My name is Richard Achée, and I work with Chrome Enterprise strategic partners. For over 20 years, I have been working with organizations around the world to help them use technology to become more collaborative, creative, and innovative. In my current role at Google, I work with companies who are building solutions for Chrome in the enterprise. As part of my role, I help our partners build their future product roadmap using Google's innovation in devices, machine learning and cloud technology and define their go-to-market strategy leveraging Google's brand and ecosystem. In my 20% time, I focus on innovation in education. Since 2014, I have been leading the Google EDU Think Tank. The mission of the Google EDU Think Tank is to foster a community of early adopter Google for Education customers in K-12 to share ideas, best practices and practical lessons that they can immediately bring back to their school districts. In 2017, I created and launched Python MC (pythonmc.org), a collaboration with Code Next and Rapport Studios that uses the music and movement of hip hop to teach the core concepts of computer programming to middle school and high school students. I created Python MC as part of my work as volunteer instructor at Code Next (https://goo.gl/4hbywH). Code Next aims to create ”aha!” moments that connect computer science to students’ everyday lives.View the profile
About the talk
Google announced deprecation of certain device admin APIs in 2017 and is encouraging Android users to migrate to Android Enterpise devices. In this session, you will learn about the new Android Enterprise features available with Citrix Endpoint Management mobile application management, and how you can migrate from device admin to Android Enterprise. We'll also cover how you can start deploying Chrome OS in your environment.Note: This session will be available for on-demand viewing post-event on Citrix Synergy TV.
Write a good afternoon everybody and thank you for joining us on the breakout session for getting ready for Android and price and Chrome OS and as you guys are on the keynote, right Google and Citrix have a great partnership life spans multiple products and Technologies from Cloud to enter Enterprise to Chrome. So today I have the pleasure with me. I have our partner from Google. Where should I check who is a strategic partner manager for Chrome Enterprise? So switch it over to you does the view have been to more
than one session? I didn't recognize a few Paces. You know, what I do it every time it always works. Worst case scenario to get a bit of a stretch do some corporate yoga. arm across Mikasa can get into it. Come on. Shake it out blood flowing. Okay foot to the back of the head. That was it. I reuse the entire routine and the joke, so we'll be back all week. So I work with Citrix with Citrix for three years. I've worked a lot of Partners and one thing that differentiates Citrix in general all partners that ever work with
is Citrix there an innovator been around for a long time and Citrix deals with like pretty old Technologies like the stuff that they get into a virtual desktop some that's really old but there an innovator they've always been an innovator and say Hey Google all throughout this journey. So starting off in 2011. They launched Citrix workspace on Chrome West and cauldron. right after we launch Chrome devices and so we did lunch that receiver on Chrome right after we like we like May 20th 2011 there right with us in August 2011 with the first version on a Chrome device, which
really was the first Enterprise Anaconda Vice. They did that again with Android with tea sweetened with Google Cloud each product. That would be launched. They were really if not the first one of the first three or four Enterprise solution providers that decided to meet them integrate with our technology has consistently ahead of the curve and that's one thing that's really great for Citrix is like I know if we're going to watch a new solution there be right there with us working with RPMs giving us guidance on how this going to work for Enterprises cuz they know the space really.
