Android features

This article discusses the Android features that are supported on Secure Mail.

Viewing attachments

In Secure Mail for Android, viewing mail and calendar attachments is easy. The attachment either opens directly within the app or a list of supported apps appears. You can select the required app to view the attachment.

Secure Mail supports viewing .txt, word, audio, video, html, .zip files, images, .eml files, and .vcf contact file formats.

Prerequisites

Ensure an admin configures the following MDX policies in the Citrix Endpoint Management console:

  • Document Exchange (Open In) policy set to Unrestricted.
  • Allow Offline documents policy set to Unlimited.

For information about these policies, see the MDX policies on App Interaction.

Actions when viewing attachments

You can perform the following actions when viewing attachments:

  • Select an existing message from your mailboxes to attach the file to.
  • Create a message to attach the file to.
  • Save an attachment for offline access.
  • Delete an attachment from offline files.
  • Open an attachment by using different application when prompted to do so.
  • View the source email or calendar event of the attachment.

You can preview attachments while:

  • Viewing a message.
  • Composing a new message.
  • Forwarding a message.

You can also preview attachments from:

  • The Attachments folder.
  • The Calendar events.

Attach files to an existing email or a new email

You can attach files to an existing email or you can create an email to attach files.

  1. Tap the Attachments folder, long press to select multiple attachments, or just tap to select an attachment.

    Attachments folder

  2. Tap the Attach icon on the screen. The mailbox appears.

    Attachments icon

  3. You can perform one of the following:

    • To attach the file to an existing email, select an existing message.
    • To attach the file to a new email, tap New message.

    New message

To save the attachment for offline access

  1. Open the attachment.
  2. Tap the More icon on the top right of the page and then tap Save for Offline Access.

    Save offline option

To delete the attachment from offline files

  1. Open the attachment.
  2. Tap the More icon on the top right of the page and then tap Remove from Offline Files.

    Delete attachment option

To open the attachment by using different apps

  1. Open the attachment.
  2. Tap the More icon on the top right of the page and then tap Open with.

    Open apps with option

  3. From the options that appear, tap the app you want to open the attachment with.

    Open apps with different option

  4. Alternatively, you can swipe left to see the list of Actions that can be used to view or open an attachment.

    Swipe actions

To view the source email or calendar event of the attachment

  1. Tap the Attachments icon on the bottom right of your screen.
  2. Tap the attachment and then tap the More icon on the top right of the screen.
  3. Tap View Original Email or View Original Calendar to view the source of an email or a calendar event.

    View original email option

In Secure Mail for Android, you can print emails and calendar events from your Android device. This print functionality uses Android Print framework.

Prerequisites

  • Ensure that an administrator has set the Block Printing policy to OFF in the Citrix Endpoint Management console. For information about this policy for Android, see Block Printing policy.
  • If an email is IRM protected, ensure you enable the Allow viewers to print option in the email.

You cannot print an email or a calendar event if these policies are set inappropriately.

Note:

This print capability has the following known limitations:

  • Inline images prints only if you have downloaded images by tapping Show Pictures. If you don’t tap Show Pictures, only the image placeholders print.
  • In Secure Mail, large-sized emails are truncated. Before printing, tap Download complete message to print the complete email. If the complete message doesn’t download, a truncated email prints.
  • No metadata from an email or event is added while printing these items.

To print an email

  1. Open the email that you want to print.
  2. Tap the More icon on the top left of the screen. The following options appear:
    • Move
    • Print

    Print emails screen

Note:

On tablets, you can directly use the print icon on the top left of the screen to print an email.

Print on tablets screen

  1. Tap Print. A preview of your email appears.

  2. Tap the list and the following options appear:
    • Save as PDF
    • All printers

    printing options screen

  3. Tap Save as PDF to save your email in a PDF format.
  4. Tap All printers. Install the printer as per your requirement.
  5. Once the printer is installed, tap Select Printer to select a printer. The Printer screen appears.

    Note:

    Print options vary based on the printer selected. The following image is from a Canon E480 printer and is used for representational purpose only.

    Image of the printer option

  6. Select the printer you want to print to. Use the following print options:
    • Manually enter the number of copies you want to print.
    • Select the paper size from the list.
    • Select the color from the list.
    • Choose the page orientation as required.
    • Select a page or a range of pages and manually enter the page range.
  7. After setting up the print options, tap the Print icon on the screen.

To print an inline image

  • Tap Show pictures within the email and follow the instructions as mentioned in the preceding section To print an email.

