This article discusses the Android features that are supported on Secure Mail.
In Secure Mail for Android, viewing mail and calendar attachments is easy. The attachment either opens directly within the app or a list of supported apps appears. You can select the required app to view the attachment.
Secure Mail supports viewing .txt, word, audio, video, html, .zip files, images, .eml files, and .vcf contact file formats.
Ensure an admin configures the following MDX policies in the Citrix Endpoint Management console:
- Document Exchange (Open In) policy set to Unrestricted.
- Allow Offline documents policy set to Unlimited.
For information about these policies, see the MDX policies on App Interaction.
Actions when viewing attachments
You can perform the following actions when viewing attachments:
- Select an existing message from your mailboxes to attach the file to.
- Create a message to attach the file to.
- Save an attachment for offline access.
- Delete an attachment from offline files.
- Open an attachment by using different application when prompted to do so.
- View the source email or calendar event of the attachment.
You can preview attachments while:
- Viewing a message.
- Composing a new message.
- Forwarding a message.
You can also preview attachments from:
- The Attachments folder.
- The Calendar events.
Attach files to an existing email or a new email
You can attach files to an existing email or you can create an email to attach files.
Tap the Attachments folder, long press to select multiple attachments, or just tap to select an attachment.
Tap the Attach icon on the screen. The mailbox appears.
You can perform one of the following:
- To attach the file to an existing email, select an existing message.
- To attach the file to a new email, tap New message.
To save the attachment for offline access
- Open the attachment.
Tap the More icon on the top right of the page and then tap Save for Offline Access.
To delete the attachment from offline files
- Open the attachment.
Tap the More icon on the top right of the page and then tap Remove from Offline Files.
To open the attachment by using different apps
- Open the attachment.
Tap the More icon on the top right of the page and then tap Open with.
From the options that appear, tap the app you want to open the attachment with.
Alternatively, you can swipe left to see the list of Actions that can be used to view or open an attachment.
To view the source email or calendar event of the attachment
- Tap the Attachments icon on the bottom right of your screen.
- Tap the attachment and then tap the More icon on the top right of the screen.
Tap View Original Email or View Original Calendar to view the source of an email or a calendar event.
Print emails and calendar events
In Secure Mail for Android, you can print emails and calendar events from your Android device. This print functionality uses Android Print framework.
- Ensure that an administrator has set the Block Printing policy to OFF in the Citrix Endpoint Management console. For information about this policy for Android, see Block Printing policy.
- If an email is IRM protected, ensure you enable the Allow viewers to print option in the email.
You cannot print an email or a calendar event if these policies are set inappropriately.
This print capability has the following known limitations:
- Inline images prints only if you have downloaded images by tapping Show Pictures. If you don’t tap Show Pictures, only the image placeholders print.
- In Secure Mail, large-sized emails are truncated. Before printing, tap Download complete message to print the complete email. If the complete message doesn’t download, a truncated email prints.
- No metadata from an email or event is added while printing these items.
To print an email
- Open the email that you want to print.
- Tap the More icon on the top left of the screen. The following options appear:
On tablets, you can directly use the print icon on the top left of the screen to print an email.
Tap Print. A preview of your email appears.
- Tap the list and the following options appear:
- Save as PDF
- All printers
- Tap Save as PDF to save your email in a PDF format.
- Tap All printers. Install the printer as per your requirement.
Once the printer is installed, tap Select Printer to select a printer. The Printer screen appears.
Print options vary based on the printer selected. The following image is from a Canon E480 printer and is used for representational purpose only.
- Select the printer you want to print to. Use the following print options:
- Manually enter the number of copies you want to print.
- Select the paper size from the list.
- Select the color from the list.
- Choose the page orientation as required.
- Select a page or a range of pages and manually enter the page range.
- After setting up the print options, tap the Print icon on the screen.
To print an inline image
- Tap Show pictures within the email and follow the instructions as mentioned in the preceding section To print an email.
To print a calendar event
Navigate to calendar and tap an event.