Well, obviously they've been around for a long time and have 90% of the Fortune 500 companies so they know what they're doing but not working with him is I can trust that when I get in a scenario where I have been on Shreve you're familiar with this scenario. I have multiple different vendors. Me and Citrix as a Google Citrix and another partner I can guarantee if there is a something breaks. We are not going to do anything or pointing. So the concept of like one pro to choke we heard and seen before right with multiple Defenders ulcer pointing at each other as a customer goes to
these in the support Cycles with a log a ticket with the inventor of Evander seen all them clothes at the ticket and point to another vendor. It's never happened with Citrix what happens instead is regardless of how big the opportunity is. They might have no money at stake. They just have a customer that they care and the care of all their customers when I have a problem. I get right onto the p.m. Her name is Fiona cheese base in Bangalore. So no response in the same day. If not the same minute the daylight hours in Bangalore and we will get on a call with a customer need a
late show pull in all the engineers that we need like an escalation is like it's like talking to someone down the hall light and feels like we're both in the same startup. Two really big companies like in separated by half a world but that kind of accountability and reliability in customer commitment like our products when we go into a customer that every product they always want some more future and there's always something else that they want to see in the road man, but they can see it the way we work together that they can trust that we're going to get there. And if something's not working
we're going to fix it. We're going to collaborate and and be accountable and that's that. I can't say about every vendor I've ever worked with so with that kind of headed back over to tip on he's going to talk to you more about what we're doing for. Tickly with Citrix. Can Android Enterprise awesome. That was great and it goes the same base, right? I mean, even when it's Android Enterprise All Chrome OS if you have any in any challenge, you know, Google is always there to help us out and so we can service a customer's better. So that's awesome to have a great party like you so well. Let's talk
about Android Enterprise. So just with the show of hands how many if you guys have already started your migration to was enter Enterprise how many of you guys Anybody's already started when I don't advise awesome. I mean if you guys are still on da. Do I sign in Moore? Okay a few of them. So let me just you know, what is that the price is basically a funeral modern management framework for Android devices. And why is it really good? Because it has a whole bunch of apis that makes things flexible for you. Right? So when it comes to management
they offer multiple modes, you know, if you ain't for BYOD versus Canon devices from a security standpoint, you know, they have Google Play protect which you know, make sure that secure and also they give you a wide range of choice, you know, there are multiple orgasms, you know, you have the premium devices that could be managed with Enterprise and then you have on the other hand you recognize devices that also could be managed within an Enterprise. So, you know flexibility across management security and choice. Alright, so a lot of you who
are on the are, you know are going to work you have definitely this question in mind. What is happening with Android Q. So, let me just you know cover this thing up. So yes, Google has announced that starting Q some of the device. Admin 80s are going to be deprecated which means that they will not work. What when do they not work? Right. That is the main part. There are two things for this one is been secured up, which is your DTC is updated to Android qap 11 and 2 is when the device
actually running Android to So you will ask me like what is secure Hub on right now. So right now secure Hub is on a bi-level Android o we are planning to go to Android p in November and we will be thinking of going to Android Q most probably in the second half of 2020. All right, so hopefully those answers your questions on what is going to happen with Android Q. So let me cover. You know, I'm on to this thing about Android to you. So let's just look at what are the different modes that should fix support,
right? So if you look at the use case of BYOD hear you have your uses bring in their own personal devices. They want one device you want to use it for you know your carpet for stairs as well as important purposes. So this is a really good mood and what happens in this mode is you know, when you enroll into work profile a separate container is created so that way the it admins are only going to manage the word container leaving the personal side private for your own, you know for the uses for the lapse pictures or whatever. So this is something that uses feel like I know that my personal
stuff is private and nobody's managing that So we support that profile as well, which is called what profile and for the use cases where you are providing company with devices to your users. Right? In this case. We also support the fully managed where the it admin is actually managing the whole device and also a lot of our customers have reviews case where they have a kiosk right and argue no single music device, right? So we support the device to that is currently all available to you guys on Citrus and pain management. And then of course, the next question would be What
