Mobile@Work 11.1.0.0 for Android
Release Notes
March 4, 2021
For complete product documentation, see Mobile@Work for Android Product
Documentation Home Page.

Proprietary and Confidential | Do Not DistributeCopyright © 2009 - 2021 MobileIron, Inc. All Rights Reserved.
Any reproduction or redistribution of part or all of these materials is strictly prohibited. Information in this publication
is subject to change without notice. MobileIron, Inc. does not warrant the use of this publication. For some phone
images, a third-party database and image library, Copyright © 2007-2009 Aeleeta's Art and Design Studio, is used.
This database and image library cannot be distributed separate from the MobileIron product.
“MobileIron,” the MobileIron logos and other trade names, trademarks or service marks of MobileIron, Inc.
appearing in this documentation are the property of MobileIron, Inc. This documentation contains additional trade
names, trademarks and service marks of others, which are the property of their respective owners. We do notintend our use or display of other companies’ trade names, trademarks or service marks to imply a relationshipwith, or endorsement or sponsorship of us by, these other companies.

Mobile@Work 11.1.0.0 for Android Release Notes| 2

Revision history

Revision history
TABLE 1. REVISION HISTORY
Date

Revision

March 4, 2021

Removed support for Android 5.0 and 5.1. As of March 1, 2021, MobileIron nolonger provides support for these OS versions. See Support and compatibility.

Mobile@Work 11.1.0.0 for Android Release Notes| 3

Revision history

Contents
Revision history

3

About Mobile@Work for Android

5

New features and enhancements summary

5

Mobile@Work features and enhancements

5

Wear OS watch app features and enhancements

6

MobileIron Threat Defense features6

Support and compatibility

7

Support policy

7Mobile@Work for Android support and compatibility

7

Language support for Android devices and Mobile@Work Wear OS (watch app)

8

Resolved issues

8Known issues

9

Limitations

10

Documentation resources

10

Mobile@Work 11.1.0.0 for Android Release Notes| 4

About Mobile@Work for Android

About Mobile@Work for Android
Mobile@Work for Android is the MobileIron client app that works with MobileIron Core. Device users download
Mobile@Work, which automatically configures the device to function in an enterprise environment by enforcing theconfiguration and security policies that administrators set on MobileIron Core.
Mobile@Work works with MobileIron Core to:lllconfigure corporate email, Wi-Fi, VPN, and security certificates to create a clear separation between
personal and business information.
install the enterprise app storefront so that device users can browse and install the mobile applications thatadministrators make available to them.
allow device users to access web resources and content repositories that sit behind the firewall.

New features and enhancements summary
This section provides summaries of new features and enhancements developed for the current release of
Mobile@Work for Android. References to documentation describing these features are also provided, whenavailable.
•••

Mobile@Work features and enhancements
Wear OS watch app features and enhancements
MobileIron Threat Defense features

For new features and enhancements provided in previous releases, see the release notes for those releases,
available in Mobile@Work for Android Product Documentation.

Mobile@Work features and enhancements
This section summarizes new features and enhancements that are common to all platforms.
lAndroid Enterprise apps can now be auto-launched after installation: Administrators can now force
the auto-launching of Android Enterprise apps after their installation. A typical use case would be for asecurity/VPN app that needs to be configured by the device user before the device can be protected.
Applicable to Android devices version 6.0 through the latest version as supported by MobileIron.

lSupport for Samsung Knox Dual Encryption (DualDAR): Support for Dual Encryption (DualDAR) has
been added to further secure and protect sensitive data on devices. Samsung Knox includes a FIPS 140-2
certified encryption module within the inner layer of the encryption. DualDAR is applicable to Knox v3 onAndroid 8.0 devices through the latest version as supported by MobileIron. It applies to Android Enterprise

Mobile@Work 11.1.0.0 for Android Release Notes| 5

Wear OS watch app features and enhancements

Work Profile mode, and Managed Device with Work Profile mode.
lSending feedback and Log files instructions updated: The text in Settings > Send Logs has been
updated to make instructions clearer to the device user.

