AirWatch on Nexus - Nexus 6P Q&A, Help & Troubleshooting

Hi all,
I am still waiting for my Nexus to arrive and will need AirWatch connect to my employer's Exchange. Does Marshmallow or Huawei have an official agent to allow native email client use without bloody TouchDown?
Thanks.

My company also uses AirWatch. Like the Nexus 6, there is not a native email client outside of adding POP/IMAP/Exchange accounts in Gmail.
I am forced to used the Inbox by AirWatch app which is pretty terrible. Also, when your IT department sets up your phone it requires special permissions on their end to use the app. Make sure you request them.
On the plus side, AirWatch has no problems using the fingerprint scanned as a secure method to unlock your phone.
Happy to help if you have any other questions.

Yeah, just tested everything and need to use Touchdown.
Gesendet von meinem Nexus 6P mit Tapatalk

chortya said:
Yeah, just tested everything and need to use Touchdown.
Gesendet von meinem Nexus 6P mit Tapatalk
Click to expand...
Click to collapse
We are apparently going to Airwatch next month... The airwatch client gets terrible reviews and while Touchdown isn't ideal, I've used it before and I can live with it. Did you have to do anything special to get Touchdown to work with Airwatch?

No, we have an automated policy which downloads and configures Touchdown for us. No issues. I just wish Touchdown would integrate into the native calender... The rest is ok.
Gesendet von meinem Nexus 6P mit Tapatalk

I use 9 for exchange/company email.

ycats said:
I use 9 for exchange/company email.
Click to expand...
Click to collapse
So 9 email works with Airwatch? I am using it my exchange email now, but we are implementing Airwatch next month. I would definitely like to keep using 9 if possible.

chortya said:
No, we have an automated policy which downloads and configures Touchdown for us. No issues. I just wish Touchdown would integrate into the native calender... The rest is ok.
Click to expand...
Click to collapse
Same here. Your enterprise should have it set up so that TD more or less configures automatically once you've enrolled the device through AirWatch.
Now, my big question is whether it will continue to work if I'm rooted. I never had a problem in the past, but recently when I upgraded my old rooted Nexus 5 to Android 6.0 and then re-rooted it, I lost the ability to enroll with AirWatch. I'm not sure what happened but I know Airwatch doesn't want your phone to be rooted.

chortya said:
Hi all,
I am still waiting for my Nexus to arrive and will need AirWatch connect to my employer's Exchange. Does Marshmallow or Huawei have an official agent to allow native email client use without bloody TouchDown?
Thanks.
Click to expand...
Click to collapse
Were you able to connect your 6P to Exchange?

Not directly, only with TouchDown.
Gesendet von meinem Pixel C mit Tapatalk

Mark7A said:
Were you able to connect your 6P to Exchange?
Click to expand...
Click to collapse
Give Nine Mail a try...much better than touchdown IMO and works with AirWatch. You will need to manually configure the settings (mostly the server address) but its pretty simple.

I tried it before but our corporate policy did not allow the connection. I assume based on the user agent ir similar identification of the mail client.
Gesendet von meinem Nexus 6P mit Tapatalk

We are going airwatch too but huge let down is no root devices allowed to enroll. I always thought rooted devices can be or are more secure. Any ideas round this

bkayy said:
We are going airwatch too but huge let down is no root devices allowed to enroll. I always thought rooted devices can be or are more secure. Any ideas round this
Click to expand...
Click to collapse
Only way I found was to use Xposed and the Unwatch module ...also it failed until I went with systemless root. Using Nine Mail and it is flawless.
Root cloak did not work and I am going to try to never update the Airwatch app as who knows if it will keep working.

tfly212 said:
Only way I found was to use Xposed and the Unwatch module ...also it failed until I went with systemless root. Using Nine Mail and it is flawless.
Root cloak did not work and I am going to try to never update the Airwatch app as who knows if it will keep working.
Click to expand...
Click to collapse
I have the most recent version of Airwatch and Unwatch Xposed module and I can get passed the root check. My company specifically blocks Nine from working though.
The Nexus 6p has an Exchange email setup built in. See the link below:
http://support.sprint.com/support/t.../WScenario_542_62075_771_en_118-dvc9700001prd
My company also blocks that
So if neither of those work for you, you may be stuck with Touchdown as well.
Update: Aquamail and Boomerang work for me. I'm using Aquamail since it seems to work with Google calendar.

tfly212 said:
Give Nine Mail a try...much better than touchdown IMO and works with AirWatch. You will need to manually configure the settings (mostly the server address) but its pretty simple.
Click to expand...
Click to collapse
Hi there.
Sorry, could you please clarify how you made Nine work with Airwatch?
My company just enforced Airwatch this month so my Nine client stopped syncing... what would I need to do? The server address I was previously using doesn't seem to be working anymore.
I'm desperate to know this since the "Airwatch Inbox" app is utter crap.
Also, is there any way to get the calendar synced with other app than this "Airwatch Calendar" bull****? I really want to have a homescreen widget showing my upcoming meetings, but I can no longer do that since 3rd party apps can't access my work calendar anymore.
Any help would be really appreciated.