about Coke and I know Google change the names recently on that one, but now it's called fully managed device with work profile. So what what what exactly is this right to think about your work profile but on a company on device, right? So you providing a company on your bicycle users, but you were actually creating a work profile and putting those policies focus on the work profile side and also allowing your end user to have your personal application pictures of what I work on the personal side, but just in case if the device is lost or whatever you still have the ability to wipe the
device on on the fully on the Kokomo. So that's the best the difference between, you know, the different modes that Android provides currently. Alright, so now that I'm showing you, you know, the different modes. We also supports I'll show you how easy it is to set up an Enterprise that it's it's really simple. So what you do is going to control settings enable and when Enterprise will connect you to the Google Play putting your credentials selected text as your email partner and you done that's it. There's nothing else to be done. Just that simple. And once you do that,
then I'm going to show you how you can enroll and enrollment is also pretty simple process rights. Do I have as a demo that will be running while I'm talking so, you know when it comes to work profile says I said, this is you know for your users bringing in your own device. It's pretty simple. I showed you can just buying endpoint management to Google you create the profile policies and let the user download and install secure Hub, Wednesday and Thursday prudential's. That's it. You know you will see a separate container being created and now you're just managing that container in the
personal side. That means personal. So I'll let you know. So I'll just go to that you going to enter your password? again And once you do that, it's going to start creating a start during the process of creating that will profile do you select yes. I know it's going through. But it's pretty quick. I want to confirm that and you should see. low profile mean created you can see over there the back of it. That means that those are protected apps and you
see that this is in the workspace separate from your portal site. All right. So the next one is how do you enroll devices in the fully managed mode? Right. So Citrix support all the available options that the platform provides right? Whether you want to Rollie Pollie manage device using the emm token, which is afw xenmobile. You want to do it by a QR code. And if you bump or do you work. All of them are to put it back in or what I'm going to do is I'm going to show you a demo on how easy it is for the QR code say
right. So again, very simple process. You know, what you just buying cm to Google you create a QR code and send a QR code to your user right there too. If if you look at the demo, right you will see that I did not even have to enter any of my credentials right and it just went through you might notice in this over here that you know that I'll be anything to wipe out selecting Wi-Fi, but actually that is a Json snippet of a table where you can also enter your Wi-Fi societies and that will not even asked you that question of the Wi-Fi says you see
that I went through really quickly and I'm already enrolled in a man is over. Alright, so now that you've seen all the benefits of a Nano price and everything that Citrix provides, you know, it's time for thinking about if you haven't already migrated on how do I migrate and I would say Richard, you know, the Android Enterprise migration Blue Book is a pretty awesome document that goes into details and shows you, you know the step by step migration process. But you know, what I'll do with yours, I'll just go and see I'll tell you what we
recommend for you guys to do. So the first thing I would say that if you would not already done it all these modes and features are available right now or not in pain management solution. So, please go ahead and try it and as you analyze, you know, your mover migration to Enterprise Al look at your current device that features and see how they compare against and you know, that's something that you need to do to see what features you going to get with an Enterprise. Once you do that you want a different mind, what mode what management mode and what motive enrollment you want to
do, right? So let's say in this scenario that you have users getting own devices. And yes, of course you wanted to work profile because that suits best and just know this is this is actually really good is when you move from the 202 price in what profile you do not need to factory reset your device. All you need to do is re-enroll into work profile and you're done. But if you have you know Coppertone devices that you going to give it give it to you users. Then that's a platform requirement that you need to factory reset and then you can select the more that suits you best
whether it's QR code in the fire and it seems you don't touch and I just showed you how simple it is, especially with the QR code side and also important to understand is when you go through your feature sets, you know, what minimum OS version you guys want to have right side. So just take the example of the QR code that I showed you write with Android night. They invented the QR Code Reader within the OS right? So you don't have to go outside and download one and and then, you know scan the QR code that this is something that you want. Then
you'll minimum wage working would be an example to show you don't mind what I have right? And once you get all that then you are going to plan about you. Proof-of-concept and deployment and your device Tangi any new devices that you getting in based on your first cycle. And roll them or management with Android and device that makes absolute sense. But if you already have devices that are running in da don't worry, we're still supporting you one day and whenever you new devices, you can migrated Upon a Time.
