Lock, unlock, and retire impact on AppConnect for Android

Locking or retiring an Android device impacts access to AppConnect apps and their associated data. Also, unlocking the AppConnect container impacts access to AppConnect apps.

Lock impact

When you lock a device from MobileIron Cloud, the device user is also locked out of AppConnect apps. The user must reenter the secure apps passcode (or fingerprint) to access AppConnect apps. The Secure Apps Manager prompts the user to reenter the passcode when the user launches:

  • the Secure Apps Manager
  • any AppConnect app

If the device also uses a device passcode, the user must first reenter the device passcode (or other identification, such as a fingerprint).

  • For MobileIron Cloud deployments: Locking a device in the MobileIron Cloud Administrator Guide

Unlock the AppConnect container impact

When you unlock a device from MobileIron Cloud, the device passcode is removed. However, the AppConnect passcode is not impacted. Unlocking the AppConnect container using the AppConnect Unlock(Cloud) command removes the secure apps passcode. The Secure Apps Manager notifies the device user to create a new secure apps passcode when the user launches:

  • MobileIron Go
  • Secure Apps Manager
  • any AppConnect app

No data relating to AppConnect apps is removed when the AppConnect container is unlocked. Once the device user creates a new secure apps passcode, the data becomes accessible again.

Issuing the AppConnect unlock command is useful in the following scenarios:

  • You do not allow self-service AppConnect passcode recovery, and the device user has forgotten their secure apps passcode.
  • The device user has exceeded the maximum number of failed attempts for the secure apps passcode.
  • MobileIron Cloud deployments: "Unlocking a Device," "Unlocking Android devices," Unlocking AppConnect for Android app," in the MobileIron Cloud Administrator Guide

Retire impact

Retiring a device unregisters the device from MobileIron Cloud.

Retiring a device impacts AppConnect apps as follows:

  • The device user cannot open any AppConnect app or the Secure Apps Manager.
  • Data that the AppConnect apps saved to device storage is deleted.
  • In MobileIron Cloud deployments, the AppConnect container is removed from the device.

However, device users must manually uninstall the AppConnect apps and the Secure Apps Manager. On Samsung KNOX devices, Secure Apps Manager is uninstalled automatically.

Retiring a device, therefore, retires the AppConnect apps on the device.

  • MobileIron Cloud deployments: "Retiring a device" in the MobileIron Cloud Administrator Guide