iOS - Healthcare Patient-facing Device Demo

In this quick walkthrough we're going show you how to enroll and configure your iOS device for the iOS Healthcare Patient-facing device demo.

Overview


Before You Begin


In order to complete this demo please make sure you have the following:

  • A supervised iOS device. Please see Supervising your iOS Demo Device for instructions for device supervision
  • A valid account in the VMware TestDrive environment, sign up here if you don't
  • Activated the Workspace ONE UEM (formerly VMware AirWatch) service from the My Services tab in the VMware Testdrive Demo Portal.

 

Section 1: Enroll an iOS device to a hospital patient


Launch the Intelligent Hub app on your iOS device 

fullsizeoutput_64.jpeg

Enter your email address into the email address box and click "Next"

fullsizeoutput_6a.jpeg

What's my TestDrive email address?

Your TestDrive email address follows the below format:

[TestDriveUsername]@vmtestdrive.com

If you're unsure what your TestDrive email address is, you can verify this in the TestDrive portal by following the steps below:

  1. Login to portal.vmtestdrive.com with your username and password
  2. Click on the dropdown next to Workspace ONE to view your credentials
  3. Here you will find your TestDrive email address

Screen_Shot_2018-08-17_at_12.00.59_PM.png

The next screen is Group Selection. Group Selection allows for AirWatch to create different types of enrollments for different scenarios. In our case we will select "Healthcare - Check In/Check Out Demo" from the dropdown and select "Next"

fullsizeoutput_6d.jpeg

Now that we have initiated enrollment, we have to authenticate our username against Workspace ONE to ensure we are entitled to enroll into Workspace ONE UEM.

We will enroll the device to a patient user. Use the following credentials to enroll:

Username: patient
Password: Patient123!

fullsizeoutput_71.jpeg

Now that you have been authenticated, you will be redirected to ensure you would like to enable device management. The Intelligent Hub app will take you through installing Workspace Services on your device.

fullsizeoutput_68.jpeg

Next, you'll be directed to download the Workspace Services configuration profile. Click Allow in the browser to proceed.

fullsizeoutput_5f.jpeg

This year, Apple has introduced a new workflow to manual profile installations. This change is a new experience for profile installations called “manual profile installation”. This change results in enrollments no longer automatically redirecting from Safari to the iOS Settings to install the MDM or configuration profile. The user must now manually navigate to system settings to install the profile. These changes are part of the iOS platform and not the Workspace ONE platform.

Hit 'Close' when you see the bottom screen. 

fullsizeoutput_6e.jpeg

Navigate to 'Settings' on your device -> 'General' -> 'Profiles'.

fullsizeoutput_66.jpeg

Install the Workspace Services profile to your device. With this profile, additional restrictions and profiles including certificates are being installed on your device.

fullsizeoutput_6c.jpeg

fullsizeoutput_5a.jpeg

fullsizeoutput_69.jpeg

Once the profile is installed, navigate back to the Intelligent Hub app and launch it. Click on 'Done' when enrollment is complete. Follow the steps to accept the Terms of Use and launch into the Intelligent Hub home screen.

fullsizeoutput_6f.jpeg

Section 2: View post enrollment device configurations


Now you can click to return to the device homepage. You will notice policies and applications beginning to install on the device including the following:

  • Device will be prompted for a passcode if one is not already enabled
  • Applications will begin to install including Brainscape, iXL, Khan Academy, Netflix, PBS Kids, Scratch, Youtube Kids, MyChart Bedside, and Workspace ONE
  • The user is unable to delete applications from the device
  • Dock will rearrange to include AirWatch Agent, MyChart Bedside, and Intelligent Hub
  • Native applications have been hidden including public app store, iBookstore, Game Center, News, Safari, Music, Radio, Calendar, Contacts, Find Friends, Mail, Maps, Notes, Photos, Reminders, Tips, Camera and Videos
  • Additionally, in app purchases have been disabled

Next, click to launch the Intelligent Hub application.

fullsizeoutput_5c.jpeg

The user will be signed in using the account with with the device is enrolled. The launcher will include apps which have already been provisioned to the user. Click All Apps under the 'Categories' section so we can add more.

fullsizeoutput_70.jpeg

Here you will see the full list of apps available the the user. Some were pushed down automatically so they are already listed as installed or added. Let's click to install an on demand application by clicking "Install" under the name.

fullsizeoutput_65.jpeg

Confirm the installation by clicking "Install"

fullsizeoutput_62.jpeg

You'll see the app is now installed on the device, but since the native app catalog is hidden the user is unable to install any apps that were not curated by the admin.

fullsizeoutput_6b.jpeg

IMG_0048.PNG

 

Section 3: Enterprise wipe device to return to pre-enrolled state


To return your device to it's pre-enrolled state we will issue an enterprise wipe. First, navigate to the Workspace ONE UEM Administrative Console by navigating in your computer's browser to https://testdrive.awmdm.com. Login with your Testdrive credentials using "vmwtd.com\" as the domain. The console should perform a SAML redirect to TestDrive vIDM console where can enter your credentials without the domain as shown.

Screen_Shot_2019-06-02_at_10.46.42_PM.png

Screen_Shot_2019-06-02_at_10.49.12_PM.png

After logging into the console you will be logged into the admin role which you were last using.

Screen_Shot_2019-06-02_at_10.50.30_PM.png

The Check In Check Out demo is setup to show a device which is part of the Healthcare industry so we have created a separate company called Regional Health Systems for this persona. Click "Account" in the top right and change your role to "Device Administrator at Regional Health Systems" to view your enrolled device.

Screen_Shot_2019-06-02_at_10.51.28_PM.png

After changing your role to Regional Health Systems select "Devices" and "List View" from the left navigation bar. Your enrolled device will display in the list view. Note as you are enrolled as the Patient the listed user will be AWPatient. Click on the name of your device to bring up the device details page.

Screen_Shot_2019-06-02_at_11.14.18_PM.png

The device details page will load.

Screen_Shot_2019-06-02_at_11.14.35_PM.png

Next, select "More" and "Delete Device" under the admin section to issue an enterprise wipe to your device.

Screen_Shot_2019-06-02_at_11.15.17_PM.png

Your device will then return to the pre-enrolled state and all corporate applications and configurations will be removed.

fullsizeoutput_59.jpeg

 

Walkthrough Summary

 

For Additional Support


Review Our Knowledge Base

Have more questions? Submit a request

Article is closed for comments.