Enrolling an Android Device in

AirWatch
What is AirWatch?
AirWatch is the mobile device management (MDM) system provided by UMHS to ensure
security for smartphones and tablets that connect to the UMHS environment. AirWatch
provides a high level of service to its mobile device customers through the following:

A user portal to self-manage devices in cases of theft, loss or a forgotten passcode

An enhanced security profile designed to ensure proper safeguards for protected
information
The ability to publish applications to enrolled devices
o Devices enroll in one of two different profiles, MiChart or UMHS, to access
recommended applications such as Epics Haiku or Ciscos AnyConnect VPN
application
Rich reporting for asset tracking and compliance audits

Manufacturer Support
IMPORTANT: There are limitations for certain mobile devices, and due to age and
manufacturer-specific applications or security features, some will not function with AirWatch.
AirWatch will only be able to support the following platforms:

Apple devices with iOS version 5.0 and above (preferred devices)
Android devices by HTC, Samsung, and LG running Android version 4.0 and above
Windows Phone 8

Special Note
For complete, uninterrupted access to UMHS Outlook Exchange email, calendar, and contacts
on your mobile device, enrollment in AirWatch will be required by February 23, 2015 with a
supported mobile device model. Otherwise, you will be able to access your UMHS email
services on these smartphones or tablets ONLY through a web browser using Outlook Web
Access.

Enrolling an Android Device in AirWatch

Page 1 of 14

Important Initial Steps:

1) Be sure your Android is fully charged and plugged into its charger!
2) Be sure you have your Google Play and device user ID/password! You will
need it along the way.
3) Be sure to back up your Android device before you enroll in AirWatch!
Back up your data:
Please ensure that all of your user data is backed up before you enroll or begin any of the
steps below. The backup procedures may be different according to the specific device you
have. Each manufacturer may instruct you to back up data in a different manner. Follow
manufacturers recommendations.

4) Be sure to remove existing UMHS Outlook/Exchange connections!

IMPORTANT: Remove existing Outlook connections:
Before you enroll in AirWatch, you must start with a clean slate and you must remove any
existing Outlook/Exchange connections already on your device otherwise the new AirWatch
connection to Outlook/Exchange will not work properly!

To remove existing Outlook/Exchange email connections configured to connect to

email.med.umich.edu:

Open the Settings app

Scroll down to Accounts or choose the accounts menu and choose the appropriate
Exchange connection
Click Remove Account

The AirWatch enrollment process will restore your UMHS Exchange email connection, but if you
dont remove it ahead of time, the enrollment process may generate an error or duplicate a
connection to UMHS Exchange. If you forget this step, and you have a duplicate connection,
you can un-enroll from AirWatch and delete any remaining UMHS Exchange connections. Then
youre ready to re-enroll in AirWatch. The steps to un-enroll from AirWatch are on pages 12-13
of this document.

Enrolling an Android Device in AirWatch

Page 2 of 14

WI-FI CONNECTION
Have a good Internet connection or join the UMHS-802.1X Wi-Fi Network
Best is to enroll in AirWatch while you are at a UMHS facility and connected to the UMHS-802.1X Wi-Fi
network. If you are not able to do this and wish to enroll at home or outside the network, just be sure
you have a strong Internet connection before you begin. Go to Settings and get on the Wi-Fi network.
Skip to Step 3 below:

1. While at a UMHS facility, select Settings from either the notification menu or the main
application launcher.
2. Select Wi-Fi and make sure it is set to On, and then select the UMHS-802.1X network
from the list of available Wi-Fi networks.
3. Depending on your device, please enter your uniqname in either the username or
identity field, and then enter your Level-2 password in the password field.
4. Accept the certificate. At this point your device is configured for use on UMHS wireless
network.

NOTE: Some Android phones may need to be rebooted at this point, after the first connection
to the UMHS-802.1X network to gain full network functionality.

Enrolling an Android Device in AirWatch

Page 3 of 14

Enrolling in AirWatch
Step 1 Download the AirWatch MDM Agent

To enroll your device using the

AirWatch Agent, open the
Google Play Store and search for
AirWatch. Select the AirWatch
MDM Agent from the search
results and install it onto your
device.
Note: In order to download the
AirWatch Agent, you must have a
Google account and access to the
Google Play Store. Be sure you
have your Google Play Store user
name/ID and password!

Enrolling an Android Device in AirWatch

Page 4 of 14

Step 2 Enroll Your Android Device Using the AirWatch Agent

Open the AirWatch Agent.

Enter your email address be
sure to enter your
uniqname@med.umich.edu
address (not your @umich.edu
address).
Click Continue to proceed.
On the next screen, select UMHS
Standard from the group menu.