VictorML said:
Hi there.
Sorry, could you please clarify how you made Nine work with Airwatch?
My company just enforced Airwatch this month so my Nine client stopped syncing... what would I need to do? The server address I was previously using doesn't seem to be working anymore.
I'm desperate to know this since the "Airwatch Inbox" app is utter crap.
Also, is there any way to get the calendar synced with other app than this "Airwatch Calendar" bull****? I really want to have a homescreen widget showing my upcoming meetings, but I can no longer do that since 3rd party apps can't access my work calendar anymore.
Any help would be really appreciated.
Click to expand...
Click to collapse
First I used systemless root ...but not a ROM with systemless root included, that failed. Flashed to stock and then systemless rooted. Installed Xposed and then UnWatch. Then Nine, then Airwatch.
My Nine settings are attached below. You want to use your official outlook name email for the domain/user and then insert your company email alias after the awmdm in the server line.
For the calendar I didn't have to do anything other than choose to sync calendar in Nine. Then I added the pure calendar widget and have a scrolling view of all outlook and Google appointments.
I was petrified of flashing the update to the March security update...but it worked. I have not, and will not update airwatch until something breaks.
Hope this helps. If I can answer anything else, Lmk.

tfly212 said:
First I used systemless root ...but not a ROM with systemless root included, that failed. Flashed to stock and then systemless rooted. Installed Xposed and then UnWatch. Then Nine, then Airwatch.
My Nine settings are attached below. You want to use your official outlook name email for the domain/user and then insert your company email alias after the awmdm in the server line.
For the calendar I didn't have to do anything other than choose to sync calendar in Nine. Then I added the pure calendar widget and have a scrolling view of all outlook and Google appointments.
I was petrified of flashing the update to the March security update...but it worked. I have not, and will not update airwatch until something breaks.
Hope this helps. If I can answer anything else, Lmk.
Click to expand...
Click to collapse
Question: the whole flashing and unflashing of everything was just to be able to use root, right?
I'm OK with not having root for now - all I really want is to use Nine instead of this crappy Airwatch Inbox app.
I've checked said Airwatch Inbox app, and the server settings are the same as they were before. So not vmdm.XXXXX.com like in your screenshot, but the same email server we were using before. However that fails in Nine now.
I've also checked the enrollment status in the "Airwatch Agent" app, and ironically it does show vmdm.XXXXX.com in there as the server.
Sounds to me like your company didn't really restrict the use of third party apps maybe?

VictorML said:
Question: the whole flashing and unflashing of everything was just to be able to use root, right?
I'm OK with not having root for now - all I really want is to use Nine instead of this crappy Airwatch Inbox app.
I've checked said Airwatch Inbox app, and the server settings are the same as they were before. So not vmdm.XXXXX.com like in your screenshot, but the same email server we were using before. However that fails in Nine now.
I've also checked the enrollment status in the "Airwatch Agent" app, and ironically it does show vmdm.XXXXX.com in there as the server.
Sounds to me like your company didn't really restrict the use of third party apps maybe?
Click to expand...
Click to collapse
Good question... I'm not sure how restrictive they are...most of our firm uses IPhones so I was lone wolfing a lot of this. I emailed the developer of Nine and they said it should work without any issues. I also never installed the inbox app...only the airwatch app and just plugged the settings into Nine.
In all honestly though, I don't think I tried nine without being rooted and using the UnWatch xposed module...that may be a requirement. I knew I wanted root so I may have only gone that route.

tfly212 said:
Good question... I'm not sure how restrictive they are...most of our firm uses IPhones so I was lone wolfing a lot of this. I emailed the developer of Nine and they said it should work without any issues. I also never installed the inbox app...only the airwatch app and just plugged the settings into Nine.
In all honestly though, I don't think I tried nine without being rooted and using the UnWatch xposed module...that may be a requirement. I knew I wanted root so I may have only gone that route.
Click to expand...
Click to collapse
Yeah I also emailed Nine devs. They told me that IF our AirWatch solution is "based" on Android for Work, I could just install this: https://play.google.com/store/apps/details?id=com.ninefolders.hd3.work, and it should work.
But I don't even know how to check if they're using Android for Work.
That app just tells me that a configuration file is needed, and I can't enter any login details on it.
I'll keep talking to the devs and I'll try to speak to someone in our IT department as well... ahh the perks of working for a huge multinational company. The person in charge of this probably lives somewhere with an 8 hour time difference with me, and a salary of $3 per hour.
Sigh.

