Supported Features by Client OS: Revised: August 13, 2014

Supported Features by Client OS
Version 7.0.0
Revised: August 13, 2014
Each operating system has features and limitations that differentiate it from the other operating
systems. Depending on the devices operating system and native API, some of the MobileIron features are available and some are not.
Below is information about the features available for each supported operating system:
Common feature set on page 1

Android on page 3
BlackBerry 10 on page 4
iOS on page 5
Mac OS X on page 6
Windows Phone 7 on page 6
Windows Phone 8 on page 7
Windows Phone 8.1 on page 7
Windows RT/Pro on page 8
Windows 8.1 RT/Pro on page 8
Supported platforms on page 8
Common feature set

This table lists features across Android, iOS, Mac OS X, Windows Phone 7, Windows Phone 8, Windows Phone 8.1, and Windows 8.1 RT/Pro devices.
All features in this table are common to both Android and iOS devices. If a feature is available on
only iOS or Android, but not on both, it will not be listed in this table. Other operating systems are
included in this table to provide quick access to information about the availability of features in
comparison with Android and iOS.
See the remaining sections for the full feature set of each operating system.
Provisioning
Android
iOSa
BlackBerry 10
OS Xa
WP7
WP8
WP8.1
Win RT/
Pro
Win 8.1
RT/Pro
Per Device
yes
yes
yes
yes
yes
Bulk
User Self-Service
(By Invitation)
yes
yes
yes
yes
yes
yes
yes
yes
yes
yesx
Android
iOSa
BlackBerry 10
OS Xa
WP7
WP8
WP8.1
Win RT/
Pro
Win 8.1
RT/Pro
Device Inventory
yes
yes
yes
yes
yes
yes
Device Details
yes
yes
yes
yes
yes
yes
Ownership Status
yes
yes
yes
yes
yes
yes
Designate Lost Device

Designate Found
Device
yes
yes
yes
yes
yes
yes
Retire Device
yes
yes
yes
yes
yes
yes
partial
yes
yes
Asset Management
Send Message
yes
yes
partial
Force Check-In
yes
yes
yes
Reprovision Client
yes
yes
Sync Policy
yes
yes
partial
partial
Group Actions (Labels) yes
yes
yes
yes
yes
yes
Android
iOSa
BlackBerry 10
OS Xa
WP7
WP8
WP8.1
Win RT/
Pro
Win 8.1
RT/Pro
Lock
yes
yes
yes
yes
yes
Unlock
yes
yes
yes
yes
yesc
yes
yes
yesc
yesd
Security
Wipe yesb
d
Selective Wipe yes
yes
Company Confidential
2
yes
yes
Certificate
Distribution yesi
Encryption Policy
(Internal Storage) yesg,i
Encryption Policy
(SD Card) yesi
Password Policy
yes
Lockdown Policy
yes
yes
yesf, v
yesf, v
yesw
yest
yesh
yesh
yesy
N/A
yes
yesc
yes
yesc
yes
yes
yesc
yes
yes
yes
yes
yes
Privacy Policy
Block Registration
by OS
partialm
partialm
partialm
yes
yes
yes
yes
yes
yes
Locate
Email Attachment
Control
yes
yes
yesn
yesn
partialk,n
partialn
Android
iOSa
BlackBerry 10
OS Xa
WP7
WP8
WP8.1
Win RT/
Pro
Win 8.1
RT/Pro
Device Inventory
yes
yes
yes
yes
yes
yes
yes
Device Details
yes
yes
yes
yes
yes
yes
yes
yes
Allow / Block
yes
yes
yes
yes
yes
yes
yes
yes
Wipe yes
Sentry Access Control
yes
yes
yes
yes
yes
yes
yes
Register
yes
yes
yes
yes
yes
ActiveSync Policy
yes
yes
yes
yes
yes
yes
yes
yes
Android
iOSa
BlackBerry 10
OS Xa
WP7
WP8
WP8.1
Win RT/
Pro
Win 8.1
RT/Pro
yes
yes
yes
yesq
yesq
yes
yes
yes
yes
yes
Compliance Actions
Alert via Event