Enrolling an Android Device in AirWatch

Page 5 of 14

Step 3 Authenticate, Device Details, and Accepting the Terms of Use

Input your UMHS Uniqname and

Level-2 password. You likely will
have to slide the input panel up
so that you can select the
password field and enter your
Level-2 password.
Click Continue to initiate the
login process and complete
authentication.

Select the appropriate device

ownership model that applies to
your device and then click
Done and Continue.
1) Corporate Dedicated
2) Corporate Shared
3) Employee Owned
Note: These categories are only
recorded in the AirWatch system
and do not differentiate what
services or policies apply to the
device.
Next, review and Accept the
Terms of Use.

Enrolling an Android Device in AirWatch

Page 6 of 14

Step 4 Accepting the AirWatch Policies and Installing Device Specific

Software

For a brief instant, a message

that your device has completed
authentication will appear.
This is followed by a screen
asking you to grant administrator
permissions to AirWatch.
Depending on your type of
phone, accept this and continue
as instructed to activate the
enrollment policy.

Enrolling an Android Device in AirWatch

Page 7 of 14

You are directed back to the

AirWatch Agent where you will
see your successful enrollment
status. If you are not directed,
click on the application to view
your status.

You may need to check your

notifications to see if any other
software is needed. If they are,
see the pictures to the left.

Enrolling an Android Device in AirWatch

Page 8 of 14

Depending on your make and

model, you may need to install a
plug-in or it may have been
installed automatically with the
AirWatch MDM Agent. If a plugin is needed, continue with these
steps. If you omit this step, most
(or all) functionality provided by
AirWatch wont be available.

When you click on the app in the

UMHS App Store, you may be
prompted to Complete the
action using. If you are, please
select the Play Store.
You will then be shown the
application ready to install from
the Google Play Store. Please
choose Install and accept the
permissions to install the plug-in.
NOTE: If it does not say Install,
but Open or Uninstall, then the
application is already installed.
Please choose Open in that
case to ensure the plug-in is
installed properly.

Enrolling an Android Device in AirWatch

Page 9 of 14

Once the plug-in application is

installed, please open the
application to activate the
permissions. You will see a
screen similar to the picture on
the far left. Once you have
activated the plug-in, it should
look like the screen on the
immediate left, and you are then
able to hit the home button to
return to the main screen.

Check your device notifications,

or swipe to the left from the
main AirWatch Agent screen.
Once you have installed the
device specific plugin software it
will prompt you for your UMHS
Exchange email password (your
Level-2 password). Please
complete the email setup
process as prompted by your
specific device to enable access
to your email, calendar, contacts,
and tasks.

Enrolling an Android Device in AirWatch

Page 10 of 14

Step 5 Configuring Your Android Device with Apps

To install other UMHSrecommended free applications
such as the Cisco AnyConnect
VPN from the main AirWatch
Agent screen, choose the App
Catalog button and from there
you are able to install
applications from the screen via
the Google Play Store.
With AnyConnect, you may
access can access all UMHS
resources, including the UMHS
file servers and the internal web
pages.

Enrolling an Android Device in AirWatch

Page 11 of 14

How to Un-enroll your Android Device from AirWatch

If you should decide to un-enroll from AirWatch, you will not be able to access your Outlook Exchange
email, calendar, or contacts. The only way you will access these services is via Outlook Web Access on a
browser.
To un-enroll:

1. Open the AirWatch Agent application.

Enrolling an Android Device in AirWatch

Page 12 of 14

2. Click on your menu button for your device and select Un-enroll.

3. Confirm your action.

If you select Yes, all AirWatch

associated policies will be
removed, the Exchange connection
and its data will be removed, and
any apps installed via AirWatch
will be uninstalled. However,
manufacturer-specific plug-in
software or downloaded
applications will not be removed
automatically.

Enrolling an Android Device in AirWatch

Page 13 of 14

Policy Settings and Restrictions in the UMHS Policy Profile

Passcode Security Policies

Passcode length = 6 (this could be all numbers or alphanumeric)

Passcode history = 13 (this means each time you set a passcode it remembers the
previous thirteen entries and will require a new, unique value)
Passcode age = 365 days (after which you will be required to set a new passcode)
Number of failed login attempts prior to device wipe = 10
Auto Lock = at least 5 min (user can select more secure value)
Grace period before lock = at least 5 min (user can select more secure value)

Miscellaneous Security Policies

Diagnostic data will not be sent to Google.

Personal information, such as location, applications used, cellular usage, or websites
visited will not be tracked by the AirWatch mobile device management system.

Enrolling an Android Device in AirWatch

Page 14 of 14