To print a calendar event

  1. Navigate to calendar and tap an event.

    Calendar event

  2. Tap the Print icon and then follow the same instructions as mentioned in the preceding section To print an email.

    Print Calendar event

Report phishing emails with ActiveSync headers

In Secure Mail for Android, when a user reports a phishing mail, an EML file is generated as an attachment corresponding to that mail. Admins receive this mail and can view the ActiveSync headers associated with the reported mail.

To enable this feature, an admin must configure the Report Phishing Email Address policy and set the Report Phishing Mechanism as Report Via Attachment in the Citrix Endpoint Management console. For details, see Report phishing email (as an attachment).

Subfolder notifications

In Secure Mail for Android, you can receive mail notifications from subfolders of your mail account.

Note:

  • Ensure that the FCM-based push notification is enabled in the Endpoint Management console to get notifications for subfolders. For steps to configure FCM-based push notifications, see Push notifications for Secure Mail.
  • The subfolder notification feature is not available for Lotus Notes Server.

To enable notifications for subfolders

  1. Go to Settings and then under General, tap Notifications.

    Subfolder notifications settings

  2. In the Notifications screen, tap Mail folders. A list of subfolders within the inbox appears.

    Selecting mail folder

  3. Tap to select the subfolders you want to receive notifications from. Inbox is selected by default.

    Note:

    Enabling notifications for subfolders enables auto sync.

    Selecting subfolders

To disable subfolder notifications, clear the check boxes for subfolders you do not want to receive notifications from.

Notification channels

On devices running Android O or later, you can use the notifications channel settings to manage how your email and calendar notifications are handled. This feature allows you to customize and manage your notifications.

To configure notifications for mail or calendar reminders, open Secure Mail and navigate to Settings > Notifications and select the desired notification option. Secure Mail Notifications settings

You can then navigate to either Manage mail notifications or Manage calendar notifications to manage your email or calendar notifications respectively.

Mail notification channel settings

Calendar Notification channel settings

Alternatively, you can long press on the Secure Mail app icon on your device, select App info and then tap Notifications.

If your Vibrate setting was previously set to Only when silent, the Vibrate setting will change to the default vibrate setting (Off) with this feature.

Note:

The notifications on the lock screen are available based on how your admin has configured the Control locked screen notifications MDX policy.

Attaching files in Android

In Secure Mail versions 10.3.5 and later, users can’t attach images directly from the Gallery app if the Inbound document exchange (Open-in) policy is set to Restricted. If you want to keep this policy set to Restricted, but allow users to add photos from the Gallery, follow these steps in the Endpoint Management console.

  1. Set Block gallery to Off.

  2. Get the Gallery package ID for devices. Some examples:

    • LG Nexus 5: com.google.android.gallery3d, com.google.android.apps.photos
    • Samsung Galaxy Note 3: com.sec.android.gallery3d, com.sec.android.gallery3d.panorama360view, com.google.android.apps.photos
    • Sony Expire: com.sonyericsson.album, com.google.android.apps.photos
    • HTC: com.google.android.apps.photos, com.htc.album
    • Huawei: com.android.gallery3d, com.google.android.apps.photos
  3. Make the hidden policy InboundDocumentExchangeWhitelist visible:

    • Download the WorxMail APK file and wrap the file with the MDX Toolkit.
    • Find the .mdx file on your computer and change the file suffix to .zip.
    • Open the .zip file and find the policy_metadata.xml file
    • Search for and change InboundDocumentExchangeWhitelist from PolicyHidden>true</PolicyHidden> to <PolicyHidden>false</PolicyHidden>.
    • Save the policy_metadata.xml file.
    • Select all the files in that folder and compress to create the .zip file.

      Note:

      Don’t zip the outer folder. Select all files inside the folder and compress the selected files.

    • Click the resulting compressed file.
    • Choose Get Info and change the file suffix back to .mdx.
  4. Upload the modified .mdx file to the Endpoint Management console and add the list of Gallery package IDs to the now-visible Inbound document exchange whitelist policy.

    Image of the Inbound document exchange whitelist

    Ensure that the package IDs are comma-separated:

    com.sec.android.gallery3d, com.sec.android.gallery3d.panorama360view, com.google.android.apps.photos

  5. Save and deploy Secure Mail.

Android users can now attach an image from the Gallery app.

Supported file formats

An X indicates a file format that can be attached, viewed, and opened in Secure Mail.