Tap the Print icon and then follow the same instructions as mentioned in the preceding section To print an email.
Report phishing emails with ActiveSync headers
In Secure Mail for Android, when a user reports a phishing mail, an EML file is generated as an attachment corresponding to that mail. Admins receive this mail and can view the ActiveSync headers associated with the reported mail.
To enable this feature, an admin must configure the Report Phishing Email Address policy and set the Report Phishing Mechanism as Report Via Attachment in the Citrix Endpoint Management console. For details, see Report phishing email (as an attachment).
In Secure Mail for Android, you can receive mail notifications from subfolders of your mail account.
- Ensure that the FCM-based push notification is enabled in the Endpoint Management console to get notifications for subfolders. For steps to configure FCM-based push notifications, see Push notifications for Secure Mail.
- The subfolder notification feature is not available for Lotus Notes Server.
To enable notifications for subfolders
Go to Settings and then under General, tap Notifications.
In the Notifications screen, tap Mail folders. A list of subfolders within the inbox appears.
Tap to select the subfolders you want to receive notifications from. Inbox is selected by default.
Enabling notifications for subfolders enables auto sync.
To disable subfolder notifications, clear the check boxes for subfolders you do not want to receive notifications from.
On devices running Android O or later, you can use the notifications channel settings to manage how your email and calendar notifications are handled. This feature allows you to customize and manage your notifications.
To configure notifications for mail or calendar reminders, open Secure Mail and navigate to Settings > Notifications and select the desired notification option.
You can then navigate to either Manage mail notifications or Manage calendar notifications to manage your email or calendar notifications respectively.
Alternatively, you can long press on the Secure Mail app icon on your device, select App info and then tap Notifications.
If your Vibrate setting was previously set to Only when silent, the Vibrate setting will change to the default vibrate setting (Off) with this feature.
The notifications on the lock screen are available based on how your admin has configured the Control locked screen notifications MDX policy.
Attaching files in Android
In Secure Mail versions 10.3.5 and later, users can’t attach images directly from the Gallery app if the Inbound document exchange (Open-in) policy is set to Restricted. If you want to keep this policy set to Restricted, but allow users to add photos from the Gallery, follow these steps in the Endpoint Management console.
Set Block gallery to Off.
Get the Gallery package ID for devices. Some examples:
- LG Nexus 5: com.google.android.gallery3d, com.google.android.apps.photos
- Samsung Galaxy Note 3: com.sec.android.gallery3d, com.sec.android.gallery3d.panorama360view, com.google.android.apps.photos
- Sony Expire: com.sonyericsson.album, com.google.android.apps.photos
- HTC: com.google.android.apps.photos, com.htc.album
- Huawei: com.android.gallery3d, com.google.android.apps.photos
Make the hidden policy InboundDocumentExchangeWhitelist visible:
- Download the WorxMail APK file and wrap the file with the MDX Toolkit.
- Find the .mdx file on your computer and change the file suffix to .zip.
- Open the .zip file and find the policy_metadata.xml file
- Search for and change InboundDocumentExchangeWhitelist from
- Save the policy_metadata.xml file.
- Select all the files in that folder and compress to create the .zip file.
Don’t zip the outer folder. Select all files inside the folder and compress the selected files.
- Click the resulting compressed file.
- Choose Get Info and change the file suffix back to .mdx.
Upload the modified .mdx file to the Endpoint Management console and add the list of Gallery package IDs to the now-visible Inbound document exchange whitelist policy.
Ensure that the package IDs are comma-separated:
com.sec.android.gallery3d, com.sec.android.gallery3d.panorama360view, com.google.android.apps.photos
Save and deploy Secure Mail.
Android users can now attach an image from the Gallery app.