Center
Block ActiveSync via
Sentry
Quarantine
yes
yes
Block AppConnect Apps
yes
yes
Block App Tunnels
yes
yes
Wipe AppConnect Apps
yes
yes
Remove Configurations
yes
yes
Android
iOSa
BlackBerry 10
OS Xa
WP7
WP8
WP8.1
Win RT/
Pro
Win 8.1
RT/Pro
Enterprise App
Storefront
yes
yes
yes
yes
yes
App Distribution Library
yes
yes
yes
yes
yes
App Control Policy
yes
yes
yes
App Inventory
yes
yes
yes
yesu
yesu
Install
yesi
yes
yes
yes
yes
App Tunneling
yes
yes
Android
iOSa
BlackBerry 10
OS Xa
WP7
WP8
WP8.1
Win RT/
Pro
Win 8.1
RT/Pro
yes
App Management
Content Management
Content Server Access yes

Secure Web Browsing
Application Settings
Exchange
yes
yes
Android
iOSa
BlackBerry 10
OS Xa
WP7
WP8
WP8.1
Win RT/
Pro
Win 8.1
RT/Pro
yesi,p
yes
partials
yes
yes
yes
yes
yesz
yes
VPN
yes
yes
Wi-Fi
yes
yes
Alerting
yes
yes
OS X
WP7
WP8
WP8.1
Win RT/
Pro
Win 8.1
RT/Pro
BlackBerry 10
OS Xa
WP7
WP8
WP8.1
Win RT/
Pro
Win 8.1
RT/Pro
WP8
WP8.1
Win RT/
Pro
Win 8.1
RT/Pro
Android
iOS
International
Roaming
yes
yes
Event Center
partial
partial
Android
iOSa
yes
yes
Android
iOSa
BlackBerry 10
OS Xa
WP7
yes
yes
yes
Troubleshooting
Email Client Logs

MyPhone@Work Portal
Register
BlackBerry 10
3
Lock
yes
yes
Wipe yes
yes
yes
yes
Find It
yes
a Requires an APNS certificate for MDM (provided by Apple).

b Includes SD cards for most devices.
c Through MobileIron Sentry and ActiveSync.
d For Android, iOS, and WP8 devices, selective wipe of email is done through security compliance actions, removing the device from the
associated label, or retiring the device. For Win 8.1 RT/Pro devices, retiring the device from MobileIron Core removes the VPN settings, and partially removes the Security policies.
e Supported for Ciscos AnyConnect, Juniper JunOS Pulse, and Samsung KNOX IPsec VPN on Android.
f Only root certificates are supported.
g Supported for Android 3.0 and higher.
h Cannot be disabled.
i Specific versions of Android, SAFE APIs, or Mobile@Work are required for some features. See the detailed documentation.
j Through iOS Restriction settings.
k One or more significant parts of this feature are not supported. See the detailed documentation for this feature.
l SD cards only.
m Device location and app inventory collection can be disabled on iOS and Android devices. App inventory collection can be disabled on
OS X. SMS can be disabled for Android.
n Through Docs@Work.
p Through integration with selected devices and email apps.
q Via email only.
r Push notifications are not supported; therefore, initial sync is supported at registration only, and subsequent changes are not recognized.
s Only contacts are supported for OS X 10.7 and 10.8. For 10.9 Mavericks, contacts, mail, notes, reminders, and calendar are supported.
t Via iOS Data Protection.
u In-house and third-party apps only.
v Identity certificates can be distributed via Mobile@Work.
w Only for Wi-Fi settings.
x User registers the device using the native MDM client. An invitation is not sent to the user.
y MobileIron Core only reports the device posture, whether the device is encrypted or not. Encryption policy settings are not enforced.
Device encryption is enabled by default on Windows 8.1 RT devices.
z For Windows 8.1 Pro and RT devices, only PPTP, Juniper SSL, F5 SSL, and SonicWALL Mobile Connect VPN types are supported.
Android
Bold text indicates that the feature is available on Android and not available on iOS.
Security
Asset Management
Application Management
Lock
Device Inventory
Enterprise App Storefront
Unlock
Device Details
Ownership Status
App Control Policy
Selective Wipe (Email)
On-Device Inventory
Certificate Distribution
Designate Found Device
Install
Encryption Policy (Internal Stor-
Retire Device
Uninstall
Send Message
Silent Install/Uninstalllg
Force Check-In
Content Server Access
Reprovision Client
AppConnect Wrapper
Wipe
age)
b,c
Encryption Policy (SD Card)