Format iOS Android
Video: H.263 AMR NB codec_Mp4   X
Video: H.263 AMR NB codec_3gp   X
Video: H.264 AAC codec_3gp X X
Video: H.264 AAC codec_mp4 X X
Video: H.264 Acclc codec_mp4 X X
GTM recorded_wmv   X
AVI   X
WAV X X
MP4 X X
3GP X X
Flac   X
AAC X X
M4A X X
3GP(AMR-NB) X X
MP3 X X
WAV X X
OGG   X
ICO X X
JPEG X X
PNG X X
TIF (single-page only) X  
BMP X X
GIF X X
WebP   X
.dot X X
PDF X  
PPT X X
PPTX X X
DOC X X
DOCX X X
XLS X X
XLSM X X
XLSX X X
TXT X X
POT X X
HTM X X
HTML X X
ZIP X X
EML X X

Multiple Exchange accounts for Android

From Settings within Secure Mail, you can now add multiple Exchange email accounts and switch between them. This feature allows you to monitor all your mails, contacts, and calendars in one place.

Prerequisites

A user name and password is required to configure more accounts. Automatic enrollment or credential store configurations applies only to the first account setup in the app. Type the user name and password for all additional accounts.

  • If the first account you create is certificate-based, you cannot add further certificate-based accounts.
  • To allow more accounts to connect to a domain or Exchange Server in an external network, you must set split tunneling to ON in Citrix ADC.
  • Secure Mail for iOS supports Exchange and Office 365 mail servers only.

To add an Exchange email account for Android

  1. Open Secure Mail, tap the hamburger icon, and then tap the Settings icon.
  2. Under Accounts, tap Add account.
  3. In the Add accouunt screen, type the credentials for the new account.

    Optionally, you can set values for the following parameters:

    • Sync mail period: Tap to select a value for the sync mail period. The value you set specifies the number of mail days for Secure Mail to synchronize. Your administrator sets the default value.
    • Make this my default account: Tap to set the new account as your default account. The value is set to OFF by default.
  4. Tap Sign In to create the account.

    You can view the new account in the Settings screen under the Accounts menu.

Note:

Additional accounts must use authentication based on Active Directory. Secure Mail does not support certificate-based authentication when configuring multiple accounts.

To edit an account

You can edit the password and description of email account for Android.

  1. Open Secure Mail, tap the hamburger icon, and then tap the Settings icon.

  2. Under Accounts, tap the account you want to edit.

  3. In the Account screen, edit the fields.

  4. Tap Save to confirm your action or tap Cancel to return to the Settings screen.

    Image of the Account details screen

To delete an account for Android

  1. Open Secure Mail, tap the hamburger icon, and then tap the Settings icon.
  2. Under Accounts, tap the account you want to delete.
  3. In the Account details screen, tap Delete account at the bottom of the screen or tap Cancel to return to the Settings screen.
  4. Tap DELETE to confirm your action.

Note:

If you delete the default account, the next account will become the default account.

To set a default account for Android

Secure Mail uses the default account in the following scenarios:

  • Composing emails: The From: field auto-populates with the email ID of the default account.
  • Creating calendar events: The Organizer field auto-populates with the email ID of the default account.

When you add one or more email accounts, the first account you create is the default account. To change the default account, navigate to Settings and then tap Default under General.

In the Default account screen, tap the account you want to set as default.

Settings for multiple Exchange accounts for Android

If you have configured multiple Exchange accounts, some of the Secure Mail settings are available to each of these accounts individually, whereas other settings are global. The following settings are account-specific:

  • Default
  • Notifications
  • Out of Office
  • Sync inbox frequency
  • Sync mail period
  • Sync email
  • S/MIME
  • Offline Files
  • Signature
  • Quick responses
  • Sync calendar
  • Sync contacts
  • Sync with local contacts
  • Export Settings

These settings appear with the > icon. Tap the > icon to view the accounts on your device.

To apply the setting to a specific account, expand a setting item by tapping > and then select the email account.

Mailboxes screen

The Mailboxes screen displays all the accounts you have configured and has the following views:

  • All Accounts: Contains emails from all Exchange accounts that you have configured.
  • Individual accounts: Contains emails and folders of an individual account. These accounts appear as a list that you can expand to view the subfolders.

To view your mailboxes, open Secure Mail and tap the hamburger icon, In the Mailboxes screen, tap the account to expand the options.

Image of the slide-out menu options

The All Accounts view displays your emails from multiple accounts collectively, the following actions use the email address of the default or primary account:

  • New message
  • New event

To change the email address of the sender while composing a new mail from the All Accounts view, tap the default address in the From: field and then select a different account from the mail accounts that appear.

Image of the mail accounts selection

Note:

Composing an email from the conversation view auto-populates the From: field with the email address that conversation is addressed to.

Individual accounts

The default or the primary account always appears first followed by the other accounts in alphabetical order.

The individual accounts display any subfolders you might have created.

