The latest version of XenMobile has these new features and improvements.
Deploy iBooks to iOS devices
You can use XenMobile to deploy iBooks that you obtain through the Apple Volume Purchase Program (VPP). After you configure a VPP account in XenMobile, your purchased and free books appear in Configure > Media. From the Media pages, you configure iBooks for deployment to iOS devices by choosing delivery groups and specifying deployment rules.
The first time that a user receives an iBook and accepts the VPP license, deployed books install on the device. The books appear in the Apple iBook app. You can’t disassociate the book license from the user or remove the book from the device. XenMobile installs iBooks as required media. If a user deletes an installed book from their device, the book remains in the iBook app, ready for download.
Prerequisites
- iOS devices (minimum version iOS 8)
- Configure iOS VPP in XenMobile, as described in iOS Volume Purchase Plan.
Configure iBooks
iBooks obtained through VPP appear on the Configure > Media page.
To configure an iBook for deployment:
In Configure > Media, select an iBook and click Edit. The Book Information page appears.
The Name and Description appear only in the XenMobile console and logs.
In the iPhone iBook Settings and iPad iBook Settings pages: While you can optionally change the iBook name and description, Citrix recommends that you don’t change these settings. The image is for your information and isn’t editable. Paid iBook indicates that an iBook is purchased through VPP.
You can also specify deployment rules or view VPP information.
Optionally, assign the iBook to delivery groups and set a deployment schedule.
You can also assign iBooks to delivery groups from the Media tab for Configure > Delivery Groups. XenMobile currently supports required book deployment only.
Use the Media tab for Manage > Devices to view deployment status.
On the Configure > Media page, if you select a book and click Delete, XenMobile removes the book from the list. However, the next time XenMobile syncs with VPP, the book reappears on the list unless it has been removed from VPP. Deleting a book from the list doesn’t remove the book from devices.
Enhanced Android for Work support
XenMobile now provides a simple way to set up Android for Work for your organization. Using XenMobile Management Tools, you bind XenMobile as your enterprise mobility management provider through Google Play and create an enterprise for Android for Work.
Note
G Suite customers, use the legacy Android for Work settings to configure legacy Android for Work, as described in the Android at Work article. Click legacy Android for Work in the Android for Work page in XenMobile Settings.
You need:
- Your Citrix account credentials to sign in to XenMobile Tools
- You corporate Google ID credentials to sign in to Google Play
In the XenMobile console, click the gear icon in the upper-right corner. The Settings page appears.
On the Settings page, click Android for Work.
On the Android for Work page in XenMobile Settings, click Go to XenMobile Tools.
Sign in to your Citrix account if prompted.
In the Android for Work page in XenMobile Tools Management, click Go to Google Play.
In Google Play, register Citrix as your organization enterprise mobility management:
a. Type your organization name.
b. Ensure that Citrix is shown as your enterprise mobility management provider.
c. Accept the terms.
d. Click Confirm.
e. In the page that appears, click Complete Registration.
This step creates a file for you to download and then upload to XenMobile.
In the Android for Work page in XenMobile Tools Management, click Download.
Create a password for file encryption. You need the password again when you upload the file.
Click Go back to XenMobile.
In the XenMobile Settings > Android for Work page, click Upload file.
Browse to the file you downloaded and type the password you created. Click Upload.
An enterprise ID is added for Android for Work. To enable Android of Work, set Enable Android for Work to Yes.
New restrictions for supervised devices running iOS 10.3 and later
Restrictions allow you to prevent users from doing certain things using their devices and are implemented through device policies.
The following restrictions are now available for devices running iOS 10.3 and later, in supervised mode:
- Allow Dictation: Supervised only. If this restriction is set to OFF, dictation input is not allowed. The default setting is ON. For iOS and later.
- Force WiFi white listing: Optional. Supervised only. If this restriction is set to ON, the device can join Wi-Fi networks only when they were set up through a configuration profile. The default setting is OFF. For iOS and later.
To set these restrictions:
In the XenMobile console, select Configure > Device Policies. The Device Policies page appears.
Select Add. The Add a New Policy page appears.
Click Restrictions. The restrictions Policy information page appears.
In the Policy Information pane, type the following information:
- Policy Name: Type a descriptive name for the policy.
- Description: Type an optional description of the policy.
Click Next. The Policy Platforms page appears.
Select iOS.
Click Next until the page showing the Single App bundle ID section appears. Set the restrictions.
For more information on setting restrictions, see Restrictions device policy.
Other improvements
- The VPN policy for iOS devices now has a per-app VPN option for iKEv2 type VPN policies. iOS 9.0 and later devices support per-app VPN for iKEv2 connections. The per-app VPN Enable per-app VPN options are Enable per-app VPN, On-demand match app enabled, and Safari domains.
Under the “iOS” section, add to the iKEv2 connection type section:
Enable per-app VPN: Select whether to enable per-app VPN. The default is OFF. Available only on iOS 9.0 and later.
On-demand match app enabled: Select whether per-app VPN connections are triggered automatically when apps linked to the per-app VPN service initiate network communication. The default is OFF.
Safari domains: Click Add to add a Safari domain name.
- Wipe code for macOS devices shown in the XenMobile console. macOS devices require the user to enter a PIN code after the device has been wiped. If the user does not remember this code, you can now look up the wipe code in the Manage > Device details page.
- When you use VPP to deploy an MDX app, the Secure Hub store now shows only the VPP instance of the app. Previously, both the VPP and MDX apps appeared in the store. This change prevents end users from installing the MDX version of the app, which requires the user to have an iTunes account. When you add an MDX app, there is a new setting, App deployed via VPP. Change that setting to ON if you plan to deploy the app by using VPP.
New public REST APIs
The XenMobile Public API for REST Services now includes the following APIs:
- Get by Container ID
- MDX mobile apps
- Enterprise mobile apps
- WebLink apps
- Web/Saas apps
- Public store apps
- Upload app in new or existing container
- MDX mobile apps
- Enterprise mobile apps
- Update platform details inside the container for MDX mobile apps
- Add or update app
- WebLink apps
- Web/Saas apps
- Get all Web/Saas connectors or get Web/Saas connectors by connector name
- Delete app container
- MDX mobile apps
- Enterprise mobile apps
- WebLink apps
- Web/Saas apps
- Public store apps
For details, see XenMobile Public API for REST Services.
Fixed issues in this release
When you create a Send Notification action that is set to repeat 0 times, iOS and Android users get spammed with notifications.
After an upgrade from XenMobile 10.4 to 10.5: When enrolling iOS and Android devices, MAM enrollment fails if LDAP is managed with Global Catalog and the client property SEND_LDAP_ATTRIBUTES is configured. MDM enrollment succeeds.
After you enroll an iOS device in Secure Hub, XenApp or XenDesktop applications from a non-default category appear without an icon. If users click on such applications, the error message “Failed to get application details, please try again later” appears.
On the XenMobile Settings > Google Play Credentials page: After you type the settings and click Save, the message “Email or password incorrect” appears intermittently. This error is due to an update from Google.
On the Android platform page for the VPN device policy, for the Citrix VPN connection type: The following labels aren’t translated in the German, Korean, and Simplified Chinese versions of the XenMobile console:
- Password and Certificate (an Authentication type option)
- Application List, App Package Name
Known issues in this release
Enrollment invitations to macOS devices refer to MACOSX instead of macOS.
If a VPN Connection name has a space, or other non-alphanumeric characters, XenMobile doesn’t deploy the policy to devices.
After a user removes a book from the iBook app, the book doesn’t reinstall automatically. To download the book again, press the download icon within iBooks.