Safely and shortly distribute non-public enterprise apps with Google Play

Safely and shortly distribute non-public enterprise apps with Google Play

Google Play provides your group a wealthy ecosystem of apps for work, enabling your group to be productive from anyplace.

Many companies use a managed model of Google Play, which permits IT directors to whitelist particular functions for his or her group to make use of. However, generally you want a extra personalized answer, reminiscent of custom-built, proprietary apps to overcome particular duties. Also, with rising reputation of low code growth instruments, increasingly workers are growing apps to serve an organization’s particular wants, and these must be managed.

The managed model of Google Play allows you to deploy proprietary apps privately. It provides you all the advantages of Google Play’s excessive availability, world attain and scale, optimized app supply, the safety of Google Play Protect, and the reassurance that your app stays non-public to your organization.

You can curate non-public apps alongside public apps on Google Play by your Enterprise Mobility Management (EMM) console. These enterprise apps are then obtainable to your group straight by the Play Store app – no want for a separate, proprietary enterprise app retailer. This saves growth time and is a extra acquainted expertise for the top customers. Users can browse and set up the apps that you simply’ve approved, or you’ll be able to push them on to group members’ gadgets.

Publish apps with out the complexity

Whether you may have a devoted engineering group constructing in Java, you allow workers to develop apps, or use exterior growth companies, managed Google Play permits your groups to simply get their apps into the palms of the customers that want them.

Following a latest replace to Google Play’s app focusing on options, any Google Play developer can publish an app privately to an enterprise. This signifies that not solely can builders publish apps internally with out advanced administrator setup, however this additionally permits third-party builders, reminiscent of companies, to handle publishing of apps they develop for a shopper. For extra particulars about focusing on the enterprise with non-public apps, try this managed Google Play assist web page.

The new Custom App Publishing API provides further workflow benefits to those that want to publish non-public apps. The API eliminates the necessity for enterprise IT directors to entry the Google Play Console each time they publish an app. Apps might be printed to their managed Google Play straight from the EMM console or Integrated Development Environment (IDE).

Better for safety

Every app uploaded to Google Play is scanned for safety vulnerabilities. Google Play Protect scans greater than 500,000 apps per day. Scanning might flag poor coding practices or utilization of outdated, weak variations of third-party SDKs to allow them to be mitigated earlier than the app is printed, enabling you to be extra assured within the safety of apps developed internally.

With Google Play Protect continuously working within the background, you’ll be able to make certain that inner apps are being vetted with the identical degree of safety that safeguards the Play ecosystem.

Flexibility for giant organizations

Private apps can now be focused to as much as 20 EMM tenants. So in case your group is managed regionally, or you may have take a look at environments that you could preserve consultant of manufacturing, you’ll be able to merely publish the identical app throughout your environments as you want.

EMM chart

It’s as simple as in the event you had been publishing to 1 tenant. For instance, an app might be deployed to totally different environments as merely as if it was accomplished for only one.

Get began

Our non-public apps whitepaper particulars the steps essential to get began, and highlights many finest practices for personal app publishing. Much of the publication course of is much like different functions, with the core distinction being that distribution is proscribed to your group. So groups with expertise constructing apps ought to be capable of make a very simple transition to non-public app publishing.

This article sources info from The Keyword

How the Pixel 2’s safety module delivers enterprise-grade safety

How the Pixel 2’s safety module delivers enterprise-grade safety

Security is commonly prime of thoughts for enterprise prospects relating to selecting a tool for work. Company information must be protected towards all method of threats to keep away from a pricey and distressing safety breach.

The new Google Pixel 2 was constructed with a tamper-resistant safety module that reinforces the lock display towards malware and assaults to higher safeguard the information saved in your gadget, like emails, contacts and pictures. This is the primary of what we hope are many Android units that characteristic devoted safety modules.

