Avalanche powered by Wavelink

This page refers to an older version of the product.
View the current version of the User Guide.

App Wrapping

Avalanche allows you to apply security policies to applications as part of mobile application management. When an app is wrapped, Avalanche creates a dynamic library and adds existing code to control specific aspects of the original application, such as inactivity timeouts, storage encryption, secure tunneling without a VPN, and data loss prevention. Rather than wrapping all apps on a device, Avalanche enables you to pick the applications you want to make secure, ensuring corporate data is kept secure, while more personal apps remain unaffected.

To perform app wrapping, you'll need the following resources:

•The app file in .apk format for Android or .ipa format for iOS. For iOS apps, you must also have an Enterprise Signing Certificate and Enterprise Provisioning Profile, which are available only to users with Apple Enterprise Developer accounts.

•In order to use the app wrapping functionality with LANDESK Fuse, you must have LANDESK Service Desk 7.7.3+.

•To use secure communication with wrapped apps, you need LANDESK Management Suite 9.6+.

•For users to selectively download and install apps, you need the latest versions of LD Portal or LANDESK Fuse apps for iOS or Android.

During the app wrapping process, Avalanche associates the application file with an SSL certificate to ensure secure communication and management between Avalanche and the app. The encryption key created when wrapping an app is stored on Avalanche and not at the device level. With Android devices, this certificate is created and applied to the device automatically as part of the process. With iOS devices, you need an Enterprise Signing Certificate and Enterprise Provisioning Profile to create a wrapped app.

App wrapping increases the security of apps on a device, and any wrapped apps are granted additional protective measures over non-wrapped apps. When an app is hosted and wrapped through Avalanche through a Software payload, you can control how the app is handled on devices by using the App Wrapping Settings payload. This allows you to restrict copying and pasting, require encrypted communication, prevent launches on compromised devices, and more.

If you have apps hosted on and wrapped by Avalanche, you can access and install them on individual devices using the LD Portal or LANDESK Fuse apps. With LD Portal, users are presented with a list of wrapped apps they can selectively download and install. Fuse provides users with an alternative portal that they can access to selectively download and install applications approved by their employer. Both of these interfaces give company administrators greater control over specific apps you want to remain secure, but without taking away your employee's ability to choose what apps they want to install.

To utilize app wrapping:

1.Create a Software payload to host your app file. Through the Software payload, Avalanche adds existing code to your app for granting additional security and control over corporate resources, essentially associating the original app file with an SSL certificate for seure communication and management. For more information, see Software Payload (Android/iOS/Windows Phone).

2.Set up wrapped app authentication intervals. To ensure user access to wrapped app isn't indefinite, you can alter General System Settings to force user authentication at regular intervals regardless of activity levels. For more information, see Configuring General System Settings.

3.Create an App Wrapping Settings payload with additional configurations. This optional payload adds further security measures to your wrapped apps, allowing you to prevent their use on compromised devices or restricting copying and pasting to and from the app. For more information, see App Wrapping Settings Payload (Android/iOS).

4.Enable the LANDESK CSA/SOCKS Service for secure communication. If you select the Require Secure Communication option in the App Wrapping Settings payload, you must enable the CSA/SOCKS service to facilitate this security measure. For more information, see Enabling LANDESK CSA/SOCKS Service.

5.Integrate Avalanche with LANDESK Fuse for selective app installs. If Avalanche is integrated with LANDESK Fuse, you can use the app to create a centralized catalog of wrapped apps available for download that users can select and install to Smart devices. For more information, see LANDESK Fuse.