Apple Pie. Green Apple pie Red Apple Pie Different shape of Apple pie Circle.
What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile...
Transcript of What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile...
![Page 1: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/1.jpg)
in Android Pie?What’s New
![Page 2: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/2.jpg)
Core themes for Android Pie
Managed Devices
Work ProfileFully managed
devicesDevice provisioning
Dedicated Devices
Shared use devicesKiosk & rugged
devicesLock task mode
Security
KeystoreEncryption & device
integrity
![Page 3: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/3.jpg)
What’s new in Managed Devices
![Page 4: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/4.jpg)
Current experience
Apps mixed together
Hard to parse duplicate apps
Disconnected from Android system UI
Android Pie improvements
Apps separated into work and personal tabs
Clear and labelled segregation of managed & non-managed spaces
Feels integrated into Android system UI
Turn off work toggle easily discoverable
Work profile user experience
![Page 5: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/5.jpg)
User education
Updated elements
Improved user education upon profile creation
Updated badge UI to match Material Design and Android system updates
Ability to toggle off the work profile brought directly into the work tab
Work profile clearly labelled as managed
![Page 6: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/6.jpg)
EMMs can set policy to turn the work profile on or off at set times or on demand
Turn Offwork profile
programmatically
![Page 7: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/7.jpg)
Simplified switching between the personal and work version of the same app
Simple profile switching
![Page 8: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/8.jpg)
What’s new in Dedicated Devices
![Page 9: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/9.jpg)
In Android Pie, we focused on 3 dedicated device needs
Provisioning thousands of devices
at scale
Enabling proper login concepts for shared use
devices
Locking devicesInto a consistent experience when
shared
1 2 3
![Page 10: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/10.jpg)
Bundled QR reader and support for WiFi configurations
Seamless QR provisioning
![Page 11: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/11.jpg)
Support for APN provisioningand control of more settings (e.g. timezone, airplane mode)
Expanded configuration
![Page 12: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/12.jpg)
Prevent changes to date, time, & timezone
Set timezone & time (Device Owner only)
Block use of airplane mode
Prevent apps from using metered data
Prevent changes to location providers
Disable ambient display for notifications
Prevent changes to brightness
Set freeze periods to postpone pending OTA firmware updates
Prevent changes to screen timeout
Disable printing (at framework level)
New Policy Settings in Android Pie
![Page 13: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/13.jpg)
Locking a device to multiple apps
Current experience
“LockTask” mode supports only a single app
App developer must declare support for lock-task mode
Partners must develop custom launcher
Android Pie improvements
LockTask can support multiple apps with an included launcher
Any app can be put into lock-task mode
Greater UI flexibility with options to show or hide status bar icons, power menu, home, recents and notifications
![Page 14: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/14.jpg)
Public sessions - user data erased at the end of every session (i.e. kiosks)
Shift worker devices - multiple employees share devices, with data preserved between sessions but fully separated at all times.
Shared devices
![Page 15: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/15.jpg)
Postpone OTAupdates
Postpone platform updates for up to 90 days
(e.g. holidays)
Mandatory 60 day cooling-off after postpone period
![Page 16: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/16.jpg)
What’s new in Android 9 security
![Page 17: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/17.jpg)
Separate work challenge
Admins can require different
PINs and timeouts for personal and work profiles
Key security enhancements
Data leakage improvements
Prevent the sharing of data across work &
personal profiles - including via
adb
Verified device access
New APIs to work with keys and
certificates used to securely
identify devices
Security &network logging
Unique IDs for network and
security events. Expanded coverage of security-related
actions.
...and more! goo.gl/nh5bpM
![Page 18: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/18.jpg)
Announced in December 2017
APIs marked as deprecated in P
Will be removed entirely in following release
Device Admindeprecation
![Page 19: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/19.jpg)
Device admin: Why is it going away for Enterprise?
Rudimentary local administration
Outdated securitymodel
Malware abuse
OEM API challenges
![Page 20: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/20.jpg)
DA vs AEEnrollment
Device Admin
Manual Download, Sideloading (unsafe)
Barcode (on some OEMs)
Android Enterprise
Zero-touch (8.0+)
QR Code (7.0)
NFC (6.0)
DPC Identifier (6.0)
![Page 21: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/21.jpg)
Device Admin
No Google Play integration
App Wrapping
Unknown Sources
Android Enterprise
Google Play is most reliable and robust app delivery service
Silent installs through managed Google Play
Private app publishing
Alpha/Beta publishing
Managed App Config
DA vs AEApplications
![Page 22: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/22.jpg)
Device Admin
“One Size Fits All” rigid management
Android Enterprise
Flexible Range of Management options:
- Managed Profile
- Managed Device
- Managed Device w/ Managed Profile
DA vs AEFlexibility
![Page 23: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/23.jpg)
Device Admin
Limited Device Controls
OEM API Reliance
Battery Intensive
Android Enterprise
Extensive Controls
Consistent across all OEMs
Native
DA vs AEDevice Management
![Page 24: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/24.jpg)
Device Admin
Android Enterprise+ Device Admin
Android Enterprise Only
Pre-Lollipop2.3.3 - 4.4
DA policy built for rudimentary
local admin tasks
Lollipop Marshmallow PieNougat Oreo5.0 - 5.1
Support for work profile
6.0
Support for fully managed
device
7.0 - 7.1
Improvements for work
profiles & fully managed devices
8.0 - 8.1
New device-wide policies & support for
personally enabled work
devices
9
Advanced policies,
enhanced security,
& UX polishDA API
warnings
AE continued support & dedicated device use
casesRemove
enterprise DA API support
Next release
![Page 25: What’s New in Android Pie? · and Android system updates Ability to toggle off the work profile brought directly into the work tab ... New Policy Settings in Android Pie. Locking](https://reader033.fdocuments.in/reader033/viewer/2022060503/5f1ca2bdc445ba4988765254/html5/thumbnails/25.jpg)
ConclusionLots of great features in Android Pie
Managed Devices
DedicatedDevices Security