin
In order to complete this demo please make sure you have the following:
- A supervised iOS device. Please see Supervising your iOS Demo Device for instructions for device supervision
- A valid account in the VMware TestDrive environment, sign up here if you don't
- Activated the Workspace ONE UEM (formerly VMware AirWatch) service from the My Services tab in the VMware Testdrive Demo Portal.
Section 1: Enroll an iOS device to a hospital patient
Launch the Intelligent Hub app on your iOS device
Enter your email address into the email address box and click "Next"
Your TestDrive email address follows the below format:
If you're unsure what your TestDrive email address is, you can verify this in the TestDrive portal by following the steps below:
- Login to portal.vmtestdrive.com with your username and password
- Click on the dropdown next to Workspace ONE to view your credentials
- Here you will find your TestDrive email address
The next screen is Group Selection. Group Selection allows for AirWatch to create different types of enrollments for different scenarios. In our case we will select "Healthcare - Check In/Check Out Demo" from the dropdown and select "Next"
Now that we have initiated enrollment, we have to authenticate our username against Workspace ONE to ensure we are entitled to enroll into Workspace ONE UEM.
We will enroll the device to a patient user. Use the following credentials to enroll:
Now that you have been authenticated, you will be redirected to ensure you would like to enable device management. The Intelligent Hub app will take you through installing Workspace Services on your device.
Next, you'll be directed to download the Workspace Services configuration profile. Click Allow in the browser to proceed.
This year, Apple has introduced a new workflow to manual profile installations. This change is a new experience for profile installations called “manual profile installation”. This change results in enrollments no longer automatically redirecting from Safari to the iOS Settings to install the MDM or configuration profile. The user must now manually navigate to system settings to install the profile. These changes are part of the iOS platform and not the Workspace ONE platform.
Hit 'Close' when you see the bottom screen.
Navigate to 'Settings' on your device -> 'General' -> 'Profiles'.
Install the Workspace Services profile to your device. With this profile, additional restrictions and profiles including certificates are being installed on your device.
Section 2: View post enrollment device configurations
Now you can click to return to the device homepage. You will notice policies and applications beginning to install on the device including the following:
- Device will be prompted for a passcode if one is not already enabled
- Applications will begin to install including Brainscape, iXL, Khan Academy, Netflix, PBS Kids, Scratch, Youtube Kids, MyChart Bedside, and Workspace ONE
- The user is unable to delete applications from the device
- Dock will rearrange to include AirWatch Agent, MyChart Bedside, and Intelligent Hub
- Native applications have been hidden including public app store, iBookstore, Game Center, News, Safari, Music, Radio, Calendar, Contacts, Find Friends, Mail, Maps, Notes, Photos, Reminders, Tips, Camera and Videos
- Additionally, in app purchases have been disabled
Next, click to launch the Intelligent Hub application.
The user will be signed in using the account with with the device is enrolled. The launcher will include apps which have already been provisioned to the user. Click All Apps under the 'Categories' section so we can add more.
Here you will see the full list of apps available the the user. Some were pushed down automatically so they are already listed as installed or added. Let's click to install an on demand application by clicking "Install" under the name.
Confirm the installation by clicking "Install"
You'll see the app is now installed on the device, but since the native app catalog is hidden the user is unable to install any apps that were not curated by the admin.
Section 3: Enterprise wipe device to return to pre-enrolled state
To return your device to it's pre-enrolled state we will issue an enterprise wipe. First, navigate to the Workspace ONE UEM Administrative Console by navigating in your computer's browser to https://testdrive.awmdm.com. Login with your Testdrive credentials using "vmwtd.com\" as the domain. The console should perform a SAML redirect to TestDrive vIDM console where can enter your credentials without the domain as shown.
After logging into the console you will be logged into the admin role which you were last using.
The Check In Check Out demo is setup to show a device which is part of the Healthcare industry so we have created a separate company called Regional Health Systems for this persona. Click "Account" in the top right and change your role to "Device Administrator at Regional Health Systems" to view your enrolled device.
After changing your role to Regional Health Systems select "Devices" and "List View" from the left navigation bar. Your enrolled device will display in the list view. Note as you are enrolled as the Patient the listed user will be AWPatient. Click on the name of your device to bring up the device details page.
The device details page will load.
Next, select "More" and "Delete Device" under the admin section to issue an enterprise wipe to your device.
Your device will then return to the pre-enrolled state and all corporate applications and configurations will be removed.