What is MDM?
Mobile device management (MDM) is a critical security measure to protect company data, like email, on mobile devices. It is a common requirement of compliance policies and regulators. Once enabled it ensures that company data is encrypted and protected by an additional passcode and significantly increased the security of your email on your device.
Below is a video by Citrix showing the download and install of Citrix's Secure Hub on an Apple iPhone.
ProCirrus Instructions to install and configure MDM are listed below:
NOTE: If you have any other certifications (i.e. Intune) on your phone for managing email, you will need to uninstall them first. You can see if you have them on your phone by navigating to Settings -> General and scroll down to Profiles & Device Management
Setting up the Mobile Device Management on IOS is a bit of a chore and it is comprised of four major sections. The video above will show you steps 1-2. 1-2 are all you need if you are using "MDM Lite" which allows you to use your email app of choice. After you have setup steps 1-2, if you are using MDM Lite, you can skip step 3 and add your email to your phone's email app (Apple Mail, or Outlook for iOS)
1) Installing the Citrix Secure Hub (Shown in video above)
2) Install XenMobile Profile Service (Shown in video above)
3) Installing the Secure Hub Applications for MDM - Full
Section 1 - Installing the Citrix Secure Hub
1 - Download the Citrix Secure Hub from the Apple App Store.
2 - Open the Citrix Secure Hub App on your phone (after it installs)
3 - When prompted, click Allow for notifications
4 - On the next screen enter mdm.procirrus.com and click next.
5 - Enter your email credentials and click next.
6 - A Message will pop asking if you want to enroll. Select Yes, Enroll
7 - The next page will show Device Management Information. Click "Next" twice on the two prompts.
Section 2 - Installing the XenMobile CA Cert
1 - After clicking next on the previous prompts, this screen will appear. It will pop up and ask to download a configuration file. Click "Allow"
After the profile is downloaded, click "Close"
2 - After clicking close, swipe up from the bottom to go back to your home screen. On an older iPhone, click the home button to return to your home screen.
On your phone, navigate to Settings -> General. Scroll down and click on VPN & Device Management.
3 - Click the XenMobile Profile Service, and click "Install" up at the top right:
4 - After clicking "Install", it will prompt you for your iPhone's passcode. This is not your ProZone password managed by ProCirrus, this is your Apple passcode that you use when you install apps on your phone
Enter your phone's passcode:
5 - You will receive a Warning stating that the service cannot be verified. This is normal and expected, click "Install" up at the top right, and then click "Install" down at the bottom, and Install
6 - You will receive another warning. This is normal and expected. Click "Install" up at the top right again, and then click "Trust":
7 - Click "Done". Don't worry about the Not Verified message.
NOTE: If you are using MDM Lite - You are done. You can now go back to the mail App of your choice and add your email account. You can use the Mail App, or you can download the Microsoft Outlook app for iOS, both work.
Here is a link to a guide to add your email to an iPhone: Add Email to iPhone
If you are using MDM "Full" and need to install the Citrix Secure Mail app into the Secure Hub, continue with the steps below.
Section 3 - Installing the Secure Hub Applications for MDM - Full.
The Secure Hub has several applications to choose from. At a minimum you will want to install Secure Mail so you can access your company email.
1. Switch back to or launch the Secure Hub application. When you launch it, it will load for a few seconds, and then prompt you to create a Citrix Pin. This will be your Pin to login to the Secure Mail App.
Create your Secure Hub Pin. It will have you put the Pin in, and then it will ask you to put it in again to confirm it.
NOTE: From time to time you will be prompted to use this pin. Don't forget it. For the most part you can access your mail by the phones security like thumbprint or facial recognition.
2 - You may be prompted for your location services options. This is up to you if you want to enable this or not. In the event someone steals your phone or you misplace it somewhere, we can help you locate it.
3 - From the Secure Hub, select Secure Mail. Click Install. It will prompt you to install both the Secure Mail and Secure Web apps. Click Install twice to install them both.
4 - It might take a few minutes for the installs to finish.You can go back to your home screen and monitor the progress of this by looking at the icons as they install. After they have finished, Launch Secure Mail, you will get a prompt to authorize the app. Select "Authorize":
5 - When you select Authorize, it will redirect you to a Microsoft login prompt. Login with your ProZone credentials:
6- You will be asked if you want Secure Mail to send you notifications. This is up to you, if you allow this you will get notifications of new emails. If you do not, you would need to launch the app periodically to see if you have new emails.
7- You are done Installing and setting up the apps. You can watch or skip the Demo of the features.
You should be all set!