1. IBM Endpoint Manager for Mobile Devices Mobile Device Management

2. Executive Summary
Android and iOS devices have quickly penetrated the enterprise, bringing productivity gains, along with increased risk and cost
IBM Endpoint Manager for Mobile Devices delivers strong MDM capabilities in an infrastructure that enables unified management of all enterprise devices – desktops, laptops, servers, smartphones, and tablets
IBM is uniquely positioned to deliver end-to-end app and mobile device lifecycle management with Mobile Application Development Platform (MADP), Mobile Device Management (MDM), and Telecom Expense Management capabilities

3. Android and iOS accounted for 79% of all smartphone shipments
Share of global Q smartphone sales to end users, by OS
Source: Gartner 2012; does not include media tablets

4. Traditional Mgmt Model New Device Mgmt Paradigm
Mobile devices magnify existing challenges and also pose unique ones that significantly disrupt traditional management paradigms
Traditional Mgmt Model
New Device Mgmt Paradigm
Enterprises provide all equipment
Employees bring personal devices (BYOD)
Small set of supported platforms / models
Many different manufacturers / models
IT initiates and manages upgrades
OS/app upgrades managed by carriers, OEMs, users
IT tightly controls apps and security
Users control their own devices
Options for IT departments
Don’t allow mobile devices because they are too hard to manage
Allow unmanaged and insecure mobile devices
Invest in tools to secure and manage devices

5. IBM is uniquely positioned to deliver end-to-end app and mobile device lifecycle management
Extend & Transform
Build & Connect
Key Capabilities
Strategy, planning and implementation
Mobile-enabled solutions including analytics, commerce, and social business
Mobile as a service
Key Capabilities
Mobile web, hybrid and native app development
Enterprise data, service, and application integration
Enterprise wireless networking
MAIN POINT: Each of these initiative has a some key capabilities that must be delivered. IBM has both the products and expertise to help you address these capabilities needs.
SPEAKER NOTES:
Each of these initiative has a some key capabilities that must be delivered. Within Extend & Transform you must be able to incorporate mobile effectively from the strategy to the plan to the implementation. You need to determine and deliver the right mobile solutions for you and your industry. Mobile must be a service you offer – either yourself or through a partner. Within Build & Connect you have to effectively develop mobile apps and choose the type of app that best addresses your needs – whether it’s web, hybrid or native. You have to integrate enterprise data, services, applications and systems. You have to address your wireless networking capabilities to make sure the mobile connections are sound. Within Manage & Secure you must manage the entire mobile lifecycle – from the device and the app to the infrastructure. You must have appropriate controls and analytics across devices.
You have to make sure your network communications are secure and managed effectively.
IBM has both the products and expertise to help you address these capabilities needs.
BACKGROUND DETAIL:
Extend & Transform:
Strategy, planning and implementation services
Mobile-enabled solutions including analytics, commerce, and social business
Mobile as a service
Pre-built analytics, commerce, and social business apps
IBM Interactive user interface design services
Mobile enable legacy applications through desktop and client virtualization
GTS Services: To help you get started on your mobile journey, our Global Technology Services help you build a mobile strategy and implement it. Extending your applications and computing environment to mobile devices may not be the only strategic initiative your team is working on. We can help remove the burden of managing all aspects of mobile computing by providing all mobile activities as a service, so your team can focus on other activities.
Build & Connect:
Development and testing of mobile apps (native, hybrid, web/HTML5/Dojo/Sencha/jQuery)
Traceability and collaboration across requirements, code and testing
Tools for Mobile Software Development Lifecycle (SDLC)
Large shared codebase across multiple devices and environments
Integrated device SDKs
Runtime skinning for apps
Enhanced connections to enterprise data and apps
Integration with device capabilities
Packaging and publishing mobile apps for app stores and marketplaces
Unified push notification framework
Aggregated user statistics and event reporting for monitoring and analytics
GTS Services: Our Global Technology Services team can help you design, deploy, monitor and manage your enterprise wireless network infrastructure.
Manage & Secure:
Device analytics and control
Mobile environment analytics
Endpoint & data protection
Secure network communications & management
Mobile lifecycle management
Provisioning & configuration management
Mobile expense management
Mobile security & Access management 
Mobile security intelligence
Private app stores and Catalogs
Device inventory & policy management
Encrypted local device data storage
Physical device management services
GTS Services: Mobile Lifecycle Management. You don't only need to manage the application development lifecycle, but also the lifecycle of the physical device. We provide services to help you do that cost effectively. We provide services to help you manage your network security that includes real-time location tracking and event-driven notification services.
Manage & Secure
Key Capabilities
Mobile lifecycle management
Device analytics and control
Secure network communications & management