Supported file formats
An X indicates a file format that can be attached, viewed, and opened in Secure Mail.
|Video: H.263 AMR NB codec_Mp4||X|
|Video: H.263 AMR NB codec_3gp||X|
|Video: H.264 AAC codec_3gp||X||X|
|Video: H.264 AAC codec_mp4||X||X|
|Video: H.264 Acclc codec_mp4||X||X|
|TIF (single-page only)||X|
Multiple Exchange accounts for Android
From Settings within Secure Mail, you can now add multiple Exchange email accounts and switch between them. This feature allows you to monitor all your mails, contacts, and calendars in one place.
A user name and password is required to configure more accounts. Automatic enrollment or credential store configurations applies only to the first account setup in the app. Type the user name and password for all additional accounts.
- If the first account you create is certificate-based, you cannot add further certificate-based accounts.
- To allow more accounts to connect to a domain or Exchange Server in an external network, you must set split tunneling to ON in Citrix ADC.
- Secure Mail for iOS supports Exchange and Office 365 mail servers only.
To add an Exchange email account for Android
- Open Secure Mail, tap the hamburger icon, and then tap the Settings icon.
- Under Accounts, tap Add account.
In the Add accouunt screen, type the credentials for the new account.
Optionally, you can set values for the following parameters:
- Sync mail period: Tap to select a value for the sync mail period. The value you set specifies the number of mail days for Secure Mail to synchronize. Your administrator sets the default value.
- Make this my default account: Tap to set the new account as your default account. The value is set to OFF by default.
Tap Sign In to create the account.
You can view the new account in the Settings screen under the Accounts menu.
Additional accounts must use authentication based on Active Directory. Secure Mail does not support certificate-based authentication when configuring multiple accounts.
To edit an account
You can edit the password and description of email account for Android.
Open Secure Mail, tap the hamburger icon, and then tap the Settings icon.
Under Accounts, tap the account you want to edit.
In the Account screen, edit the fields.
Tap Save to confirm your action or tap Cancel to return to the Settings screen.
To delete an account for Android
- Open Secure Mail, tap the hamburger icon, and then tap the Settings icon.
- Under Accounts, tap the account you want to delete.
- In the Account details screen, tap Delete account at the bottom of the screen or tap Cancel to return to the Settings screen.
- Tap DELETE to confirm your action.
If you delete the default account, the next account will become the default account.
To set a default account for Android
Secure Mail uses the default account in the following scenarios:
- Composing emails: The From: field auto-populates with the email ID of the default account.
- Creating calendar events: The Organizer field auto-populates with the email ID of the default account.
When you add one or more email accounts, the first account you create is the default account. To change the default account, navigate to Settings and then tap Default under General.
In the Default account screen, tap the account you want to set as default.
Settings for multiple Exchange accounts for Android
If you have configured multiple Exchange accounts, some of the Secure Mail settings are available to each of these accounts individually, whereas other settings are global. The following settings are account-specific:
- Out of Office
- Sync inbox frequency
- Sync mail period
- Sync email
- Offline Files
- Quick responses
- Sync calendar
- Sync contacts
- Sync with local contacts
- Export Settings
These settings appear with the > icon. Tap the > icon to view the accounts on your device.
To apply the setting to a specific account, expand a setting item by tapping > and then select the email account.
The Mailboxes screen displays all the accounts you have configured and has the following views:
- All Accounts: Contains emails from all Exchange accounts that you have configured.
- Individual accounts: Contains emails and folders of an individual account. These accounts appear as a list that you can expand to view the subfolders.
To view your mailboxes, open Secure Mail and tap the hamburger icon, In the Mailboxes screen, tap the account to expand the options.
The All Accounts view displays your emails from multiple accounts collectively, the following actions use the email address of the default or primary account:
- New message
- New event
To change the email address of the sender while composing a new mail from the All Accounts view, tap the default address in the From: field and then select a different account from the mail accounts that appear.
Composing an email from the conversation view auto-populates the From: field with the email address that conversation is addressed to.
The default or the primary account always appears first followed by the other accounts in alphabetical order.
The individual accounts display any subfolders you might have created.
The following actions are limited to individual accounts only:
- Moving items.
- Composing emails from conversation view.
- Saving contacts.
