Lock, unlock, and retire impact on AppConnect for Android

Locking or retiring an Android device impacts access to AppConnect apps and their associated data. Also, unlocking the AppConnect container impacts access to AppConnect apps.

Lock impact

When you lock a device from the Ivanti UEM, the device user is also locked out of AppConnect apps. The user must reenter the secure apps passcode (or fingerprint) to access AppConnect apps. The Secure Apps Manager prompts the user to reenter the passcode when the user launches:

  • the Secure Apps Manager
  • any AppConnect app

If the device also uses a device passcode, the user must first reenter the device passcode (or other identification, such as a fingerprint).

Related topics 

  • For MobileIron Core deployments: “Lock” in the Core Device Management Guide for Android and Android Enterprise Devices

Unlock the AppConnect container impact

When you unlock a device from the Ivanti UEM, the device passcode is removed. However, the AppConnect passcode is not impacted. Unlocking the AppConnect container using the AppConnect Unlock(Ivanti Neurons for MDM) or the Unlock AppConnect Container (Core) command removes the secure apps passcode. The Secure Apps Manager notifies the device user to create a new secure apps passcode when the user launches:

  • the Ivanti client (Go or Mobile@Work)
  • the Secure Apps Manager
  • any AppConnect app

No data relating to AppConnect apps is removed when the AppConnect container is unlocked. Once the device user creates a new secure apps passcode, the data becomes accessible again.

Issuing the AppConnect unlock command is useful in the following scenarios:

  • You do not allow self-service AppConnect passcode recovery, and the device user has forgotten their secure apps passcode.
    See "Self-service AppConnect passcode recovery" in Configuring the AppConnect global policy.
  • The device user has exceeded the maximum number of failed attempts for the secure apps passcode.

Related topics 

  • MobileIron Core deployments: “Unlock” in the Core Device Management Guide for Android and Android Enterprise Devices

Retire impact

Retiring a device unregisters the device from Ivanti UEM.

Retiring a device impacts AppConnect apps as follows:

  • The device user cannot open any AppConnect app or the Secure Apps Manager.
  • Data that the AppConnect apps saved to device storage is deleted.

However, device users must manually uninstall the AppConnect apps and the Secure Apps Manager.

Retiring a device, therefore, retires the AppConnect apps on the device.

Related topics