Password Policy
Lockdown
Policyb,c,d
Privacy Policy (partial)e

Block Registration by OS
Sync Policy
Group Actions (Labels)
Extended Lockdown Policyd
Locate
Email attachment controlf
App Tunneling
Content Management
4
Device Inventory
Secure Web Browsing
Exchanged
Device Details
Wi-Fi
Allow / Block
VPNh
Wipe
Kioskd
Register
ActiveSync Policy
Provisioning
Compliance Actions
Alerting
Per Device
Alert via Event Center
International Roaming
Bulk
Block ActiveSync via Sentry
Event Centeri
User Self-Service (By Invitation)
Quarantine
Troubleshooting
MyPhone@Work Portal
Email Client Logs
Register
Lock
Wipe
Find It
a Includes SD cards for most devices.

b Supported for devices on which the Samsung SAFE APIs are present.
c Supported on Android 3.0 and higher.
d Specific versions of Android, SAFE APIs, or Mobile@Work are required for some features. See the detailed documentation.
e Only Location, SMS, and Apps privacy settings currently apply.
f Through Docs@Work.
g Starting with Mobile@Work 5.1, supports silent install and uninstall on Samsung SAFE devices running Android 2.2 or later.
h Supported for Cisco AnyConnect, Juniper JunOS Pulse, and Samsung KNOX IPsec VPN.
i One or more significant parts of this feature are not supported. See the detailed documentation for this feature.
BlackBerry 10
Security
Device Inventory
Password Policy
Encryption Policy
Device Details
Allow / Block
Selective Wipe (Email)a
ActiveSync Policy
a Via MobileIron Sentry and ActiveSync.
5
iOS
Bold text indicates that the feature is available on iOS and not available on Android.
Security
Asset Management
Lock
Device Inventory
Unlock
Device Details
Wipe
Ownership Status
App Control Policy
Selective Wipea
On-Device Inventory
Install
Encryption Policy (Internal
Retire Device
Uninstall
Storage)g
Send Message
AppConnect Wrapper
Password Policy
Force Check-In
AppConnect SDK
Lockdown
Policyb
Privacy Policy (partial)c

Reprovision Client
Sync Policy
Locate
Email Attachment Controld
App Tunneling
Content Management
Device Inventory
Secure Web Browsing
Exchange
Device Details
Wi-Fi
Allow / Block
VPN
Wipe
Register
ActiveSync Policy
Compliance Actions
Provisioning
Alerting
Alert via Event Center
Per Device
International Roaming
Quarantine
Bulk
Service Quality Monitoringe
User Self-Service (By Invitation)
Event Centerf

Troubleshooting
Email Client Logs
MyPhone@Work Portal
Register
Wipe
Lock
Find It
a Selective wipe of email through security compliance actions, removing the device from the associated label, or retiring the device; the
Selective Wipe command is not supported.
b Via iOS Restrictions settings.
c Only Location and Apps privacy settings currently apply.
d Through Docs@Work.
e Speed-test and user-reported dropped calls only.
f One or more significant parts of this feature are not supported. See the detailed documentation for this feature.
g Via iOS Data Protection.
6
Mac OS X
Security
Asset Management
Lock
Device Inventory
On-Device Inventory
Unlock
Device Details
Wipe
Ownership Status
Password Policy
Privacy Policy
Retire Device
Force Check-In