Alright, so now it's talk. You know, I'm a lot of you guys have already been on internet price and you thinking about okay. What is the road Math teachers what's new coming in? So let me start with om config and Samsung not service plugin. So the question is what is William can take right leg is basically a standard is architecture that the OEM scan use to add apis on top of the end Android platform rights of the OEM definitely have more apis that they provide on top of Android and Android actually allows that follow different
Williams. So what they do is they had this app in the case of Samsung. They have the knock service plugin you push that app once that and the app is installed on the device and then you said the policies through a crucifix in pain management, is that it provides? 0 day support and what I mean by zero day support is previously what used to happen is, you know, this oem's would create is apis then they will come to us. We will Implement them and then it will be able able to you guys now, you don't have to wait for that. It's part of William config. And
all you have to do is go to your control and enable that device policy that you want the new it's just that simple so pretty good future. So with that. Let me go to the demo. So as you you know on the demo, what I'll do is first I'll go and approve the knock service plugin. This is you can go to manage Google Play and you know, the most of the apps you have to approve to manage Google Play that is a security that died in there and then on your human control you go and Republic App Store. Solar panel Enterprise on the left
and I have to go back there. I'm just going to go get the package name cuz I would need that later on. This is important just noticed this because this would be important when I show my next demo, right? So I'm just going to put in. Whatever name? Lock Service Plugin, you can choose the different app that agree that you want to put that in. And that's what I put the package name in there. And here it is. And then I'm going to sign, you know, the delivery Group, whatever you have you can assign the delivery group over here.
Music was missing so we needed that music, right? Sorry. talking about Samsung Samsung rings If you took all right, so then what you do is you add a new device policy for manage config right? When you select that you already added the app for no service plugin and you just feel like that once you do that you can give it any policy name that you want. And then if you can see that, you know and you you know, you were some of the policies you will need not spinning license key and that's what Heroes
documented on the Samsung side of what you know, what policies would need that but they have a whole bunch of all his available from device owner for work profile to even decks right and in for this demo, I've just chosen device owner policies and I'm going to select the right decisions and you can see there's a whole bunch of options available to use to set that and I'm being all the scroll it down. To show you in and I'm just going to choose Bluetooth for demo purposes. But as you can see, there's a lot of ones especially on the USB exception side.
This just shows you the amount of options that you guys have. I mean that's done. I'm going to select the delivery group and I'm done. And if you get on Ice welcome to the guys in Samsung and they said that this is one of the best solutions that have ever seen from any vendor and you can confirm that when you go there. So so the next one which is coming soon is programmatic approval. So you saw that previously when I was trying to approve the KSP app, I had to go into the manager - Play Store with this
one and this change coming in every approval is going to happen within the American Soul. There is no need for you guys to go to a separate console to go and approve any app. So that improves your admin experience. Imagine number of apps that you guys have and as you can see, this is Flac open the package name. I don't have to go anywhere this and implemented batting and ice cream with in audium in control. So this is really simple no back and forth all done. So this is follow the same process and selective delivery group and you've done.
eagle all right. So the next one is similar, but it's for MDX at and something that you guys if you already let me see you if you are if you already publishing MDX apps for Android Enterprise you realize that there's no option for Android Enterprise right now. We already added that. We are not right to enter Enterprise and even for MDX apps where you have to do. Is you go and select your index file. once you do that Going to ask you the same. You don't have to get out to approve anything within the console itself. It's going to ask you this afternoon approved. Do you want
to prove it? Say yes, I do. And once you approve it, you don't you don't have to go anywhere to do anything. And then you can set your MDX policies right there in the same page. Alexa device encryption and then you're done. That's it. pretty simple you can. awesome All right, but I'm not done that yet because we have more and more features coming in. And as you will notice with all these damn most and the features that are coming and you know, get really focusing on enter Enterprise and improving our future said, you know throughout this upcoming here
and throw the next two quarters right about cop cop is going to be coming in soon. Right? So that is something that I already spoke about as a mode which will enable you to have a company on device, but give you flexibility of having Universal and I were container Then the next one is Advanced keyguard features. So this is also something that we are bringing in soon. So for example, you want to disable and if he got features like notification, for example, you will be able to do that. So that's also coming in soon. Then I know a lot of you guys some of you
guys might have these requirements that hey, you know, what I want to have all the apps enabled. I just don't want you know, I just don't want to go to my display store and selectively of Luzon map speakers. I provide the flexibility to my uses to have all the apps. That's fine. No worries. We've been unable that so with the click of a button you will be able to enable all apps or if you don't want you can actually go and selectively approve apps. So that's not he's also going to be there and also some of you guys might want some system apps like Samsung camera or whatever that might be so
