How Do You Wrap and Re-Wrap Applications with the AirWatch App Wrapping Engine

The AirWatch App Wrapping engine adds Workspace ONE SDK functionality to wrapped apps when you deploy them with the Workspace ONE UEM console.

Step One: Turn on AirWatch App Wrapping

SaaS deployments do not configure this option because it is already configured.

The AirWatch App Wrapping engine communicates with your network server in your on-premises environment to deploy Workspace ONE SDK functionality to wrapped apps.

  1. In the Workspace ONE UEM console, navigate to Groups & Settings > All Settings > System > Advanced > Site URLs.

  2. Select Enable App Wrapping in the app wrapping section.

  3. Complete the entry for your platform.

    • iOS App Wrapping Service URL – Enter the URL for the Workspace ONE UEM SaaS-Hosted App Wrapping Server for iOS,
    • Android App Wrapping Service URL – Enter the URL for theWorkspace ONE UEM SaaS-Hosted App Wrapping Server for Android,

Step Two: Turn On Cloud Services

Turn on Cloud Services for increased security for app wrapping communications with the use of HMAC authentication.

Deactivate Cloud Services to troubleshoot app wrapping issues, but this action reduces security because it bypasses HMAC authentication.

  1. In the Workspace ONE UEM console, navigate to Groups & Settings > All Settings > Admin > Cloud Services.

  2. Select App Wrapping Secure Communication Enabled. If the application fails to wrap, you can deactivate the check box and try to wrap again. However, clearing the check box bypasses the HMAC token authentication check, making this option less secure.
    Check the Auto Discovery AirWatch Id entry in the AirWatch ID section (on the same page as the Cloud Services section). This ID is your Workspace ONE UEM credentials and provides a secure connection with the Workspace ONE UEM Cloud.

Step Three: Configure an App Wrapping Profile

Configure a profile to add Workspace ONE UEM functionality to your app with the Workspace ONE SDK framework.

  1. In the Workspace ONE UEM console, navigate to Groups & Settings > All Settings > Apps > Settings and Policies > Profiles.

  2. Select Add Profile and choose App Wrapping Profile and the applicable platform.

  3. Configure General settings and then complete the settings for the desired features (payloads). You select this profile on the App Wrapping tab when you upload and deploy the app.

Step Four: Deploy Your App

Select the applicable organization group and upload your app and assign the correct profile to wrap it.

  1. In the Workspace ONE UEM console, go to Apps & Books > Native > Internal > Add Application to add your app to the console.

  2. On the App Wrapping tab, select Enable App Wrapping.

  3. For App Wrapping Profile, select the AirWatch App Wrapping profile you created earlier.

  4. Select Save & Assign to move to the app assignment process.

Step Five: Use Send Logs (iOS Only) as an Application Configuration

For iOS (Swift) apps, use Send Logs from within the app. You must configure the Restrictions and Application Configuration tabs in the Assginment wizard.

  1. In the Workspace ONE UEM console, add an assignment or edit one for the app.

  2. On the Application Configuration tab, comple the following entries.

    • Managed Access - Enable
    • Send Configuration > Add
      • Configuration Key - EnableSendLogsOnFatalError
      • Value Type - Boolean
      • Configuration Value - True
  3. Deploy the assignment to devices in the selected organization group.

Step Six: Rewrapping

Applications require re-wrapping for several reasons that include app wrapping engine updates, operating system changes, and system fixes. The console identifies wrapping issues in the console so you know to re-wrap an application.

  1. Build a new version of the app so that it has a version number that is greater than the currently deployed version in Workspace ONE UEM.

  2. Upload the rebuilt app to Workspace ONE UEM in Apps & Books > Applications > Native > Internal.

  3. Use the app wrapping tab to re-wrap the application.

Workspace ONE UEM does not push a wrapped app to devices until the wrapping engine reports wrapping success. Find the success status in the Workspace ONE UEM console at Apps & Books > Applications > Native > Internal and view the Wrap Status column.

If wrapping fails, use the Queue App For Wrapping check box on the App Wrapping tab, which only displays upon failure. The wrapping engine re-wraps the application after you select Save & Publish from the flexible deployment page. When the wrapping engine reports success, Workspace ONE UEM pushes the application to devices. This work flow prevents pushing failed wrapped applications to devices.

check-circle-line exclamation-circle-line close-line
Scroll to top icon