Exchangeb
Wi-Fi
VPN
Provisioning
Per Device
Bulk
a Only apps privacy settings apply.

b Only contacts are synchronized.
Windows Phone 7
Security
Wipea
Device Inventory
Password Policya
Device Details
Email Attachment Control
Allow / Block
Wipe
ActiveSync Policy

b Through Docs@Work. One or more significant parts of this feature are not supported. See the detailed documentation for this feature.
7
Windows Phone 8
Security
Asset Management
Wipe
Device Inventory
Device Details
Ownership Status
Install
Retire Device
Silent App Update (In-house apps)
Selective Wipe (Email)f

b

Storage)
App Inventory (In-house/thirdparty apps)
Sync Policy
Password Policy
d
Lockdown Policy
Provisioning
Device Inventory
Per Device
Exchange
Device Details
Bulk
Allow / Block
User Self-Service
(By Invitation)
Wipe
Register
ActiveSync Policy
Compliance Actions
Alert via Event
MyPhone@Work Portal
Wipe
Centere
b Identity certificates can be distributed via Mobile@Work.

c Enabled by default; cannot be disabled.
d SD card only.
e Push notifications are not supported; therefore, initial sync is supported at registration only, and subsequent changes are not recognized.
f Selective wipe of email through security compliance actions, removing the device from the associated label, or retiring the device; the
Windows Phone 8.1

Security
Asset Management
Lock
Device Inventory
Device Details
Ownership Status
Install
Retire Device
Silent App Update (In-house

apps)
Wipe
Selective Wipe (Email)
Certificate Distributionb
Sync Policy
Storage)c
Password Policy
App Inventory (In-house/thirdparty apps)

App Control
Lockdown Policy
Provisioning
Device Inventory
Per Device
Exchange
Device Details
Bulk
Allow / Block
User Self-Service
Wi-Fi
(By Invitation)
VPN
Wipe
Register
ActiveSync Policy
Compliance Actions
Alert via Event Centere

a Selective wipe of email through security compliance actions, removing the device from the associated label, or retiring the device; the
b Identity certificates can be distributed via Mobile@Work.
c Enabled by default; cannot be disabled.
8
d Initial sync is supported at registration only, and subsequent changes are not recognized.
e Only out of contact and out of policy violations are supported. Alerts are only sent by email.
Windows RT/Pro
Security
Wipe
Device Inventory
Device Details
Password Policya
Email Attachment Control
Allow / Block
Wipe
ActiveSync Policy

b Through Docs@Work. One or more significant parts of this feature are not supported. See the detailed documentation for this feature.
Windows 8.1 RT/Pro

Security
Asset Management
Device Inventory
Enterprise App Storefrontd
Device Details
Storage)c
Ownership Status
App Distribution Librarye
Password Policyi
Retire Device
Device Details
Install
Force Check-In
Provisioning
User Self-Service
g
Allow / Block
Wi-Fih
VPNj
Wipe
Register
ActiveSync Policy
b Only for Wi-Fi.

c Enabled by default; cannot be disabled for Win 8.1 RT devices.
d Only the United States Windows app store is supported.
e Only recommended apps are supported.
g Device registration by the administrator is not supported. Users register their device.
h Only WPA2 Personal and WPA2 Enterprise are supported.
i. Grace period for Device Lock is not supported. Password policies are not applied to LDAP accounts. They are only partially supported
for MSA accounts.
j Only PPTP, Juniper SSL, F5 SSL, and SonicWALL Mobile Connect VPN types are supported.
Supported platforms
The following platforms are supported:
Android 2.3 through 4.4