we will have this ability where you can actually go and enable certain system apps whether it's in your work profile or you're fully managed profile. So that's in addition to that is coming you again improving your admin experience and giving you the flexibility based on the, you know requirements that you have for your users. And I'm not done it yet. This is important. So what do you moving to words is having Android Enterprise as default, you know for any get a new new customers are new Every Woman's right? Why are we doing this? Because right now if you see the wavy and roll you into
an Enterprise is based on your results. If you have either a nap auto policy for the Android Enterprise back from you get an Enterprise. What we want to do here is we want to buy default enable enrollment in Android Enterprise, but I'm sure don't worry dear mode is still supported. So if you one day you will still be able to do that, but by default, we will push on Enterprise and something this is one thing where we will be sending you Communications Wayne Advance, you know how this is going to work and if you don't do your mode what is expected of you? So expect some Communications
coming out specially around this week to change. And finally Alpha Beta tracks. So a lot of you have I'm sure a lot of you guys have some of your private apps that you provide to you and users. Right and you guys want to test out certain apps for a certain set of users versus give the production one to a different set of users. So we are going to be enabling that too within the console. You can select whether it's in Alpena. We will see whether it's an alpha or beta track and then you can see like that and put it on and you send it to the delivery groups that you
want to send it to. So this is also going to be enabling you, you know, especially when you have a lot of private apps and you want to test it out within the organization to tell All right. I'm tired speaking about all those creatures that are coming in now. It's running dry. So. So far so good on and Enterprise. Yeah. All right. So let's move onto Chrome, right so you and when it comes to Chrome we support multiple Chrome OS policies right? As of today. There are a lot of policies to manage your devices. And again, it's really
simple for you to even set up Google Chrome, right? So again in the same way you go to settings in the Google Chrome and for your information up there that will take you to the Google admin page to device management walk to the process and you're done and you have you know a bunch of policies available for you to implement on your Chrome device. So with that. Richard do you want to talk about I'll just listen to the whole book face. So to put this into contacts into it actually helps you better understand why Citrix in Google are working so
closely together and have been for a long time. So how many views seen what's a PJ Halls presentation recently on Citrix workspace a few of you where we've talked about the PJ talked about the fact that work spaces now not just about four claps and I had to hear that message a few times before their leg broken for some reason. He's like that. He doesn't know longer seems his business is being really the best of dirty. They're users being for clapping virtual desktop Caesars. In fact, that's more like kind of a small Chunk in the market like
maybe 30% the user base percent that are not all in Virtual apps are going to be using SAS apps and Citrix wants to be that secure digital perimeter around all that whether it's any cat any content any device any app on any cloud? And so that's why we've been clamoring. So close together cuz across our entire portfolio Citrix has key Integrations. So in my area in Chrome OS Citrix, we we have our own August have citric workspace on Chrome West. Also Citrix endpoint management was one of the first Partners to use are apis so that you
could have a single-pane-of-glass to manage all your Chrome devices. So if you're not using Citrix endpoint management, then you're going to a different console. So you're going to Acro Management console for obvious reasons for any reasons inconvenience to productivity for the IT person. They're really want one place to go in Citrix employment. Why is that across now any device putting Chrome OS and then in terms of content where we hook him a Citrix are things like Google Drive and G Suite in General Tso be able to access all of
your apps. Are all your from all apps can access your Google Drive folders directly from Citrix workspace and then across all devices all the different Chrome four factors, of course all the different form-factors play any other form factor out there in the market for any company analytics to do is surface content inside workspace to help. Normally you would see come up in those individual apps for G Suite or work day or whatever that's starting to come to the surface. So you can
do one click with in workspace just make yourself a lot more productive productive. And endpoint Management in particular. So we expose these apis into Chrome management Citrix integrated with those apis and that creates the single point of glass for your users. So now you can therefore be much more proactive and lower that total cost of ownership some cuz you only have one place to go to manage all devices on your network until when you're pushing out policies when you're pushing out apps to your code of all that can go through Citrix endpoint management. Right. Now that was a
great update and just to wrap up, you know, there's a great partnership between subjects in Google and if I have any questions for Richard, all I do is look around and say Hey Google and I got the answer. So all right. Now I'm going to be a partnership, you know, as as we shouldn't mention, you know across different products right also that I want to take away that you guys have is we support multiple modes. And of course the cop movies coming soon that a lot of policies that are currently available to you guys.
