MobileIron Tunnel installation on devices

The MobileIron Tunnel app is installed automatically on Android devices if the following conditions are true:

  • The app configuration has the Silently Install option selected.
  • The app is applied to a label that includes the Android devices.

If the Silently Install option is not selected, users can choose to install the app from the MobileIron app catalog on the device.

The following section proved some screen captures of what users see when they install Tunnel:

Accept Tunnel connection (Android native and enterprise only)

The first time that Tunnel attempts to set up a VPN connection, device users are prompted to accept the Tunnel VPN connection. Device users must tap OK to continue using Tunnel.

Figure 1. Accept Tunnel connection

Allow certificate (Android native and enterprise only)

During the installation, users are prompted to accept a certificate. The certificate is preselected.

IMPORTANT: Do not change the certificate selection.

Figure 2. Allow certificate

Select the certificate and tap Select to install the certificate on the device and continue with the installation. Tunnel uses this certificate to authenticate the device to Standalone Sentry.

For Android enterprise devices, if Always On VPN (in Android enterprise configuration on the UEM) and AutoBackgroundLaunch (Tunnel for Android enterprise configuration on the UEM) are enabled, user interaction is not needed to accept the Tunnel certificate.

Tunnel VPN connection

The key icon on Android native and Android enterprise devices, or the lock icon on Samsung Knox devices, indicates that the Tunnel VPN configuration has been pushed and verified without any errors, and the VPN session has been established. This does not indicate if Tunnel is connected or not. The location and the icon can vary depending on the device and Android version.

The state of the Tunnel session after it is initiated remains as Started. With a MobileIron Access deployment, the connection status changes from Connected to Waiting periodically if there is no Access traffic going through Tunnel.

Figure 3. Tunnel VPN connection state and icons

Tunnel notifications icon

If Tunnel notifications is enabled, users see the following icon if there are any notifications. On Android O through the latest version as supported by MobileIron, the ability to configure notifications in the Tunnel app is not available. On these devices, configure notification in Android Settings.

Figure 4. Tunnel notifications icon

The icon is not visible if there are no notifications.