Related

Exchange email security.

I tried to set up an account to my Exchange email at work using the default email app on my TF101. When I set up an account it requires that I enable all of these security settings on the tab like having a PIN and encrypting data. I don't want to do all of that. I realize that this is something set up by my Exchange administrator but I am not sure they even did it knowingly and anyway I don't want to have to deal with it to check email.
Does anyone know how to bypass this? Searches of these forums and the web show that there are some modded email apks for other platforms that let you bypass the security settings. I have not seen any such mods for ICS on the TF101.
Thanks in advance for your help.
Hello,
I do not believe the stock email is able to handle the security settings from an exchange server. You need to look at other programs like Moxier Mail or TouchDown.
+1 for touch down. Works great but it is $20
Enhanced email is another option. I got it from free app of the day by Amazon. At first, it did not work on android 3.0+, but it works fine now. It gives you the option to ignore security policies.
Alternatively, if you decompile the email.apk, I believe you can force a variable so that the email app always tells the exchange server you have sufficient security enabled (I'm not exactly sure where must be changed).
tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
I couldn't agree more. Do the trial first to see if you like it. I don't recommend bypassing the security. You can unknowingly pass a virus through your corporate exchange. Hopefully, one day, they will resolve this issue in the Android exchange client.
tonyz3 said:
+1 for touch down. Works great but it is $20
Click to expand...
Click to collapse
+1... Touchdown. Forget any other Exchange apps.
+1 for Enhanced Email - optionally bypasses the admin security settings - works fine on Honeycomb and ICS too.
Exchange Admin
Hello,
When setting up exchange servers in the past, the default exchange policy is to have those features enabled. Even if those are DISABLED, the tablet will still ask to create the partnership. I believe this is so it can be wiped remotely. It seems ICS just tells you it is going to do all of those things as a generic warning. I have noticed this is only on ICS though. If you click ok, it shouldn't ask you to create a PIN or anything if it isn't actually required. We currently only have exchange 2010 in production in a test environment, so I have yet to look for the setting to disable this feature entirely. Hope this helps you understand how it works at least a little.

[Q] Exchange ActiveSync with Security Policy (Pincode vs. Fingerprint Reader)

hi guys
anyone know how I use the fingerprint reader with exchange policy (enforce password on device)?
with the iphone 5s it works, but with the samsung s5 the fingerprint reader is disabled (Pincode enforced)..
Thank you to all
I dont think they have an option for exchange policy which is kind of stupid. I hope they come out with a fix for this.
tony_k55 said:
hi guys
anyone know how I use the fingerprint reader with exchange policy (enforce password on device)?
with the iphone 5s it works, but with the samsung s5 the fingerprint reader is disabled (Pincode enforced)..
Thank you to all
Click to expand...
Click to collapse
You'll need to download a different app to use for your exchange account. I just downloaded "Nine" and it gives you the option to set the exchange security on the app level instead of the phone level. Two week trial then it's $10.
bgask1717 said:
You'll need to download a different app to use for your exchange account. I just downloaded "Nine" and it gives you the option to set the exchange security on the app level instead of the phone level. Two week trial then it's $10.
Click to expand...
Click to collapse
Thanks, nine is cool but it dosnt support s/mime (for sign an encypt) and imap4 for private use.
I use "smail". it support s/mime and imap4 but not the exchange policy avoiding.
maybe smail will implement this feature in future. smail developer quote: "I will check the nine. But I don't know when I will implement it currently. I am busy with something. I will try to do it. Thank you!"
tony_k55 said:
Thanks, nine is cool but it dosnt support s/mime (for sign an encypt) and imap4 for private use.
I use "smail". it support s/mime and imap4 but not the exchange policy avoiding.
maybe smail will implement this feature in future. smail developer quote: "I will check the nine. But I don't know when I will implement it currently. I am busy with something. I will try to do it. Thank you!"
Click to expand...
Click to collapse
Good deal. I not super familiar with s/mime, but apparently my company does not require that level of security.
Do a Google Play search for Touchdown. Another email client (not as polished looking as Nine) that says it supports s/mime. It's a bit pricier, $20 I believe, after the free trial. If I remember correctly you can set the security at the app level as well. Worth a shot. Hope that helps.
Disabled with my company's policy as well. Was hoping it would work like the iPhone. I can use touchdown or cloudmagic but I prefer the stock email/calendar.
Sent from my SAMSUNG-SM-G900A using XDA Premium 4 mobile app
If u r using this with work email... is it safe (legal) to use other apps?

