User downloads the BES10 Client from the relevant app store.

User opens BES10 Client and enters the activation details, the activation process begins.

Once activation is complete, the user is prompted to create a Secure Work Space password and install some, or all of the applications specified by the administrator.

Administrator creates a user account within BES10 and specifies an activation password. An activation email is then sent to the user

Secure Work Space for iOS and Android

B L A C K B E R R Y E N T E R P R I S E

S E R V I C E 1 0

Containerization, application-wrapping and secure connectivity option for iOS and Android™.

Secure Work Space is a containerization, application-wrapping and secure connectivity option that delivers a higher level of control and security to iOS and Android™ devices, all managed through the BlackBerry Enterprise Service 10 administration console.

Managed applications are secured and separated from personal apps and data, providing integrated email, calendar and contacts app, an enterprise-level secure browser and secure attachment viewing and editing with Documents To Go™.

Features•Securedappsforemail,calendarandcontacts(PIM),webbrowsinganddocumentviewingandediting(DocumentstoGo)comeasstandard

•Datainsecuredappsisencryptedandseparatedfrompersonaldataandapps.Userscannotcopyorpastecorporatedataintopersonalapps

•AbilitytodeployandmanageadditionalsecurelywrappedappswithintheSecureWorkSpace

• iOSandAndroiddevicescanbedeployedintrueBYODmode,wheremanagementisconfinedtotheSecureWorkSpacecontaineronly

•FulldeviceMDMcontrolcanbeactivatedifrequiredandmanagedthroughtheBES10console

Deployment of secured enterprise applications•AdditionalappscanbesecurelywrappedanddeployedtotheSecureWorkSpace

•Nocustomdevelopmentisnecessarytoenableapplicationsforsecuredeployment

•Alldeployedapplicationsaresubjecttothesamesecuritycontrolsandapplicationdataisencrypted

•Deployedapplicationsareabletodirectlyaccessdatabehind-the-firewallviaBlackBerrySecureConnectivity

BlackBerry Secure Connectivity•ProvidesbuiltinAES-256-bitencryptionforiOSandAndroiddevices•Providesaccesstobehind-the-firewallapplicationserversforappsdeployedtotheSecureWorkSpace

•NoseparateVPNinfrastructurerequired•Allsupportedthroughasingle-outboundportviaBES10•AllowssecurebrowsingofwebpagesonthecorporateintranetoniOSandAndroiddevices

Administrator experience TheSecureWorkSpacecontaineranditscontentscanbeeasilyconfiguredandmanagedthroughtheBES10managementconsole.Throughaselectionofcontrolsandsettings(seeoverleaf)theSecureWorkSpacecanbeconfiguredtoanindividualuserorgroupofusers.

Deploying Secure Work Space is simple:

Screenimagessimulated.iOSisaregisteredtrademarkofCiscoSystems,Inc.and/oritsaffiliatesintheU.S.andcertainothercountries.iOSisusedunderlicensebyAppleInc.AppleIncdoesnotsponsor,authorizeorendorsethisbrochure.AndroidisatrademarkofGoogleInc.whichdoesnotsponsor,authorizeorendorsethisbrochure.©2013BlackBerry.Allrightsreserved.BlackBerry®andrelatedtrademarks,namesandlogosarethepropertyofResearchInMotionLimitedandareregisteredand/orusedintheU.S.andcountriesaroundtheworld.Allothertrademarksarethepropertyoftheirrespectiveowners.

For more information on Secure Work Space for iOS and Android and BlackBerry Enterprise Service 10 please visit www.bes10.com

Key components of Secure Work Space for iOS and Android

Email, calender, contacts, notes and tasks*

SecureWorkSpaceoffersiOSandAndroidusersconvenientaccesstoworkproductivitytoolsincludingemail,calendar,contacts,notesandtasksthroughafamiliarandsecuredapplication.

ActiveSyncissupportedandconnectiontoenterprisemailserversisachievedthroughBlackBerrySecureConnectivity,removingtheneedtoexposeActiveSynctotheInternet.