Image of subfolders

The following actions are limited to individual accounts only:

  • Moving items.
  • Composing emails from conversation view.
  • Saving contacts.

Contacts

Tap the Contacts icon in the tab bar, and then tap the hamburger icon on the top right of the screen. The Contacts screen displays the following items:

  • All Contacts: Displays all contacts from multiple email accounts. This option appears only if multiple email accounts are configured.
  • Individual email account: Displays contacts pertaining to the individual email account that are configured.
  • Categories: Displays contact categories that you may have created or selected from the predefined list to group contacts.

To view the contact folder

Note:

Contact subfolders are not supported on Secure Mail for Android. If you have created folders or subfolders for your contacts using Microsoft Outlook, you can’t view them in Secure Mail.

  1. In the contacts screen:
    • Tap on all contacts to view all the contacts from multiple email accounts.
    • Tap on individual email account to view contacts associated with a particular email account.

    Image of the Contacts list

  2. Tap on categories to view the contacts grouped under specific categories. You can choose to group contacts based on a category you create or group them under a category from a predefined list.

You can synchronize contacts pertaining to an individual account to your local contacts.

To sync with local contacts

  1. Open Secure Mail.
  2. Tap the Settings icon, and then navigate to Contacts > Sync with Local Contacts and then tap > to expand the menu.
  3. In the Sync Local Contacts screen, enable the account whose contacts you want to sync.
  4. Tap OK.
  5. When prompted to allow Secure Mail to access your contacts, tap OK.

You have now successfully exported contacts for the account. To undo this action, go to Settings > Contacts > Sync with Local Contacts and then tap on the switch next to the account to disable this feature. Tap OK to confirm your action.

Image of the Sync with local contacts confirmation

Calendar

The calendar displays all events pertaining to the multiple accounts on your device. You can set colors to individual accounts to differentiate calendars events pertaining to individual accounts.

Note:

The Personal calendar feature is always associated with your primary or default account if enabled.

Image of the calendar associated with primary or default account

To set colors to calendar events

  1. Tap the Calendar icon in the footer bar and then tap the hamburger icon in the top left. The Calendars screen displays all the accounts you have configured.
  2. Tap on the default color displayed on the right of an Exchange account. The Colors screen displays the available colors for that account.
  3. Select a color of your choice and then tap Save.
  4. To return to the previous screen, tap Cancel. The selected color is set for all calendar events pertaining to that Exchange account.

    Image of the calendar color options

    Image of the colored accounts

    Image of the calendar with colors

When you are creating a calendar invitation or event, the Organizer field auto-populates with the email address of the default account. To change the mail account, tap this email address and select another account.

Image of the organizer field

Image of the organizer selection

You can perform a global search from the Mailboxes or the All Contacts view. This action displays the appropriate results after searching all the accounts in the app.

All searches from within an individual account displays results pertaining to that account only.

Android Enterprise in Secure Mail

Secure Mail and Secure Web for Android is compatible with Android Enterprise, formerly known as Android for Work.

Prerequisites

  • To be able to use this feature, ensure that your device is running Android 5.0 or later.
  • For on-premises deployments, the afw.accounts Endpoint Management property must be set to TRUE.

After you have set up Android Enterprise in Endpoint Management, the mobile productivity apps are available on your device. The Android Enterprise icon identifies the apps, as highlighted in the following image.

Image of Android Enterprise icon

Features that are compatible with Android Enterprise

The following table lists the Secure Mail features that are compatible with Android Enterprise.

Feature Support
Exchange Server auto discovery X
Secure Ticket Authority (STA) X
Export contacts X
Microsoft Information Rights Management X
Lock-screen notifications X
Mail sync X
Email classification X
S/MIME signing and encryption X
Firebase Cloud Messaging (FCM) service X
Modern authentication (OAuth)  
Multiple Exchange accounts X
Personal calendar  
Export mail settings X
Shared devices  
Endpoint Management integration with Microsoft Intune/EMS  
Office 365 X
LDAP Exchange Server 2010, 2013, and 2016 X
Certificate based authentication (CBA)  
Go ToMeeting X
Skype for Business  
Personal distribution list X
Citrix Files compatibility X
Email enrollment with single sign-on X

The following table below lists the Secure Web features that are compatible with Android Enterprise.

Feature Support
Secure Browse mode X
Full VPN mode X
All app features X
Compatibility with Secure Mail X

Limitations

  • If Allow use of the status bar device restrictions policy is set ON for Android Enterprise in Work profile mode then calendar export progress and push notifications in Secure Mail for Android is not displayed in the status bar. However, these notifications are seen on the locked screen when allowed. For more information, see Android Enterprise settings.