Work Email and Smart Lock

So apparently when signing into work email using the Gmail app, Smart Lock becomes completely disabled and I am only allowed pin and password screen lock. Any way around this?
Yes. Use Nine. Your IT department is enforcing the security. By using Nine you can set to use the security for the app only. Everything else is enabled. To be honest I used Gmail for 2 weeks after finding that I lost my heading in all my replied/forwarded emails (date, time, to/from and subjecf). Nine as been flawless for the past 2 weeks. Paid app but worth it.
Any other work around out there.
I've tried almost every exchange mail app and Nine has the most features with no crashes. Nine allows you to apply the company security to just the app instead of the phone. I've been using it for about 2 years.
Sent from my Nexus 6P using Tapatalk
AndrasLOHF said:
Any other work around out there.
Click to expand...
Click to collapse
There are Xposed apps to disable forced authentication for Exchange but these require root, and most employers have stopped allowing root on BYOD. That was enough to show my employer the middle finger and tell them that if they want me to have access to corporate email they better start paying for a device because I am not giving up root for their convenience.
Agree with previous posters that if you are not rooted Nine is beautiful app. It also has the advantage over Gmail of being instantly able to tell if an email is work or personal with one glance at the status bar. It ain't cheap but is well worth it.
Another workaround, if your company allows webmail access is MailCal. This is a very nice GUI wrapper around OWA, far and away the best of its kind and the developer is super responsive.

email app

Does anyone have the old email app, I hate using Gmail...
Thanks
networx2002 said:
Does anyone have the old email app, I hate using Gmail...
Thanks
Click to expand...
Click to collapse
https://www.apkmirror.com/apk/google-inc/email/email-7-0-release/#downloads
And if it's needs it for exchange,
https://www.apkmirror.com/apk/google-inc/exchange-services/exchange-services-6-5-release/
Haven't tested on this device but should work. Over time I've just gotten used to Gmail to help my paranoia of any possible security measures being outdated now. Lol.
Which Email app are you referring to? I don't think there was a specific one for AOSP... If you hate using Gmail app for Google Mail try Inbox. It took a little getting used to but I can't use Gmail anymore on my desktop or phone.
Inbox is great.
I don't use Gmail. I want tho aosp email. The one that was posted above is the one I wanted, but it wants me to update it to Gmail.
[emoji26]
Sent from my PH-1 using Tapatalk
networx2002 said:
I don't use Gmail. I want tho aosp email. The one that was posted above is the one I wanted, but it wants me to update it to Gmail.
[emoji26]
Click to expand...
Click to collapse
Maybe try using an older version on the site. Uninstall first then downgrade (a few downgrade if needed) and see if it still does. Could be something they added in the app when they were moving away from AOSP originally. Otherwise you may be SOL.
I'll try it
Sent from my PH-1 using Tapatalk
I don't like the Gmail app either. I used Type App.
What's the difference between typeapp and bluemail? They look the same
I also hate Gmail for my work email. I've been using boxer by VMware. The company is reputable and I like the app so far. No limitations or paid features. It does everything I need and supports exchange with contact sync and push notifications which is what I needed specifically.
Nine
I use blackberry Hub app works great used it on my note 5 as-well.
Bluemail is the best out there but I cannot see the icons on the top strip in light mode. Anyone have this problem?
LastQuark said:
Bluemail is the best out there but I cannot see the icons on the top strip in light mode. Anyone have this problem?
Click to expand...
Click to collapse
Had the same problem. You need to make it full screen.
Sent from my PH-1 using Tapatalk
I was having the same issue
Sent from my PH-1 using Tapatalk
lpasq said:
Nine
Click to expand...
Click to collapse
I also use Nine. Love it.
Sent from my PH-1 using Tapatalk
Email by Edison Software. Discovered it last week and it's great
Nine's the best!
I use Nine, as already mentioned, which is great because it can contain a work Office 365/Exchange administrator's access to control your phone, to just within the app. Nine also syncs calendars well, which I really like. I also really like AquaMail. Both apps do fine with Google, Outlook, Yahoo, IMAP, etc.
QD2DC said:
I also hate Gmail for my work email. I've been using boxer by VMware. The company is reputable and I like the app so far. No limitations or paid features. It does everything I need and supports exchange with contact sync and push notifications which is what I needed specifically.
Click to expand...
Click to collapse
Is this better than Outlook for Android? Is there anything that will combine one nice email app into one, for both personal and work email? Gmail sucked for my work email as well. Been using Outlook for Android, which is fine, but a bit clunky.

