iOS - Healthcare Patient-facing Device Demo

In this quick walkthrough we're going show you how to enroll and configure your iOS device for the iOS Healthcare Patient-facing device demo. 


Before You Begin

In order to complete this demo please make sure you have the following:

  • A supervised iOS device. Please see Supervising your iOS Demo Device for instructions for device supervision
  • A valid account in the VMware TestDrive environment, sign up here if you don't
  • Activated the Workspace ONE UEM (formerly VMware AirWatch) service from the My Services tab in the VMware Testdrive Demo Portal.


Section 1: Enroll an iOS device to a hospital patient

Launch the AirWatch Agent on your iOS device 

You will see the main "Welcome to AirWatch!" page with three different authentication methods available for enrollment. In the VMware TestDrive Workspace ONE UEM instance, we only support enrollment through the "Email Address" method. Click on "Email Address" to continue. 

What's my TestDrive email address?

If you're unsure what your TestDrive email address is, you can verify this in the TestDrive portal by following the steps below:

  1. Login to with your username and password
  2. Click on the dropdown next to Workspace ONE to view your credentials
  3. Here you will find your TestDrive email address


Enter your modified email address into the email address box and click "Go"

The next screen is Group Selection. Group Selection allows for AirWatch to create different types of enrollments for different scenarios. In our case we will select "Healthcare - Check In/Check Out Demo" from the dropdown and select "Next" 

Now that we have initiated enrollment, we have to authenticate our username against Workspace ONE to ensure we are entitled to enroll into Workspace ONE UEM.

We will enroll the device to a patient user. Use the following credentials to enroll:

Username: awpatient 
Password: patient123!


Now that you have been authenticated, you will be redirected to ensure you would like to enable device management. Click on "Redirect and Enable" to initiate the profile installation steps. 

Now you will be prompted to allow the installation of the Workspace ONE UEM iOS Profiles for your device. Profiles are the policies defined for this enrollment on what Workspace ONE UEM can manage on your device. Click "Install" 

For security purposes you will be prompted to enter your iOS device passcode. Enter your passcode if you have one and you will be taken to the next step. 

Now that you have verified that you approve, you will confirm that you would like to install the Profile. Click "Install" 

A warning will appear detailing a generic statement about device management. The actual features that can be monitored or controlled by Workspace ONE UEM on iOS are defined in the profile and vary depending on what has been setup for the particular profile. Click "Install"

In order for any level of device management to be able to take place, we must enable "Remote Management" on IOS. Click "Trust" allowing the VMware TestDrive instance to remotely control the device for the purpose of you being able to utilize Workspace ONE UEM features. 

A verification that the profile was installed will appear. You may review the profiles and click "Done" to continue. 

Now you will be redirected to be able to open the AirWatch Agent. Click on "Open" 

You will see successful completion page titled "Authentication Complete" Click on "Done" 


Section 2: View post enrollment device configurations

Now you can click to return to the device homepage. You will notice policies and applications beginning to install on the device including the following:

  • Device will be prompted for a passcode if one is not already enabled
  • Applications will begin to install including Brainscape, iXL, Khan Academy, Netflix, PBS Kids, Scratch, Youtube Kids, MyChart Bedside, and Workspace ONE
  • The user is unable to delete applications from the device
  • Dock will rearrange to include AirWatch Agent, MyChart Bedside, and Workspace ONE
  • Native applications have been hidden including public app store, iBookstore, Game Center, News, Safari, Music, Radio, Calendar, Contacts, Find Friends, Mail, Maps, Notes, Photos, Reminders, Tips, Camera and Videos
  • Additionally, in app purchases have been disabled

Next, click to launch the Workspace ONE application.


The Workspace ONE tenant will be automatically entered. Click "Next" to continue logging in.

The user will be signed in using the account with with the device is enrolled. The launcher will include apps which have already been provisioned to the user. Click the catalog so we can add more.


Here you will see the full list of apps available the the user. Some were pushed down automatically so they are already listed as installed or added. Lets click to install an on demand application by clicking "Install" under the name.


Confirm the installation by clicking "Install"


You'll see the app is now installed on the device, but since the native app catalog is hidden the user is unable to install any apps that were not curated by the admin.



Section 3: Enterprise wipe device to return to pre-enrolled state

To return your device to it's pre-enrolled state we will issue an enterprise wipe. First, navigate to the Workspace ONE UEM Administrative Console by navigating in your computer's browser to Login with your Testdrive credentials using "vmwdemo\" as the domain.

After logging into the console you will be logged into the admin role which you were last using. 

The Check In Check Out demo is setup to show a device which is part of the Healthcare industry so we have created a separate company called Regional Health Systems for this persona. Click "Account" in the top right and change your role to "Device Administrator at Regional Health Systems" to view your enrolled device.

After changing your role to Regional Health Systmes select "Devices" and "List View" from the left navigation bar. Your enrolled device will display in the list view. Note as you are enrolled as the Patient the listed user will be AWPatient. Click on the name of your device to bring up the device details page.


The device details page will load.


Next, select "More" and "Delete Device" under the admin section to issue an enterprise wipe to your device. 


Your device will then return to the pre-enrolled state and all corporate applications and configurations will be removed.



Walkthrough Summary


For Additional Support

Review Our Knowledge Base

Have more questions? Submit a request

Article is closed for comments.