Skip to Content Skip to Search
Duke Health Mobile Device Manager

How To Enroll

These instructions are best viewed in a desktop or laptop web browser. This lets you view the instructions on one screen while following the instructions on the device you're enrolling.

 

4 Quick Things to Know Before you Start:

  • Back up any personal data, especially on Android SD cards, before you start. There is a small chance of data loss during device encryption, and Duke is not responsible for any data loss that occurs as a result of enrolling your phone.
  • You will be required to set a PIN / unlock code for your device as part of enrollment. If you or someone else enters your PIN / passcode incorrectly 10 times, your device will be completely and fully wiped back to factory-new settings. This is to safeguard Duke and personal data should your device get lost and no longer be under your control.
  • You'll be asked to acknowledge that AirWatch is capable of doing a number of things with your device, however, Duke’s implementation of AirWatch will only make use of a very small number of those capabilities to keep its data safe. More details on what AirWatch is capable of versus what capabilities Duke will use is available upon request from the DHTS Service Desk.
  • For now, this service is for Apple iOS and Google Android devices. Windows Phone has been declared end-of-life by Microsoft and will not be supported. Please do not enroll Windows or Mac laptops or desktop computers at this time.

 

Apple

Note: to enroll, your device must be running iOS 8.4.1 or later, including iOS 9, 10, and 11. Older versions may appear to work if enrolled, but those devices will be enterprise wiped and unenrolled automatically after enrollment.

1.     Delete any Duke Office365 Outlook configuration.
               iOS 9: Settings >> Mail, Contacts, Calendars >> Exchange ActiveSync
               iOS 10: In Settings >> Mail >> Accounts >> Exchange ActiveSync 
               iOS 11: Settings >> Accounts & Passwords >> Exchange ActiveSync
        Note that "Exchange ActiveSync" may be named differently on your device. Scroll down and Delete Account. Yes, this will clear your mail and calendar, but we’ll be putting it back shortly. If you skip this step, you may have mail set up twice, and receive 2 copies of every mail and meeting notification.

2.     Open a browser on your mobile device and navigate to awagent.com. If the AirWatch Agent app is installed on your device, you will be redirected to it. If not, you will be redirected to Apple's app store to download it. Install it, and open it when it finishes installing.

3.     Pick QR Code when offered an authentication method and scan this
          
or alternatively, authenticate via Email Address and use yournetid@duke.edu.

4.     Log in with your NetID credentials at the Shibboleth login screen.

5.     Pick Employee Owned if you purchased your device, or  Corporate Dedicated if it is a Duke purchased device that only you use, and tap Next. Do not use Corporate Shared unless directed to by DHTS.

6.     Read and Accept the Terms of Use. Those Terms of Use and applicable policies are available on the Duke ISO website.

7.     Tap Redirect & Enable to enable device management.

8.     When prompted to Install Profile, tap Install.

9.     Enter your device PIN when prompted, and tap Install when prompted.

10.   On the Warning screen, tap Install. (For more details about what Duke can and does monitor, and how we use that information, check out this KB article.)

11.   Tap Trust on the Remote Management popup.

12.   Tap Done on the Profile Installed screen.

13.   Tap Open when asked to Open this page in Agent?

14.   Tap Done on the Configure - Operation Complete screen.

15.   Tap Allow when prompted about sending you notifications. We will only send you very occasional messages targeted at you about your device.

16.   To complete mail configuration, go open Apple’s native mail app. This will start your mail and calendars getting synchronized.

17.   Go to Settings >> Wifi, and if you have clubs wifi configured, forget its configuration. Your device should connect to the aces network automatically.

18.   Be sure to install any offered applications, particularly the Tunnel app. Tunnel is required for Haiku / Canto and some Duke web site access.


Enrollment is complete! Check out this Now that my device is enrolled KB article to learn about all the new features and new options available.

 

 

 

Android


NoteThese instructions have been extensively tested, but due to the differences in different vendors’ Android implementation and differences between Android versions, you setup may vary slightly from the steps as published. These instructions assume you know basic settings on your device, or have someone available who does, in case you have questions. Some steps may be automatically skipped if your device is already compliant - eg. lock PIN or device encryption. Steps 15, 16, and 17, are the most likely.

Also note: And this can’t be stressed enough, make sure you have pictures and other irreplaceable data on your device backed up elsewhere, as data loss can occur, especially during SD card encryption. Enabling full device encryption shouldn’t cause any data loss, but no technology is infallible, and Duke in not reponsible for personal data loss.