Airwatch Hub, Boxer and co on rooted 6t

Hey Guys,
I was wondering If anybody is using VMWare Airwatch Agent/ Hub on his 6T with a custom rom as daily Driver? If yes, which rom and how did you hide root from Airwatch detection?
Thx and BR!
No one?
I didn't root my 6t but I did on my pixel and have to use Hub for work email. I was able to use hide superuser and everything worked without a problem.
Sent from my ONEPLUS A6013 using Tapatalk
silencer1979 said:
Hey Guys,
I was wondering If anybody is using VMWare Airwatch Agent/ Hub on his 6T with a custom rom as daily Driver? If yes, which rom and how did you hide root from Airwatch detection?
Thx and BR!
Click to expand...
Click to collapse
As I work in IT and deal with this all day...it really depends on how your company has this set up. On our side it is a requirement to pass safetynet on android devices. We do have some rooted devices enrolled, however, they had to go through the processes of ensuring that they could bypass safetynet. If they ever don't pass it then their phone basically becomes a brick until they can make it happen. On our side we also require the device to be updated to the most recent OS that the phone can handle. If it isn't we nag the user until they update. Not ideal but it's what people above me want.
My recommendation is to make sure that you use Magsik and ensure that all your ducks are in a row before you you attempt it. Just like the guy above me stated, if you can pass safetynet with Magsik, you are golden.
I use AirWatch for work but was unable to use my 6T because it does not come with an email client. AirWatch only uses native email and at the moment you can't use Outlook so I use my note 9, I gave up on rooting work phones as my job can tell.
silencer1979 said:
Hey Guys,
I was wondering If anybody is using VMWare Airwatch Agent/ Hub on his 6T with a custom rom as daily Driver? If yes, which rom and how did you hide root from Airwatch detection?
Thx and BR!
Click to expand...
Click to collapse
g1-and-only said:
I use AirWatch for work but was unable to use my 6T because it does not come with an email client. AirWatch only uses native email and at the moment you can't use Outlook so I use my note 9, I gave up on rooting work phones as my job can tell.
Click to expand...
Click to collapse
Airwatch does not use native android e-mail client Out of the box. Thats a matter of the IT policies as well. Its own mail client is called named boxer (Inbox) and available both for android and iOS.
@silencer1979 I remember that I had to magisk hide phone's settings too in order to make it work.
I can't tell now because we moved to office 365 and I can just sign in via chrome so I don't have a mail client at all.
Sent from my OnePlus6T using XDA Labs
g1-and-only said:
I use AirWatch for work but was unable to use my 6T because it does not come with an email client. AirWatch only uses native email and at the moment you can't use Outlook so I use my note 9, I gave up on rooting work phones as my job can tell.
Click to expand...
Click to collapse
Make an e-mail client that you need a system app. This way it appears to be a "native app." Just a thought...
" I had to magisk hide phone's settings too in order to make it work" - by "phone's settings" you refer to "com.android.settings"?
Thanks!
Daniel V. said:
" I had to magisk hide phone's settings too in order to make it work" - by "phone's settings" you refer to "com.android.settings"?
Thanks!
Click to expand...
Click to collapse
Yeah. From my experience it has something to do with Developer Options and some settings enabled in there.
Daniel V. said:
" I had to magisk hide phone's settings too in order to make it work" - by "phone's settings" you refer to "com.android.settings"?
Thanks!
Click to expand...
Click to collapse
fogame said:
Yeah. From my experience it has something to do with Developer Options and some settings enabled in there.
Click to expand...
Click to collapse
Yeap!
Sent from my OnePlus6T using XDA Labs
So I did Magisk Hide - VMware Hub, Work Profile, Settings before beginning VMware Hub setup.
Everything went fine till Boxer started to get download, when I tried to open it, everything got uninstalled because of policies.
I wonder what else needs to be root hidden.

Categories

Resources