Lock Work Space after inactivitySpecifytheperiodofinactivityafterwhichtheWorkSpacelocks.Youcanspecifyanynumberofdays,hours,minutes,orseconds.

Time after the Work Space locks that it can be unlocked without the passwordSpecifytheperiodoftimeaftertheWorkSpacelocksthattheusercanunlockitwithoutapassword.Youcanspecifyanynumberofdays,hours,minutes,orseconds.

Track incorrect password attemptsSpecifythenumberoftimesthatausercantryanincorrectpasswordbeforetheactionspecifiedintheActionaftermaximumincorrectpasswordattemptssettingoccurs.

Action after maximum incorrect password attemptsSpecifywhathappenswhentheuserentersanincorrectpasswordmorethanthenumberoftimesspecifiedintheTrackincorrectpasswordattemptssetting.

Disable plugins in secure work browser Work Space (Androidonly)Preventplug-insfrombeingaddedtothebrowserappintheWorkSpaceonAndroiddevices.

Delete Work Connect data after period of inactivitySpecifythenumberofdaysofWorkSpaceinactivity,afterwhichtheuser'sworkdata,includingPIMdata,isdeleted.

Allow apps in the Personal Space to access data in the Work Space (Androidonly) AllowpersonalappstoaccessdatawithintheWorkSpace.

Notification level (Androidonly)SpecifythelevelofnotificationsthatauserseesforappsintheWorkSpacewhentheWorkSpaceislocked.

Allow S/MIMEChoosewhetherornottoenableS/MIMEintheWorkConnectapponthedevice.

Lock Work SpaceLocktheWorkSpaceonadevicesothattheusermusttypetheexistingWorkSpacepasswordtounlockthedevice.

Disable/enable Work SpaceTemporarilypreventaccesstotheWorkSpaceappsonthedevice.

Delete only work dataDeleteanyprofilesthatareassignedtothedeviceandremovethedevicefromBES10.

IfthedevicehasaBES10WorkSpace,theWorkSpaceinformationisdeletedandtheWorkSpaceisremovedfromthedevice.

Allow sequence and single character passwordsAllowausertosetapasswordthatusesonlyonecharacter,suchas1111,orasequenceofcharacters,suchasabcd.

Require lettersSpecifytheminimumnumberoflettersrequiredintheWorkSpacepassword.

Require lowercase lettersSpecifytheminimumnumberoflowercaselettersrequiredintheWorkSpacepassword.

Require numbersSpecifytheminimumnumberofnumeralsrequiredintheWorkSpacepassword.

Require special charactersSpecifytheminimumnumberofspecialcharactersrequiredintheWorkSpacepassword.

Require uppercase lettersSpecifytheminimumnumberofuppercaselettersrequiredintheWorkSpacepassword.

Minimum length for the Work Space passwordSpecifytheminimumnumberofcharactersrequiredintheWorkSpacepassword.

Maximum length for the Work Space passwordSpecifythemaximumnumberofcharactersrequiredintheWorkSpacepassword.

Controls and Settings for Secure Work SpaceThe below controls and settings are in addition to the full device management capabilities of BES10. For more information please read the BES10 full device management datasheet available from www.bes10.com.

*NotesandtasksarecurrentlyonlyavailableinSecureWorkSpaceforIOS.

Calendar(listview)Androidsmartphone

EmailviewiPhone ContactsiPhone

Documents to GoDocumentstoGoisincludedwithSecureWorkSpacetoenableiOSandAndroiduserstocreate,editandviewworkdocuments.

DocumentstoGosupportsfilesdownloadedviatheWorkBrowser,filesreceivedasanattachmentthroughworkemailorviaotherapplicationsintheSecureWorkSpace.

Work BrowserTheWorkBrowserwithinSecureWorkSpaceforiOSandAndroiddevicesisHTML5compatible.EnabledbyBlackBerrySecureConnectivity,userscansafelybrowseinternalpages(intranet)andwebpagesfromwithintheSecureWorkSpace.Thebrowsingexperienceisalignedwiththedevice’snativebrowser.