Benefits of tamper-resistant

The lock display is the primary line of protection in defending your information from assaults. Devices that ship with Android 7.0 and above confirm your lock display passcode in a safe setting, such because the Trusted Execution Environment or TEE, that limits how typically somebody can repeatedly brute-force guess it. When the safe setting has efficiently verified your passcode does it reveal a tool and user-specific secret used to derive the disk encryption key. Without that key, your information can’t be decrypted.

The aim of those protections is to stop attackers from decrypting your information with out understanding your passcode. However, the protections are solely as sturdy because the safe setting that verifies the passcode. Performing some of these security-critical operations in tamper-resistant considerably will increase the issue of attacking it.

SOC resources

Tamper-resistant comes within the type of a discrete chip, separate from the System on a Chip (SoC). It consists of its personal flash, RAM, processing unit, and different sources inside a single package deal, so it may well absolutely management its personal execution and thrust back exterior makes an attempt to tamper with it. The package deal is immune to bodily penetration and designed to withstand many facet channel assaults, together with energy evaluation, timing evaluation, and electromagnetic sniffing. The can also be resilient towards many bodily fault injection methods together with makes an attempt to run exterior regular working circumstances, corresponding to incorrect voltage, incorrect clock pace, or incorrect temperature.

Security module in Pixel 2

In addition to being tamper-resistant, the safety module in Pixel 2 additionally helps shield towards software-only assaults. Because it performs only a few capabilities, it has a brilliant small assault floor. And with passcode verification taking place within the safety module, even within the occasion of a full compromise elsewhere, the attacker can’t derive your disk encryption key with out compromising the safety module first. 

The safety module is designed in order that no one, together with Google, can replace the passcode verification to a weakened model with out understanding your passcode first.

Security on the core

Businesses that select the brand new Google Pixel 2, or a future Android gadget with tamper- resistant , may have extra peace of thoughts that essential firm information is safer towards a complete class of subtle assaults. These safety upgrades, together with the great and revolutionary administration options that Android brings to work, give your small business a robust set of instruments for a cellular workforce.

This article sources info from The Keyword

New Android Management API delivers easy, highly effective instruments for enterprise

New Android Management API delivers easy, highly effective instruments for enterprise

Managing cell units and purposes generally is a problem for companies and companions of all sizes.

Today, our Enterprise Mobility Management (EMM) companions write their very own administration app to be able to allow administration of Android units; we name this a “system coverage controller” (DPC) app. A DPC app is actually an agent deployed by the EMM, with the actual worth residing within the console and again finish, which the app communicates with instantly.  

Now, with our latest software, the Android Management API, clients and EMMs can handle units utilizing a server-side API and remove the necessity to write a administration app. The Android Management API takes on this complexity so companions can concentrate on what’s necessary to their clients and never fear in regards to the underlying Android framework.

Now, creating insurance policies on your system fleet is so simple as making a Google Cloud venture and making a few REST API calls. The Android Management API is constructed round insurance policies, relatively than discrete transactions; simply inform the API how a tool ought to be managed.

Behind the scenes, Google interprets these insurance policies into a selected set of actions for the goal system, and executes these requests utilizing the Android Device Policy app, a Google-made managing agent. Because we offers the managing agent, builders don’t must deal with nuances of the framework implementation, comparable to which APIs can be found or what bugs should be labored round on given variations of Android.

Android devices

We’ve been testing the Android Management API with a number of early entry companions. Mobiltec, which has launched a validated Corporate Owned Single-Use (COSU) answer, discovered the brand new API sped up the corporate’s EMM efforts by easing again on some improvement wants.

“Android Management API is a strong Cloud Platform API that enables us to simply combine Android EMM features to cloud4mobile, our EMM software. With this new administration API, we will ship top-of-market EMM options to a variety of units,” says Paulo Morandi, senior software program architect at Mobiltec. “Since we need not develop our personal DPC (system coverage controller), new options might be added in minutes; just a few HTTP requests and you might be finished.”


