The AirWatch App Wrapping engine adds Workspace ONE SDK functionality to wrapped apps when you deploy them with the Workspace ONE UEM console.

For details on how to upload an internal app to the Workspace ONE UEM console, access Deploy Internal Applications as a Local File.

For details on assigning apps to devices with the Workspace ONE UEM console, access Add Assignments and Exclusions to your Applications.

See Supported Settings and Policies Options for App Wrapping to see what Workspace ONE SDK features are supported for use in wrapped apps.

Procedure

  1. Turn on AirWatch App Wrapping.

    SaaS deployments do not configure this option because it is already configured.

    The AirWatch App Wrapping engine communicates with your network server in your on-premises environment to deploy Workspace ONE SDK functionality to wrapped apps.

    1. Navigate to Groups & Settings > All Settings > System > Advanced > Site URLs.
    2. Select Enable App Wrapping in the app wrapping section.
    3. Complete the entry for your platform.
      • iOS App Wrapping Service URL – Enter the URL for the Workspace ONE UEM SaaS-Hosted App Wrapping Server for iOS, https://appwrap04.awmdm.com.
      • Android App Wrapping Service URL – Enter the URL for theWorkspace ONE UEM SaaS-Hosted App Wrapping Server for Android, https://appwrapandroid.awmdm.com.
  2. Turn on Cloud Services for increased security for app wrapping communications with the use of HMAC authentication.
    Disable Cloud Services to troubleshoot app wrapping issues, but this action reduces security because it bypasses HMAC authentication.
    1. Navigate to Groups & Settings > All Settings > Admin > Cloud Services.
    2. Select App Wrapping Secure Communication Enabled.
      If the application fails to wrap, you can disable the check box and try to wrap again. However, clearing the check box bypasses the HMAC token authentication check, making this option less secure.

      Check the Auto Discovery AirWatch Id entry in the AirWatch ID section (on the same page as the Cloud Services section). This ID is your Workspace ONE UEM credentials and provides a secure connection with the Workspace ONE UEM Cloud.

  3. Configure a profile to add Workspace ONE UEM functionality to your app with the Workspace ONE SDK framework.
    1. Navigate to Groups & Settings > All Settings > Apps > Settings and Policies > Profiles.
    2. Select Add Profile and choose App Wrapping Profile and the applicable platform.
    3. Configure General settings and then complete the settings for the desired features (payloads).
      You select this profile on the App Wrapping tab when you upload and deploy the app.
  4. In the Workspace ONE UEM console, select the applicable organization group and upload your app and assign the correct profile to wrap it.
    1. Go to Apps & Books > Native > Internal > Add Application to add your app to the console.
    2. On the App Wrapping tab, select Enable App Wrapping.
    3. For App Wrapping Profile, select the AirWatch App Wrapping profile you created earlier.
    4. Select Save & Assign to move to the app assignment process.
  5. For iOS (Swift) apps, you can use Send Logs from within the app. You must configure the Restrictions and Application Configuration tabs in the Assginment wizard.
    1. Add an assignment or edit one for the app.
    2. On the Application Configuration tab, comple the following entries.
      Option Description
      Managed Access Enable
      Send Configuration > Add
      • Configuration Key - EnableSendLogsOnFatalError
      • Value Type - Boolean
      • Configuration Value - True
      Boolean
    3. Deploy the assignment to devices in the selected organization group.