Use the following steps to create a configuration profile for the AirWatch Inbox:

  1. Navigate to Devices > Profiles & Resources > Profiles > Add > Add Profile > Android.
  2. Configure the profile's General settings.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  3. Select the Exchange ActiveSync payload and select AirWatch Inbox from the Mail Client drop-down.
  4. Configure the payload settings:

    Setting Description
    Account Name Enter the name of the Exchange ActiveSync account.
    Exchange ActiveSync Host Enter the public host name for the server.
    Ignore SSL Errors Enable to allow the device to ignore Secure Socket Layer certificate errors for agent processes.
    Use SSL Send all communications through Secure Socket Layer.
    Use S/MIME Store user's S/MIME certificate to be used with S/MIME enabled profiles.
    Login Information

    Use look-up values which pull directly from the user account record.

    The profile supports lookup fields for inserting enrollment user’s information and login information. See Username and Password for more information.


    Use look-up values which pull directly from the user account record.

    Email Address

    Use look-up values which pull directly from the user account record.

    Password Enter the password that will be provided to users to log in to the email account.Leave this field empty to prompt the user to create their own password.
    Identity Certificate Select from the drop-down menu to provide credentials for cert-based authentication after the certificate is added to the Credentials payload.
    Email Settings
    Past Days of Mail Specify the number of past days of mail to sync.
    Sync Interval Determine how often data is synced to devices.
    Past Days of Calendar to Sync Specify the number of past days of calender items to sync.
    Email Signature Predetermine the email signature information.
    Contacts and Calendars
    Contacts Application

    Syncs the native calendar and contact applications with AirWatch Inbox

    AirWatch Contacts and Calendar applications are add-ons to the AirWatch Inbox. These applications are downloaded as a single app from the play store. Unlike Native Contacts/Calendars application, AirWatch Contacts/Calendars application encrypts the contacts and calendar data.

    Additionally, AirWatch Inbox allows you to export individual contacts or in bulk from the corporate contact to the AirWatch Contacts app by enabling the Allow Single Contact Export and Allow Bulk Contacts Export options.

    Allow Single Contact Export Allows the export of individual contacts.
    Allow Bulk Contacts Export Allows the export of bulk contacts.
    Calendar Application Specify to use the AirWatch Calendar or the Native calendar to the device.
    Require Passcode Enable so that an end-user has to enter a passcode when the AirWatch Inbox is opened. This is not the email account password, but the passcode the user enters to access the application.
    Allow SSO to Override Passcode Enable the SSO passcode over the application passcode set in this profile.
    Authentication Type

    Select the authentication type to be used with the enterprise applications.

    Select Active Directory Password to use active directory credentials to login or select passcode.

    Passcode Complexity Determine whether the password is simple or complex.
    Minimum Passcode Length Set the minimum number of characters allowed for the passcode.
    Maximum Passcode Age

    Limit the number of days allowed before passcode has to be reset.

    Passcode History Determine the history of passcodes used to prevent the user from reusing passcodes.
    Auto-Lock Set the number of minutes before the device automatically locks.
    Auto Lock When Device Locks

    Lock the Inbox application immediately when the device is locked.

    Maximum Number of Failed Attempts

    Determine the number of passcode entry attempts allowed before the data in AirWatch Inbox are erased.

    Restrict Copy and Paste

    Allows users to only copy and paste items the selected within the inbox.

    Allow Attachments

    Prevents users from adding attachments to email and also prevents viewing incoming attachments in the email.

    Maximum Attachment Size (MB) Specify the maximum attachment size.

    Restricts which application attachments can be opened into

    Whitelist applications that will be allowed to open attachments.

    AirWatch recommends using this setting instead of the SEG policy to encrypt attachments where the use case allows for increased SEG performance.

    Disable Screenshots Restrict users from taking screenshots in the app
    Restrict Domains Restrict domains by creating either a blacklist or whitelist of domain names
    Open all links in VMware Browser

    Allow opening of links only through the VMware Browser

    AirWatch recommends using this setting instead of the SEG policy to transform hyperlinks where the use case allows for increased SEG performance.

  5. Select Save & Publish.

Username and Password

You can define the user name that is assigned for users to log in to the AirWatch Inbox. The user name can be their actual email address or an email user name that is different from their actual email address. When configuring the Exchange ActiveSync (EAS) payload in the AirWatch Inbox profile settings, there is a User text box under Login Information that you can set to a predefined lookup value.

If you have email user names that are different than user email addresses, you can use the {EmailUserName} text box, which corresponds to the email user names imported during directory service integration. Even if your user user names are the same as their email addresses, use the {EmailUserName} text box, because it uses email addresses imported through the directory service integration.