The Android Management API is suitable with any system working Android 6.0 (Marshmallow) or above that has Google Play put in. Designed with the wants of companies in thoughts, it would not matter if a company’s units come from one or many producers—this new API offers a constant technique to handle a tool.

Our first set of APIs concentrate on purpose-built units use instances, comparable to digital signage, ticket printing, or kiosks. Over the approaching months, our crew of engineers will add extra options to cowl information employee administration use instances, and finally all Android enterprise answer units.

The Android Management API is now accessible in beta for all companions and builders, whether or not they’re creating EMM software program, purpose-built particular purposes, or an in-house answer for a company.

Want to strive it out? Using Google’s API Explorer, you may check out the API and provision a tool in minutes. All you want is a brand new or manufacturing facility reset Android 6.0+ system and a Gmail account. Check out the Quick Start Guide to find how rapidly issues can rise up and working. We hope this makes improvement simpler for companions and helps them convey the most recent Android options to clients sooner.

This article sources data from The Keyword

How Android helped Dalmia Bharat go digital and develop their enterprise

How Android helped Dalmia Bharat go digital and develop their enterprise

Editor’s be aware: Today’s submit comes from Sunil Tewari, Head of Technology and Business Services for Dalmia Bharat Group, considered one of India’s largest cement producers. Read how Dalmia Bharat Group makes use of Android to extend gross sales, optimize cement supply, and higher join their workforce.

Dalmia Cement is a frontrunner within the Indian cement trade, producing over 9 million tons of cement for its clients yearly. Founded as a division of the Dalmia Bharat Group in 1939, we’ve constantly innovated our manufacturing and manufacturing processes, pioneering specialty cements used for oil wells, railway sleepers, and air strips.

We’re fast to embrace options that make our enterprise extra environment friendly and responsive for our clients. So when it got here to mobility, we turned to a different powerhouse of innovation—Android. Our analog record-keeping system wasn’t maintaining with our wants: our clients are unfold far and broad throughout India, so lots of our staff spend their work hours largely on the street, making gross sales calls and deliveries. We have between 15,000 and 18,000 vehicles delivering cement to cities and distant areas, and 600 gross sales representatives visiting clients day by day.

In a enterprise that depends on robust private relationships between gross sales reps and clients, protecting observe of contacts, purchases and deliveries with so many staff whereas on the go is tough. Sales reps want to have the ability to get data rapidly whereas they’re at a buyer website or within the workplace. Managers want to ensure drivers are taking the quickest supply path to the place the shoppers are. And we have to observe profitable deliveries so we all know when to invoice the consumer.

Dalmia Android team

To make all of this a smoother course of, we constructed three Android apps in order that gross sales reps, sellers, and truck drivers may have the data they want most at their fingertips. Our SM@RT-D app provides our gross sales power the power to put and observe orders. Our SUVIDHA app is utilized by clients to put orders while not having to contact the gross sales crew, and DriverSathi tracks deliveries and makes billing extra environment friendly.

Android’s safe and versatile platform was the appropriate selection for our firm’s apps. We had been capable of construct and ship apps to our crew in six weeks, that are utilized by greater than 4,000 staff and clients.

We are utilizing the Enterprise Mobility Management capabilities in G Suite to handle the gadgets we offer for our gross sales power. Employees can even convey their very own gadgets to entry sources like Gmail and our firm’s apps—we use Android’s machine coverage controller to handle the work profile, protecting firm knowledge safe on these gadgets. Dealers use their very own Android gadgets to entry our apps and place orders.

Since our gross sales reps started utilizing our SM@RT-D app, gross sales have elevated, with 60 p.c of all orders now positioned digitally. Our gross sales crew makes use of the app to get fast entry to product data from a buyer website, whereas managers use it to test when the rep final visited that buyer and to see what different stops the rep has that day.

Going cell with Android has been a key piece of our progress, as we’ve develop into one of many fastest-growing cement manufacturers in India.