l

Ability to control Unknown sources: Administrator can use two Lockdown options to control unknown
sources. Both options are available in Android Enterprise settings:
oAllow unknown sources in personal profile option is one of the Work Profile Lockdown Settings.

oAllow install from unknown sources on the device option is one of the Managed Devices with Work
Profile Lockdown Settings.

ll

OAuth endpoint for mutual certification authentication: New mutual authentication device endpoints
are available for use by Android clients for all communications needed to support self-service (My Devices)
portal.
Support Direct Boot mode: Direct Boot mode allows administrators to perform the Unlock and Wipe
device actions even when the device is locked after reboot. This mode is supported on Android 7.0 throughthe latest version as supported by MobileIron.

ll

FIDO (Fast ID Online) devices appear in the Authenticate list: Mobile@Work includes FIDOauthenticators and FIDO registered desktops on the Authenticate screen when Mobile@Work prompts thedevice user to authenticate. The device user can select the FIDO device and remove it.
Zero Sign-on notifications Yes/No buttons switched: For customers' ease, in the Zero Sign-on andFIDO notifications, the Yes/No action buttons have been switched. "Yes" now appears on the right and"No" appears on the left.

lCross profile whitelisting of Apps: In the Lockdown policy, the "Enable Cross profile whitelisting ofApps" setting, when enabled, allows the users to share information from specific apps from within the work
profile to the personal side of the Android 11+ devices. This setting is under the Android 11+ settings and isdisabled by default.

Wear OS watch app features and enhancements
This section summarizes new features and enhancements related to the Wear OS watch app that requires andpairs with the latest version of Mobile@Work for Android.
There are no new features and enhancements for the Wear OS watch app.

MobileIron Threat Defense features
MobileIron Threat Defense protects managed devices from mobile threats and vulnerabilities affecting device,
network, and applications. For information on MobileIron Threat Defense-related features, as applicable for thecurrent release, see the MobileIron Threat Defense Solution Guide for Core, available on the MobileIron Threat
Defense for Core Documentation Home Page at MobileIron Community.

Mobile@Work 11.1.0.0 for Android Release Notes| 6

Support and compatibility

NOTE: Each version of the MobileIron Threat Defense Solution guide contains all MobileIron Threat
Defense features that are currently fully tested and available for use on both server and client
environments. Because of the gap between server and client releases, MobileIron releases new
versions of the MobileIron Threat Defense guide as the features become fully available.

Support and compatibility
The information in this section includes the components MobileIron supports with this product.
NOTE: This information is current at the time of this release. For MobileIron product versions released
after this release, see that product version’s release notes for the most current support andcompatibility information.

Support policy
MobileIron defines supported and compatible as follows:
Term

Definition

Supported productversions

The functionality of the product and version with currently supported releases wassystematically tested as part of the current release and, therefore, will besupported.

Compatible productversions

The functionality of the product and version with currently supported releases has
not been systematically tested as part of the current release, and therefore notsupported. Based on previous testing (if applicable), the product and version is
expected to function with currently supported releases.

Mobile@Work for Android support and compatibility
Component

Supported Version

Compatible Version

MobileIron Core

10.8.0.0, 11.0.0.0, 11.1.0.0

10.2.0.0 through 10.7.0.0

Android6.0, 7.0, 7.1, 8.0, 8.1, 9.0, 10.0, 11.0

(All listed versions are tested andsupported.)

Wear OS on watch

2.9, 2.10, 2.11, 2.12

2.0, 2.1, 2.2, 2.3, 2.6, 2.7, 2.8

MobileIron Threat
Defensemanagement console: zConsole
4.28.7 GA

Not applicable

NOTE: MobileIron Connected
Cloud does not support

Mobile@Work 11.1.0.0 for Android Release Notes| 7

Language support for Android devices and Mobile@Work Wear OS (watch app)

Component

Supported Version

Compatible Version

the use of MobileIron
Threat Defense.

