During New MAM Enrollment End User Receives - "An error occurred. The enrollment will stop"

During enrollment MDM proceeds successfully, but the MAM enrollment fails with "An error occurred. The enrollment will stop". OnAndroid you may experience the following: Enrollment will successfully complete, however Secure Hub is enrolled only in MDM mode not MAM. Scenarios that Identify failed...

Allow iOS MDM Exchange profile to be set as DEFAULT, and other iOS apps to interact with MAIL

Inform XenMobile Administrators how to allow iOS enrolled users the ability to set the MDM provisioned Exchange profile to be set as default mail account. Users may not see the Exchange account listed in the iOS Mail settings. Additionally users will not be able to send email with this account fr...

FAQ: XenMobile Per App VPN

Can Per App VPN be configured for MAM only devices No, Per App VPN does not support MAM only devices. With the iOS per app-VPN feature, you can leverage the VPN profile in conjunction with the Citrix VPN app on a XenMobile-managed iOS device. There, you can establish an on-demand VPN tunnel to th...

Airwatch 6.1.x / 6.4.x LDAP Injection

https://www.osisecurity.com.au/airwatch-self-service-portal-username-parameter-ldap-injection.html Date: 04-Apr-2017 Product: AirWatch Self Service MDM Versions affected: v6.1.x v6.4.x Vulnerability: LDAP injection Example: https://target/DeviceManagement/ URL accepts the following POST parameter...

Personalized User Focused Security: Stethoscope

Stethoscope is a web application that collects information from existing device data sources e.g., JAMF or LANDESK on a given user’s devices and gives them clear and specific recommendations for securing their systems. Stethoscope consists of two primary pieces: a Python-based back-end and a...

How to Enable Azure Active Directory Enrollment of Windows 10 Devices with XenMobile

When a Windows device is joined to Azure Active Directory, the device can be automatically enrolled in XenMobile. To enable this, add the XenMobile enrollment URL to Azure Active Directory as detailed in this article. You can join Windows 10 devices to Microsoft Azure AD in any of the following...

Xenmobile : MDM and MAM Console Features

There's a lot to consider while deciding the enrollment mode MDM/MAM to the XenMobile environment. What devices should you choose? How should you manage them? What are the devices features available from the console etc. How do you ensure that your network remains secure while still being user...

How to Configure XenMobile Server from MDM and MAM to MDM Only

This article describes how to configure XenMobile Server from MDM and MAM enrollments to MDM only...

CVE-2016-0297

CVE-2016-0297 affects IBM Tivoli Endpoint Manager (Mobile Device Management). The root cause is a missing HTTP Strict-Transport-Security header, which could enable man-in-the-middle attackers to obtain sensitive information. The provided documents do not specify affected versions, exploit details...

CVE-2016-0296

CVE-2016-0296 concerns IBM Tivoli Endpoint Manager (Mobile Device Management). The available documentation states that log files may contain potentially sensitive information and could be accessible to a local user, implying a local information disclosure affecting confidentiality. The NVD entry ...

CVE-2016-0296

IBM Tivoli Endpoint Manager - Mobile Device Management MDM stores potentially sensitive information in log files that could be available to a local user...

MDM enrollment failing for iOS and Android devices, but MAM enrollment works fine

On iOS, the enrollment fails during the second profile installation - The error is "Profile installation failed: profile failed to install" On Android, you see "Access to your company network is not available" Enrolling directly against the Gateway MAM works fine. The server-side logs are showing...

XenMobile 10 MDM SSL Offload Configuration

A Citrix XenMobile environment is typically configured with a NetScaler appliance that front ends and load balances the MDM traffic which it passes on to the XenMobile Servers in the backend. This NetScaler can be configured to handle this traffic in either SSL Bridge or SSL Offload mode. Though...

Mobile Applications Leak Device, Location Data

Both Android and iOS apps leak data, leaving users vulnerable to data theft, denial-of-service attacks, and remote SIM card rooting. In a report released Thursday “Are mobile apps a leaky tap in the enterprise?” researchers at Zscaler assert that Android and iOS users are equally vulnerable to a...

XenMobile Duplicate MAM ID issue

Deployments of XenMobile 10.x may encounter an issue where Enterprise enrolled devices are not correctly associated with the appropriate MAM ID for the device. This results in issues where devices end up in a state of ‘MDM no MAM’ or ‘Cannot install applications, despite seeing them listed in...

FAQ: Rooted\Jailbroken Device Detection in XenMobile MAM Only Mode

Q: Can devices in XenMobile MAM only mode detect rooted\jailbroken devices? A : The jailbreak flag which is present on the XenMobile server console which shows whether a device is jailbroken or not is only supported when the device is enrolled to MDM. The jailbreak flag is set by MDM and not by M...

Apple iOS MDM Profile Signing Bypass

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple iOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of signed...

XenMobile: How to enroll MAC OS X to XMS Server

How to enroll MAC OS X device to XenMobile MDM...

AppTec MDM for Samsung legacy - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AppTec MDM for Samsung legacy published at the 'play' market has multiple vulnerabilities...

AppTec MDM Agent - Customized SSL, Hardcoded secrets, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AppTec MDM Agent published at the 'play' market has multiple vulnerabilities...