How to Secure XenMobile Enrollment

Today I was asked by a customer to secure the enrollment of the users on the XenMobile platform.

In fact the customer just want to prevent someone who know user’s credentials to be able to enroll with any device.

How to accomplish that?

Here following what has been done:

1. In XenMobile Web Admin portal, after login, go in the Settings (by clicking on the wheel) and click on Enrollment
2. Change settings from that:
3. To that:

Now when user will open Secure Hub and provide the URL or his email address if auto-discovery is enabled, he will be prompted with:

The user will need to provide a PIN code.

To retrieve the PIN Code for the user, in XenMobile Web Admin portal, go in Manage and click on Enrollment Invitations

1. Click on Add / Add Invitation
2. Select the Platform type, the recipient type, provide the UserName (in this example) and click on Save
3. The User PIN appear in the console, you just need to provide it to the user

That’s it!

 

Note: Those information are provided based on my own experience.