BlackBerry 10
iOS versions 5.0 through 7.1 (4.x for web-based registrations)
OS X Lion, Mountain Lion
Windows Phone 7, 8, 8.1
Windows RT/Pro
Windows 8.1 RT/Pro
9
Supported OS X devices
Note: Mac Mini models are not included in the following list. There are no known issues that would
prevent use of the Mac Mini, but this model is currently not covered by the MobileIron product
warranty.
Model ID
Model Name
MacBook7,1
MacBook (13-inch, Mid 2010)
MacBook6,1
MacBook (13-inch, Late 2009)
MacBook5,2
MacBook (13-inch, Early/Mid 2009)
MacBook5,1
MacBook4,1
MacBook (13-inch, Early/Late 2008)
MacBook3,1
MacBook2,1
MacBook (13-inch, Late 2006/Mid 2007)
MacBookAir5,2
MacBook Air (13-inch, Mid 2012)
MacBookAir5,1
MacBookAir4,2
MacBookAir4,1
MacBookAir3,2
MacBook Air (13-inch, Late 2010)
MacBookAir3,1
MacBook Air (11-inch, Late 2010)
MacBookAir2,1
MacBook Air (13-inch, Late 2008/Mid 2009)
MacBookAir1,1
MacBook Air (13-inch, Early 2008)
MacBookPro10,2
MacBook Pro (13-inch, Retina, Late 2012)
MacBookPro10,1
MacBook Pro (15-inch, Retina, Mid 2012)
MacBookPro9,2
MacBook Pro (13-inch, Mid 2012)
MacBookPro9,1
MacBookPro8,3
MacBook Pro (17-inch, Early/Late 2011)
MacBookPro8,2
MacBookPro8,1
MacBookPro7,1
MacBookPro6,2
MacBookPro6,1
MacBookPro5,5
MacBookPro5,4
MacBookPro5,3
MacBookPro5,2
MacBook Pro (17-inch, Early/Mid 2009)
MacBookPro5,1
MacBook Pro (15-inch, Late 2008)
MacBookPro4,1
MacBook Pro (15/17-inch, Early/Late 2008)
MacBookPro3,1
MacBook Pro (15/17-inch, Mid/Late 2007)
MacBookPro2,2
MacBookPro2,1
10

Supported Features by Client OS: Revised: August 13, 2014

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Supported Features by Client OS: Revised: August 13, 2014

Uploaded by

Copyright:

Available Formats

Supported Features by Client OS

Common feature set on page 1

Common feature set

Designate Lost Device

Group Actions (Labels) yes

Selective Wipe yes

Sentry Access Control

Alert via Event

Block AppConnect Apps

Block App Tunnels

Wipe AppConnect Apps

App Distribution Library

App Control Policy

Content Server Access yes

Email Client Logs

a Requires an APNS certificate for MDM (provided by Apple).

Enterprise App Storefront

App Distribution Library

App Control Policy

Selective Wipe (Email)

Designate Lost Device

Designate Found Device

Encryption Policy (Internal Stor-

Content Server Access

Encryption Policy (SD Card)

Privacy Policy (partial)e

Secure Web Browsing

Content Server Access

Alert via Event Center

Block ActiveSync via Sentry

User Self-Service (By Invitation)

Email Client Logs

a Includes SD cards for most devices.

Sentry Access Control

a Via MobileIron Sentry and ActiveSync.

Enterprise App Storefront

App Distribution Library

App Control Policy

Designate Lost Device

Designate Found Device

Encryption Policy (Internal

Privacy Policy (partial)c

Secure Web Browsing

Content Server Access

Alert via Event Center

Service Quality Monitoringe

Block ActiveSync via Sentry

User Self-Service (By Invitation)

Block AppConnect Apps

Email Client Logs

Designate Lost Device

Designate Found Device

Group Actions (Labels)

a Only apps privacy settings apply.

Sentry Access Control

Email Attachment Control

a Via MobileIron Sentry and ActiveSync.

Enterprise App Storefront

App Distribution Library

Silent App Update (In-house apps)

Selective Wipe (Email)f

Encryption Policy (Internal

App Inventory (In-house/thirdparty apps)