Sunil Tewari

Dalmia Bharat Group

We have greater than 8,000 energetic customers of our SUVIDHA app, which permits our clients to put orders anytime. Prior to this, they needed to name into our gross sales crew. We now see greater than 1,000 orders positioned every day with the app, which accounts for 35 p.c of complete gross sales.

With our third app, DriverSathi, we are able to observe cement deliveries. Drivers get digital proof of supply, so we all know precisely when every supply was made, resulting in on-time cost for our supply drivers. Orders are crammed 10 p.c sooner now as a result of the method isn’t paper-based. Customers and sellers know when they are going to be receiving orders to allow them to handle their very own gross sales pipelines.

This app additionally streamlines billing. Previously, invoices had been typically delayed by as much as a month and a half as a result of every part was completed through laborious copy, and it typically took weeks for drivers handy within the paper invoices. Now the invoicing course of begins as quickly because the supply is made as a result of the app verifies precisely when supply is accomplished, triggering the cost course of.

Building customized apps on Android helped enhance each a part of our enterprise, beginning with the gross sales course of, going throughout supply and invoicing. Going cell with Android has been a key piece of our progress, as we’ve develop into one of many fastest-growing cement manufacturers in India. Our Android functions enabled us to supply service to extra clients in a faster vogue as a result of our staff have data they want once they want it most—on the street. And by giving essentially the most environment friendly routing data, staff spend much less time driving and extra time speaking with clients. With Android, it’s a win-win for everybody.

This article sources data from The Keyword

Android Oreo: a wise, powerful and productive cookie for enterprises

Android Oreo: a wise, powerful and productive cookie for enterprises

Android 8.0 Oreo is now out there, bringing a candy mixture of improved productiveness and enhanced safety to enterprise clients. The new launch builds on the constant investments we’ve made to make Android stronger, simpler to handle, and extra productive for the enterprise.  

Personal house in your work gadget

Android’s distinctive work profile creates the very best of each worlds—separating work and private information so IT has the safety it wants and customers have the liberty to make use of the private apps and companies they need. Only the work information is managed, giving IT full management of company data and retaining workers’ pictures, apps, and different private information separate.

In Android Oreo, we’re now bringing work profiles to corporate-owned gadgets. Now, organizations can allow firm gadgets for private use with a piece profile. While the group nonetheless retains management of the gadget, work apps and information might be put in a piece profile, retaining private apps and information outdoors the profile.

This brings the advantages of the work profile to company-owned gadgets, similar to eradicating the necessity for a fancy device-wide passcode, and permitting workers to show off work notifications once they’re away. The improved usability and clear separation makes this administration mode excellent for corporate-owned, personally-enabled (COPE) deployments.


Get up and operating in seconds

With zero-touch enrollment out there in Android Oreo, organizations can deploy corporate-owned Android gadgets with enterprise mobility administration settings pre-configured, so group members can begin utilizing their gadget proper out of the field. Devices might be configured on-line and drop-shipped to workers who may have administration enforced from the beginning.

With the work profile in Oreo, we’ve made it simpler than ever for workers to arrange their private gadget for work, with 10x quicker work profile setup. We’ve even diminished the enrollment steps required so customers can get their work profile arrange with a single faucet—no difficult directions required.

Robust safety that stops malware in its tracks

We proceed to put money into Android platform safety, giving IT extra superior capabilities in  managing their fleet of gadgets. With Project Treble in Oreo, we’re enhancing safety by separating the underlying vendor implementation from the core Android framework. This modularization isolates every abstraction layer (HAL) into its personal course of so every HAL solely will get the driver and kernel entry it wants. This improves sandboxing and makes it tougher for framework compromises to use the kernel.

We’re additionally enabling stricter enforcement of Google Play Protect, our always-on safety service that scans for malware and blocks probably dangerous apps. Now, admins can block unknown or dangerous apps from being put in throughout the entire gadget, outdoors the work profile. We’re additionally offering new APIs to allow directors to confirm the safety posture of their fleet together with particulars on which apps are put in.

