Software Update: MobileIron Core 10.2.0.0

MobileIron Core focuses on MDM, managing devices, and MAM, managing applications on these devices. In addition, it can be combined with other products to extend its functionality, such as Sentry for secure data transfer and the Secure Workspace Apps including Help@Work, which allows you to view the screen of an iOS or Android device from a distance, for example by a help desk. MobileIron has released version 10.2.0.0 with the following changes:

Core 10.2.0.0 includes the following updates:

apps

• App control rule triggers Out of compliance alert when a managed app (ex. M@W) is upgraded

App Analytics

• App dashboard “eligible” device count to be based on device OS

MTD

• Common delivery mechanism (policy or config) to send the MTD activation token down to the device

Certificate and Security Enhancements

• Support for decryption certificates with client provided certificate configurations
• Support for multiple brands with client provided certificate configurations

AppConnect

• Add new AppConnect Policy Option – Sign out user after x mins following device lock

TLS 1.0 and 1.1 – Incoming/Outgoing SSL Connection

• TLS 1.0 and 1.1 are disabled by default – TLS 1.2 will be enabled by default

Note: Please refer to this knowledge base article that allows you to determine what backend services are still using TLS 1.0 and 1.1 and how to enable TLS 1.2 on external servers before doing the upgrade to Core 10.2.

Note: Please refer to this knowledge base article if you are using Integrated Sentry before upgrading to Core 10.2 and it’s dependency on TLS 1.0 and 1.1.

iOS

• iOS 11.3 – Policy to “push” selected iOS update version for ScheduleOSUpdate for supervised devices
• iOS 12 and macOS 10.14 – New restrictions
• iOS/tvOS 12 and 12.1, macOS 10.14 – Additional DEP setup assistance skip options
• iOS 12 – SMIME support for EAS and Mail
• iOS 12 – Exchange ActiveSync (EAS) payload update OAUTH
• Apple Education – Support for Shared iPad
• Help@Work for iOS – TeamViewer integration

android

• New local compliance action rule for USB debug is enabled
• New local compliance action for Android enterprise device – retire and wipe
• Samsung Knox device restrictions support for managed devices, and managed devices with work profile+
• Mutual cert auth for Apps@Work+

+Requires Mobile@Work for Android 10.2

Supportability

• Pre-Upgrade Hardware Check – Mechanism to have pre-upgrade hardware check built in the product so that if the hardware is not supported then the system will not allow the customer to proceed with upgrade.