Tap the Contacts icon in the tab bar, and then tap the hamburger icon on the top right of the screen. The Contacts screen displays the following items:
- All Contacts: Displays all contacts from multiple email accounts. This option appears only if multiple email accounts are configured.
- Individual email account: Displays contacts pertaining to the individual email account that are configured.
- Categories: Displays contact categories that you may have created or selected from the predefined list to group contacts.
To view the contact folder
Contact subfolders are not supported on Secure Mail for Android. If you have created folders or subfolders for your contacts using Microsoft Outlook, you can’t view them in Secure Mail.
- In the contacts screen:
- Tap on all contacts to view all the contacts from multiple email accounts.
- Tap on individual email account to view contacts associated with a particular email account.
- Tap on categories to view the contacts grouped under specific categories. You can choose to group contacts based on a category you create or group them under a category from a predefined list.
You can synchronize contacts pertaining to an individual account to your local contacts.
To sync with local contacts
- Open Secure Mail.
- Tap the Settings icon, and then navigate to Contacts > Sync with Local Contacts and then tap > to expand the menu.
- In the Sync Local Contacts screen, enable the account whose contacts you want to sync.
- Tap OK.
- When prompted to allow Secure Mail to access your contacts, tap OK.
You have now successfully exported contacts for the account. To undo this action, go to Settings > Contacts > Sync with Local Contacts and then tap on the switch next to the account to disable this feature. Tap OK to confirm your action.
The calendar displays all events pertaining to the multiple accounts on your device. You can set colors to individual accounts to differentiate calendars events pertaining to individual accounts.
The Personal calendar feature is always associated with your primary or default account if enabled.
To set colors to calendar events
- Tap the Calendar icon in the footer bar and then tap the hamburger icon in the top left. The Calendars screen displays all the accounts you have configured.
- Tap on the default color displayed on the right of an Exchange account. The Colors screen displays the available colors for that account.
- Select a color of your choice and then tap Save.
To return to the previous screen, tap Cancel. The selected color is set for all calendar events pertaining to that Exchange account.
When you are creating a calendar invitation or event, the Organizer field auto-populates with the email address of the default account. To change the mail account, tap this email address and select another account.
You can perform a global search from the Mailboxes or the All Contacts view. This action displays the appropriate results after searching all the accounts in the app.
All searches from within an individual account displays results pertaining to that account only.
Android Enterprise in Secure Mail
Secure Mail and Secure Web for Android is compatible with Android Enterprise, formerly known as Android for Work.
- To be able to use this feature, ensure that your device is running Android 5.0 or later.
- For on-premises deployments, the afw.accounts Endpoint Management property must be set to TRUE.
After you have set up Android Enterprise in Endpoint Management, the mobile productivity apps are available on your device. The Android Enterprise icon identifies the apps, as highlighted in the following image.
Features that are compatible with Android Enterprise
The following table lists the Secure Mail features that are compatible with Android Enterprise.
|Exchange Server auto discovery||X|
|Secure Ticket Authority (STA)||X|
|Microsoft Information Rights Management||X|
|S/MIME signing and encryption||X|
|Firebase Cloud Messaging (FCM) service||X|
|Modern authentication (OAuth)|
|Multiple Exchange accounts||X|
|Export mail settings||X|
|Endpoint Management integration with Microsoft Intune/EMS|
|LDAP Exchange Server 2010, 2013, and 2016||X|
|Certificate based authentication (CBA)|
|Skype for Business|
|Personal distribution list||X|
|Citrix Files compatibility||X|
|Email enrollment with single sign-on||X|
The following table below lists the Secure Web features that are compatible with Android Enterprise.
|Secure Browse mode||X|
|Full VPN mode||X|
|All app features||X|
|Compatibility with Secure Mail||X|
- If Allow use of the status bar device restrictions policy is set ON for Android Enterprise in Work profile mode then calendar export progress and push notifications in Secure Mail for Android is not displayed in the status bar. However, these notifications are seen on the locked screen when allowed. For more information, see Android Enterprise settings.