Aerion Training:     Aerion offers AirWatch custom training at your location, online and in our classroom.  

          
    Next classroom trainings: 01/2018 and 02/2018 - Click here for more information.          

AirWatch provides two enrollment methods for Windows Phone 8.1 devices. In this article I am going to walk through both of them and compare advantages and disadvantages of each method.

Shortly the enrollment methods to an AirWatch environment are:

  1. Workplace based enrollment
  2. Classic agent based enrollment

Let's have a look at the enrollment process details and requirements.

1. Workplace based enrollment

Workplace based enrollment assumes that the customer has setup a Windows Auto-discovery Service (WADS - provided by AirWatch) and that the AirWatch Agent has been configured as an internal app to be automatically pushed to enrolled devices.
Contact us to request a step by step guide with all requirements and setup instructions.

In addition to the below method AirWatch also offers "Web based" enrollment through Workplace based enrollment, which allows to ask additional questions from users like asset number, phone number or device ownership. For the sake of simplicity this method is not covered in this article.

Enrollment Process

Users start the enrollment process by going to > Settings > Workplace > Add Account after which they perform the following steps.

Windows Phone 8.1 Workplace enrollment with AirWatch  1. User types his e-mail address and taps "sign in".
Windows Phone 8.1 Workplace enrollment with AirWatch  2. The devices presents a password field. If the AirWatch environment is AD integrated, users can type their AD password. Otherwise they type their AirWatch password and tap "sign in" again.
Windows Phone 8.1 Workplace enrollment with AirWatch  3. In the confirmation screen the check-box "Install company app" is already checked in. Users only need to tap on "done".
Windows Phone 8.1 Workplace enrollment with AirWatch  4. The AirWatch agent is automatically downloaded to the users device, without any interaction. To finalize the enrollment, users open the AirWatch agent and wait usually about one minute until the agent interface shows up.

Pre-requirements on device for workplace based enrollment

- None

Pre-requirements in customer's environment for workspace based enrollment

Contact us to request a step by step guide with all requirements and setup instructions.

- Windows Auto-discovery service (WADS), provided by AirWatch

- SSL certificate purchased from a public certificate authority for WADS server

- Symantec code signing certificate to sign AirWatch agent as internal app2. Classic agent based enrollment

 

2. Agent based enrollment

Enrollment Process

1. Agent Installation

Users start the enrollment by downloading the AirWatch Agent from the Windows Phone App store to their device. AirWatch provides different methods of how to make users aware of the correct app:

- Administrators can send an e-mail to all users from within the AirWatch Admin console which contains a link to the correct app in the store.

- Administrators can send an e-mail to all users from within the AirWatch Admin console or via native e-mail client with instructions to browse to: http://awagent.com and follow the instructions on the screen. The awagent.com URL will recognize the device operating system from which it is being accessed and provides a link to the AirWatch agent in the according app store.

- Users can go to the app store and search for "Airwatch mdm agent" and install the agent from the search results

2. Agent based enrollment and workplace setup

After the agent has been installed, the user opens the agent app, accepts the location services prompt and then fills in the required fields and sets up the workplace.

Windows Phone 8.1 Agent enrollment with AirWatch  1. User types his e-mail address (assuming that the e-mail domain has been registered with AirWatch)
Windows Phone 8.1 Agent enrollment with AirWatch  2. User types his AirWatch username and password (if AD integration is used, users type their Active Directory username and password)
Windows Phone 8.1 Agent enrollment with AirWatch  3. User copies the server URL to the clipboard
Windows Phone 8.1 Agent enrollment with AirWatch  4. User goes to Settings > Workplace > Add account and types his e-mail address and presses "sign in"
Windows Phone 8.1 Agent enrollment with AirWatch  5. User pastes server URL and clicks "sign in" again
Windows Phone 8.1 Agent enrollment with AirWatch  6. User switches back to AirWatch agent screen and copies the password to the clipboard
 Windows Phone 8.1 Agent enrollment with AirWatch 7. User switches back to Workplace setup screen and pastes the password then clicks "sign in" again.
 Windows Phone 8.1 Agent enrollment with AirWatch 8. After the workplace has confirmed that the account has been added, the user opens the AirWatch agent again to finalize the enrollment process.

Pre-requirements on device for agent based enrollment

- Microsoft Account (previously called Windows Live ID)

Pre-requirements in customer's environment for agent based enrollment

- None
- Anyway it is suggested that customers register their e-mail domains with AirWatch to automatically pass the AirWatch group ID and environment URL to the agent, after users type their e-mail address (to avoid that users need to know and type the groupID and environment URL).

Summary

While the agent based enrollment method has no pre-requirements to the customer's environment, it might be too difficult for production usage where users are going to enroll their own devices. Anyway it is a good method to evaluate the new Windows Phone 8.1 enterprise management functionality for IT, without the need of any additional setup.

For production usage the workplace based enrollment method will be the choice for most customers as it tremendously simplifies the enrollment process for users.

Aerion Solutions provides consulting services to help customers with the setup and configuration for their AirWatch (on-premise and hosted) environment. Contact us to request a demo or assistance in setting up your environment.