How to enable Secure Work Space for Universal Device Service

Article ID: KB35869

Type: Support Content

Last Modified: 05-12-2014

 

Product(s) Affected:

  • BlackBerry Mobile Fusion
Jump to: Environment | Overview
CollapseEnvironment
  • BlackBerry Enterprise Service 10 version 10.2
CollapseOverview

The Secure Work Space is a containerization, app wrapping, and secure connectivity option for iOS and Android devices. It ensures that personal and work information and applications are kept separate on devices by creating a personal space and a work space, and providing full management of the work space.
Before assigning a work space profile to user accounts, the following tasks must be completed:

Note: Unless noted, the related steps for each task are for BlackBerry Enterprise Service 10 version 10.2 however this feature is supported by BES 10 version 10.1.1 and later.

Tasks to be performed:

  1. Verify that BlackBerry Enterprise Service 10 version 10.1.1 or later is being used. 
  2. In BlackBerry Management Studio, add Secure Work Space licenses.
  3. In the Universal Device Service administration console, enable and test the work space connection.
  4. Configure new email notifications for Secure Work Space on iOS devices see KB34664 for details.
  5. Create an Activation Type profile for Secure Work Space users.
  6. Assign the Activation Profile for Secure Work Space.

The following video has been created under the Official BlackBerry Help Channel to provide step-by-step guidance through the process of Enabling Secure Work Space for Universal Device Service.  This can be used in conjunction with written steps below:

Video:  Enabling Secure Work Space for Universal Device Service


Task 1: Verify that you have BlackBerry Enterprise Service 10 version 10.1.1 or later.

Task 2: In BlackBerry Management Studio, add Secure Work Space licenses following these steps:

  1. Open a browser and type in the URL for the BlackBerry Management Studio console - https://<servername>:7443/
  2. Type in the authentication credentials
  3. Click on the Licenses Tab
  4. Click on the Licensing Summary Tab
  5. Click Activate Licenses
  6. For Licensing activation method choose License activation ID and paste in the Secure Work Space license in the License activation ID field
  7. Click Activate

Task 3: In the Universal Device Service administration console, enable and test the work space connection using the steps below:

  1. Open a browser and type in the URL for the Universal Device Service console - https://<servername>:6443/
  2. Type in the authentication credentials
  3. Click on the Settings Tab
  4. Click on the Work Space option. This will initiate the registration of the tenant or SRPID with the host - https://ca.swstps.bbsecure.com/atps
  5. The following registration message will appear for about 1 to 2 minutes: Work space Status - checking for Secure Work Space settings.. Please, wait..
  6. The following message will appear once the Secure work space has enabled: Secure work space enabled

Task 4: Configure new email notifications for Secure Work Space on iOS devices, see KB34664 for further details.

Task 5: Create an Activation Type profile for Secure Work Space users following these steps:

  1. Click on the Library Tab
  2. Click on the + symbol beside Activation type to create new Activation Profiles
  3. Type in a Profile name, Profile Description and choose an Activation type and Click Save
  4. The default pre-created Activation profile has an Activation Type of MDM controls. In addition to this it is recommended that the following two Secure Work Space profiles be created:
     
    Example 1:
    Profile name: WP-FullControl
    Profile description: Work and Personal - Full Control
    Activation Type: Work and Personal - Full Control
     
    Example 2:
    Profile name:  WP-UserPrivacy
    Profile description: Work and Personal - User Privacy
    Activation Type: Work and Personal - User Privacy|

    Note: For BlackBerry Enterprise Service 10 version 10.1.1 there is a pre-created Work Space Profile. There is no need to create any Activation Profiles.

Task 6: Assign the Activation Profile for Secure Work Space and note the following:

  • Prior to activating the user, assign the appropriate Work Space - Activation Type Profile to the user. This action can be performed from the Users & Devices tab by dragging and dropping either the Work and Personal - Full Control or Work and Personal - User Privacy Activation Type Profiles onto the User.
    This action can also be performed using a Group that has either the Work and Personal - Full Control or Work and Personal - User Privacy Activation Type Profiles assigned.
     
    Note: For BlackBerry Enterprise Service 10 version 10.1.1 drag and drop the profile named Work Space onto the User from the Users & Devices tab

Disclaimer

By downloading, accessing or otherwise using the Knowledge Base documents you agree:

   (a) that the terms of use for the documents found at www.blackberry.com/legal/knowledgebase apply to your use or reference to these documents; and

   (b) not to copy, distribute, disclose or reproduce, in full or in part any of the documents without the express written consent of RIM.


Visit the BlackBerry Technical Solution Center at www.blackberry.com/btsc.