Finally note: To enroll, your device must be running Android 5.0 or later. Older versions may appear to work if enrolled, but those devices will be enterprise wiped and unenrolled automatically after enrollment.

1.    Delete any Duke Office365 ActiveSync mail configurations from your device. You can skip this step if you're using the Outlook or Nine apps. Yes, this will clear your mail and calendar, but we’ll be putting it back shortly. If you skip this step, you may have mail set up twice, and receive 2 copies of every mail and meeting notification.

2.     Open a browser on your mobile device and navigate to awagent.com. If the AirWatch Agent app is installed on your device, you will be redirected to it. If not, you will be redirected to Google's Play Store to download it. You may need to log in to the Play Store to install, depending on your device configuration. Install the Agent app, and open it when it finishes installing.

3.     Pick QR Code when offered an authentication method, and scan this:
 
or alternatively, authenticate via Email Address and use yournetid@duke.edu.

4.     Log in with your NetID credentials at the Shibboleth login screen.

5.     Pick Employee Owned if you purchased your device, or Corporate Dedicated if it is a Duke purchased device that only you use, and tap Next. Do not use Corporate Shared unless directed to by DHTS.

6.     Read and Accept the Terms of Use. Those Terms of Use and applicable policies are available on the Duke ISO website.

7.     At Part 2: Secure, tap Continue.

8.     Read the Grant Permissions text, then Continue

9.     Activate at the Activate Phone Administrator? screen. This step is necessary to make sure that AirWatch can monitor encryption, help you set a PIN, and other policies that’ll help keep Duke’s data secure on your device.

10.   Allow non-Play store apps? Continue, and check the Unknown Sources checkbox on the next screen, and Okay at the popup. This will allow Duke to install private Duke apps to your device. Click the Android back button to return to the Setup process.

11.   Install Enterprise Software - Continue.

12.   Depending on your device, you’ll likely be prompted to install a vendor-specific extension for AirWatch. Samsung, HTC, LG, and other vendors each have their own version. Next > Next > Install completed this step on our model device, but your exact steps may vary here, based on your manufacturer and OS version.

13.   Allow Google to regularly check for security problems - Accept.

14.   (Samsung only) Check the checkbox and Confirm to accept the license agreement for the Samsung vendor-specific module. While we don’t use Knox, there’s no way to make it past that point without accepting it. Other vendors may have a similar acceptance here.

15.   Secure - follow steps to set a device password if you don’t already have a compliant one. It has to be a minimum of 6 digits or letters – but only for enrollment and encryption. You can change it to a 4 digit numeric PIN after enrollment and excryption is complete. Swipe patterns are not acceptable from a password complexity standpoint, but fingerprint unlock is allowed as long as you have a PIN / passcode set as well.

16.   Secure - follow steps to enable device encryption if it’s not already enabled. This will likely require you phone to be charged above 80%, as it may take most of an hour to complete, It may also require a reboot as part of the encryption process.

17.   If you had to reboot to complete #16 - device encryption, find and launch the Agent app. Setup will resume where you left off.

18.   Part 3: Configure - Continue

19.   Set up your email - Continue. This step and the next only apply to Samsung, Sony, and newer LG and HTC devices. For others, including Outlook app, see the Now that my device is enrolled link at the end of the instruction steps for email options.

20.   Enter your NetID password - possibly twice - to set up mail. Note that you may be prompted to accept another set of security policies the first time you launch mail. This is because both ActiveSync and AirWatch policies currently apply, even though they’re largely the same policies.

21.   Tap Play Store when offered to have an application installed. Install the offered applications, particularly the Tunnel app. Tunnel is required for Haiku / Canto and some Duke web site access. If you're not prompted to install these, see step 23.

22.  You’re almost done! Click Exit to complete the enrollment.

23. If you weren't prompted to install Tunnel and VMware Browser, go to Agent >> Manged Apps and tap on Tunnel and Browser in the list to go through the instlal for each.

24.   Go to wifi in your device Settings. If you have clubs wifi configured, forget its configuration. Your device should connect to the aces network automatically.


Enrollment is complete! Check out this Now that my device is enrolled KB article to learn about all the new features and new options available.

 

Other useful links:

  • Duke Health's Mobile Device Policies
  • Mobile Device Manager Privacy Q&A
  • After you've enrolled - There's good information for all new users. Owners of Google, Moto, Blu, and other Android devices that didn't get mail configured in step 19 should read this for mail options. 

 

Please contact the DHTS Service Desk at 919-684-2243 or via the Self Service Portal if you have any questions.

Regards,
Duke Health Mobile Device Manager Team