Language support for Android devices and Mobile@Work WearOS (watch app)
MobileIron Core supports the following languages and locales in client apps on Android devices:l

Chinese (Simplified)lChinese (Traditional)lDutch (Netherlands)lEnglishl

French (France)lGerman (Germany)l

HungarianlItalian (Italy)lJapanesel

Koreanl

PolishlPortuguese (Brazil)lRomanian (Romania)lRussianl

Slovakl

Spanish (Latin America)l

SwedishResolved issues
This section describes the following resolved issues fixed in the current release of Mobile@Work for Android. For
resolved issues provided in previous releases, see the "Resolved issues" sections in the release notes for thosereleases, available in Mobile@Work for Android Product Documentation.
This release includes the following resolved issues.

Mobile@Work 11.1.0.0 for Android Release Notes| 8

Known issueslAC-20791: After 30-60 minutes of changing the password in the Microsoft Azure portal, the client
Authentication failed. This issue has been fixed.

llll

AC-20788: Email+, Docs@Work, and MobileIron Tunnel apps could not be closed. This issue has been
fixed.
AC-20758: With mutual authentication enabled and the Android Notification Mechanism in Sync policy setto "Push notification URL", check-ins from device to the Core server are delayed for ten minutes. Thisissue has been fixed.
AC-20721: Provisioning in Android Enterprise Managed Device or Managed Device with Work Profile
mode sometimes resulted in device factory reset when the Android for Work configuration was associatedwith dynamic labels that took too long to evaluate. This is now fixed; a one-minute grace period has been
implemented that forces Mobile@Work to wait until the Android for Work configuration is pushed insubsequent check-ins with the Core server.
AC-20646: The provisioning of Managed Profile on Samsung devices running Android 9.0 sometimes left
the Mobile@Work client visible on the personal side of the device. This issue has been fixed.

Known issues
This section describes the following known issues that are found in the current release of Mobile@Work forAndroid. For known issues found in previous releases, see the "Known issues" sections in the release notes for
those releases, available in Mobile@Work for Android Product Documentation.
There are known issues for this release.
lAC-20820: Post-migration of Mobile@Work in Work Profile on Company Owned Device mode, when thedevice user tries to send logs from Mobile@Work, it is exiting instead.
Workaround: Reboot the device and then try to send logs. Device user will be prompted with the list ofavailable apps on the device and Mobile@Work will not exit.

lAC-20780: For Android Enterprise devices in Managed Device with Work Profile mode, after migration, thedevice user is prompted to "Enable Phishing protection." Even though the device user has set the client as
the default browser before migration, Mobile@Work gets stuck in a loop.
Workaround: Reboot the device and launch the migrated client. The "Enable Phishing protection" will notdisplay and the UI is loaded properly.

llAC-20349: Previously, device users were able to access the Mobile@Work Home screen and browse theinternet on a Chrome browser without completing device enrollment in Android Enterprise Work Manageddevice (DO) mode. There is no workaround.
AC-19878: Microsoft Intune Device Compliance Support - generate notification: If a device does notcheck-in with AAD, a notification is sent to Core. If Mobile@Work fails to get the deviceID on subsequent
check-ins, an error message displays. There is no workaround.

lMobile@Work 11.1.0.0 for Android Release Notes| 9Limitations

Limitations
This section describes the following limitations (typically third-party limitations) that are found in the current releaseof Mobile@Work for Android. For limitations found in previous releases, see the "Limitations" sections in therelease notes for those releases, available in Mobile@Work for Android Product Documentation.
There are third-party limitations for this release.
lAC-20763: In Samsung Galaxy M31s devices, mandatory apps that are marked for silent installation are
not getting installed silently. This applies to Device Admin mode and there is no workaround. A ticket has
been logged with Samsung about this issue.

Documentation resources
MobileIron product documentation is available at https://help.mobileiron.com/s/mil-productdocumentation.

Mobile@Work 11.1.0.0 for Android Release Notes| 10