Product Documentation

Enrolling Users and Devices

Dec 21, 2015

In order to get users' devices under management, you need to enroll the devices into Device Manager. You first install the Device Manager client software on the user device, authenticate the user's identity, and then install Device Manager and user's profile, so you can manage the device remotely and securely. After the devices are enrolled, you can perform device management tasks, such as applying policies, deploying applications, pushing data to the device, locking, wiping, locating lost or stolen devices, and more.

To enroll users, you must first add users to Device Manager if you have not yet established an Active Directory connection. The topics in this section describe the subsequent required steps for enrolling users:

  • Configure enrollment modes - Default, SHP.
  • Configure notification servers - SMTP and SMS.
  • Configure the enrollment notification template.
  • Send enrollment notification.
Note: Before you can enroll iOs device users, you need to request an APNs certificate. See Requesting an APNS Certificate for more information.

Enrolling Client Devices - By Platform

XenMobile MDM supports the following device platforms: iOS, Android, Windows Phone 8 and Windows Tablet, Windows Mobile, and Symbian. For a list of platforms versions and the features supported for each platform, see Feature Support by Device Platform. When you install Device Manager client apps, you enroll users and their devices into the Device Manager system.

Enrollment consists of the three following basic steps depending on the device type.

  • Downloading client application software on the user device.
    Note: For iOS devices, users install the Citrix Enroll app to enroll. After you enroll on iOS and Android, the Worx app will be pushed to users' devices though the base deployment package.
  • Authentication with Device Manager from the device.
  • Installing security certificates on the device (iOS and Android). For Windows Phone 8, Device Manager will install Root and intermediate CA certificates for SSL authentication, and a client certificate used for further communication with the server.