With the inclusion of safe password reset, it’s now simpler for admins to securely assist customers get better from forgotten passwords on totally encrypted gadgets. Admins may also allow community logging for corporate-owned gadgets to file DNS lookups and TCP connections, serving to corporations detect suspicious community habits or remotely debug problematic apps.

Improved privateness and transparency

It’s necessary for workers to have visibility into administration insurance policies, notably when contemplating a tool for private use. To assist workers keep knowledgeable, we’ve made it simpler to see administration actions taken throughout the gadget, such because the set up of a brand new app or enforcement of a lock display. We’ve additionally improved notifications for connectivity adjustments, like always-on VPN and community logging.

These are only a few of the brand new and improved enterprise options in Android Oreo, with extra updates coming quickly. To be taught extra, take a look at the What’s new in Android 8.0 web page.

This article sources data from The Keyword

Android zero-touch enrollment: seamless and safe enterprise deployment

Android zero-touch enrollment: seamless and safe enterprise deployment

Companies around the globe deploy Android to mobilize workers and remodel their companies. No matter the use case, we all know that a profitable deployment is about extra than simply deciding on the fitting gadgets; it is about getting them configured and rolled out into the fingers of customers as shortly and simply as potential.

Today we’re launching a brand new deployment methodology referred to as zero-touch enrollment to make Android rollouts extra seamless and safe. With zero-touch enrollment, corporations can configure the gadgets they buy and have them shipped with administration and settings pre-configured, so workers can rise up and operating out of the field.

Zero touch pixel demo

For directors, zero-touch enrollment removes the necessity for customers to configure their gadgets manually and ensures that gadgets at all times have company insurance policies in place. Support can also be a lot simpler, with no additional steps for end-users; they only sign up and get entry to their work apps and knowledge.  

Zero-touch is accessible on gadgets bought from our zero-touch service companions, and we’re excited to accomplice with Verizon to supply zero-touch enrollment on the Pixel, cellphone by Google, beginning in the present day.

“For our enterprise prospects, deploying new gadgets and companies securely with the flexibility to implement device-specific insurance policies is crucial for shielding proprietary info and a corporation’s model,” says Ryan O’Shea, vp of National Business Channels with Verizon Wireless. “The Android zero-touch enrollment program permits our enterprise prospects to rise up and operating seamlessly and securely, and we’re excited in the present day to introduce this initiative on the Pixel cellphone and different future Android gadgets.”

We’re working with our machine companions together with Samsung, Huawei, Sony, LG Electronics, HMD Global Oy Home of Nokia Phones, BlackBerry smartphones, HTC, Motorola, Honeywell, Zebra, and Sonim with further OEMs to be added quickly to ship the zero-touch expertise to enterprises. The Huawei Mate 10, Sony Xperia XZ1 and XZ1 Compact particularly will probably be among the many first gadgets to assist zero-touch within the coming weeks and of course, different gadgets from our OEM companions will launch quickly.

Organizations can use software program from main enterprise mobility administration suppliers (EMMs) together with VMware AirWatch, BlackBerry, MobileIron, IBM, SOTI, GSuite and others to specify configurations and machine insurance policies which are routinely utilized to workers’ cellular gadgets throughout the preliminary setup.

If your organization already makes use of different enrollment strategies, don’t be concerned — you’ll be able to combine enrollment strategies to fit your specific wants. Samsung will proceed to supply Knox Mobile Enrollment (KME) on Samsung gadgets, together with pre-Oreo gadgets. Samsung gadgets that improve to, or ship with, Android Oreo may have zero-touch as an extra choice. Other present enrollment strategies like QR code and NFC bump will proceed to be supported throughout Android.

Keen to get began with zero-touch? Talk to our service companions who plan to supply zero-touch:

  • USA: Verizon, AT&T, Sprint, T-Mobile

  • Europe: BT, Deutsche Telekom

  • Asia-Pacific: Softbank, Telstra

To study extra, go to our zero-touch web page.

This article sources info from The Keyword