Acronis Access Advanced - Administrator's Guide User Manual

Page 139

Advertising

139

the Acronis Access app, tapping the MobileIron AppConnect option towards the bottom of the
settings list, and selecting the Enable button. If the AppConnect setup does not begin immediately,
please leave the Acronis Access app open for a few minutes to allow it to begin. Once setup begins, it
will proceed as described in the previous scenario.

If the Mobile@Work app is not present on the device, Acronis Access will display a warning on this
Settings menu rather than an Enable button.

5.13.4.3 Acronis Access has not yet been installed on the device

In this scenario, you will need to install Acronis Access for the first time from the Apple App Store
http://www.grouplogic.com/web/meappstore.

Once installed, start Acronis Access.

Acronis Access will check for the presence of a configured Mobile@Work app, temporarily switch
over to the Mobile@Work app, and then switch back to Acronis Access . If a valid Acronis Access
AppConnect configuration is found, Acronis Access will automatically enter enrollment mode and
present the user with the Access Mobile Client enrollment form. Any fields included in the
AppConnect configuration will be automatically filled out. The user will typically just have to enter
their AD password into the form and then submit it. Once this is completed, the relevant Acronis
Access Client Management policy will be applied to Acronis Access and the user will be ready to
begin using the app.

If a valid configuration for Acronis Access does not exist on the VSP, or if the Mobile@Work app has
not been installed or configured, the user will receive an error message or, in the case Mobile@Work
is not installed, Acronis Access will simply start up in it's standard mode without AppConnect
enabled.

5.13.5 Ongoing AppConnect management of Access Mobile Clients

Once Acronis Access is being actively managed by AppConnect, any changes to the applicable
Container Policy will be received by the Access Mobile Client when it checks in with the
Mobile@Work app on its device. The interval at which this check in occurs is set on your MobileIron
VSP and will cause the Acronis Access app to temporarily switch over to the Mobile@Work app to
perform the check. This will interrupt the user, so it's recommended that this check-in interval be
made long enough to not frequently interfere with their use of the app.

Any changes to Container Policy, revocation of access to Acronis Access, etc, will be applied to the
app at the next time it checks in.

5.13.6 Using AppConnect with Kerberos Constrained Delegation

This article serves to explain how to configure the required system components to connect the
Acronis Access mobile client to the Acronis Access server proxied through MobileIron AppTunnel
with authentication handled via Kerberos Constrained Delegation.

Note: The documentation on how to configure MobileIron for Kerberos Constrained Delegation is provided as a
courtesy to help get the configuration setup. However, all of the steps up until verification that the Sentry is
receiving the Kerberos ticket from the KDC, involve MobileIron software exclusively. If you are having difficulties
getting through these steps and successfully receiving a Kerberos ticket, please contact MobileIron support.

Advertising