And as you saw a lot more in the pipeline, right again a recommendation is if you round a, you know, start thinking about migrating to Enterprise and also it's just on Android but we also have multiple policies are available on Chrome OS as we just show you guys. So with that thank you very much and will open do questions. required a cube and that's actually a few that's available in Android migration Blue Book and they clearly state that that that is
Okay, that's it. And that's it has to be to you got to say hey, Google. I would have to double-check with you cuz my space is really a Chrome OS so yeah, I better double-check. Android now, like whenever you're doing I just want to respond to go to Facebook profile and I can give you like all pro property Just Flowers. So you think I can try that till you're saying that the whole Dino creation the role profiles for Android view? All those different problems would go
away. Yeah, I heard that you went right to the expectation would be that does the steps for example of death on show but wouldn't go away again. Exactly familiar. I wasn't confirming I was just checking with you not as far as I know but I would need to check on your personal side and is trying to create a work profile. So well that process is taking place that is of course, we'll have to happen and then you know, you just going on you have to send a stand user you want them to select yes creative a profile what you're saying is that
you should automatically do it without even asking it. I doubt that's going to happen. We can talk about that is it is a process? Can you actually control that based on device model or is it on the head for you? Yes, if it's under device model, then it would be based on the OEM apis that they provide Sedaris on Samsung apis that will be provided with that. But the one that I was showing is a disabled keyguard. Yes, you can say okay now you can unlock with Biometrics and you can set that up. That's a feature that we're working
on right now. Yeah. I don't want. Okay. Yes, you can disable that. So that that's the key car feature that I'm getting that has disable Biometrics and you can do that so you can only do it with a pen. For example. Or Iris or anything else for that? Mike she talking about Citrix workspace and secure Hub working two words that I mean that is again in the pipeline who have endured Enterprise enable with Citrix workspace. So that way it's just when I thought that's what you were asking about on Netflix.
So the madness Play Store is where you have to go to get your apps. Even when I don't Enterprise you don't you know, you will either push those apps because you know, you want to sound at least all them, that's fine. But if they actually want to go and see all the apps that are available to them for either the low profile side of the fully managed site. They would go to the Niners play store to get that Patterson jumping. a little harder for us because we have to pull into space app into the into the profile one size created
on a road map Yeah, and even even for you at 3, we prefer that you go through the manage play and get those at the pool. So that way you know, you saw what happened with the video that show me because that was on through the the manage Play Store. That's how you get that screen of a flu if - Play Store does not know about your afternoon. They don't want that Google actually just not one that they want them because they're done in a whole bunch of security things over their self. the question
InTune mam policies for Android Enterprise Managing Chrome through Entune not today. Right, so it's so it's basically the idea to put up houses from InTune to Chrome device that we do not support today. progression right Thank you. Because what happens is, you know, the based on the track ID that you put in there through that so that Jason we get the track ID and then we didn't mind whether it's Alpha Beta so that's it. any more questions So have you have two important sections coming up one which is happening in a few minutes. So please go ahead and attend that that's about 50 Cent
Floyd management pick up date. And right after that we have another one which is in Halsey to which is about you no endpoint management Cloud resilient and secure service, and that's this guy right there. So make sure you go. All right with that. Thank you. Thank you very much.
Buy this talk
Access to all the recordings of the event
Buy this video
With ConferenceCast.tv, you get access to our library of the world's best conference talks.