6. Managing Mobile Devices – The Problem
Mail / Calendar / Contacts
Access (VPN / WiFi)
Apps (app store)
Enterprise Apps
iCloud
iCloud Sync
iTunes Sync
Encryption not enforced
End User
VPN / WiFi
Corporate Network Access
Security & Management Challenges
Potential unauthorized access (lost, stolen)
Disabled encryption
Insecure devices connecting to network
Corporate data leakage

7. Managing Mobile Devices – The Solution
iCloud
iCloud Sync
iTunes Sync
End User
VPN / WiFi
Corporate Network Access
Personal Mail / Calendar
Personal Apps
Corporate Profile
Enterprise Mail / Calendar
Enterprise Access (VPN/WiFi)
Enterprise Apps (App store or Custom)
Secured by BigFix policy
Encryption Enabled
Endpoint Manager for Mobile Devices
Enable password policies
Enable device encryption
Force encrypted backup
Disable iCloud sync
Access to corporate , apps, VPN, WiFi contingent on policy compliance!
Selectively wipe corporate data if employee leaves company
Fully wipe if lost or stolen

8. PCs and mobile devices have many of the same management needs
Traditional Endpoint Management
Mobile Device Management
OS provisioning
Patching
Power Mgmt
Device inventory
Security policy mgmt
Application mgmt
Device config (VPN/ /Wifi)
Encryption mgmt
Roaming device support
Integration with internal systems
Scalable/Secure solution
Easy-to-deploy
Multiple OS support
Consolidated infrastructure
Device Wipe
Location info
Jailbreak/Root detection
Enterprise App store
Self-service portal

9. …and more capabilities.
IBM Endpoint Manager delivers a unified systems and security management solution for all enterprise devices
Windows & Mac Desktops/Laptops
Unix / Linux Servers
Windows Mobile / Kiosks / POS devices
Android / iOS / Symbian / Windows Phone devices
Supporting more devices…
…and more capabilities.
Device Inventory
Endpoint Protection
S/W Use Analysis
Patch Mgmt
Power Mgmt
Security Config Mgmt
Mobile Device Mgmt
Configuration Mgmt
Remote Control
OS Deployment

10. Reduces Hardware & Administration Costs
Benefits of an Endpoint Manager based Approach to Mobile Device Management
“Organizations…would prefer to use the same tools across PCs, tablets and smartphones, because it's increasingly the same people who support those device types”
– Gartner, PCCLM Magic Quadrant, January 2011
Although at some level mobile is unique, the devices are just another form of endpoints in your infrastructure. This means whichever technologies you procure should have a road map for integration into your broader endpoint protection strategy.
– Forrester, Market Overview: Mobile Security, Q4, 2011
Reduces Hardware & Administration Costs
“Single pane” for mobile devices, laptops, desktops, and servers
Single Endpoint Manager Server scales to 250,000+ devices
Unified infrastructure/administration model reduces FTE requirements
Fast Time-to-Value
Enterprise-grade APIs enable integration with service desks, CMDBs, etc (Integrated Service Management)
Cloud-based content delivery model allows for rapid updates with no software upgrade or installation required

11. How does Endpoint Manager manage mobile devices?
Agent-based Management
Android via native BigFix agent
iOS via Apple’s MDM APIs
-based management through Exchange and Lotus Traveler
Supported platforms: iOS, Android, Windows Phone, Windows Mobile, Symbian
Category
Endpoint Manager Capabilities
Platform Support
Apple iOS, Google Android, Nokia Symbian, Windows Phone, Windows Mobile
Management Actions
Selective wipe, full wipe, deny access, remote lock, user notification, clear passcode
End-User Services
Self-service portal, enterprise app store, authenticated enrollment (AD/LDAP)
Application Management
Application inventory, enterprise app store, whitelisting, blacklisting, Apple VPP
Policy & Security Management
Password policies, device encryption, jailbreak & root detection
Location Services
Track devices and locate on map
Enterprise Access Management
Configure , VPN, and Wi-Fi; certificate management
Expense Management
Enable/disable voice and data roaming

12. Mobile Foundation Potential Integration Scenario Deny App Access
Device is out of compliance with policy
Deny enterprise app access 1 2
Policy violation detected
On-going assessment of device compliance
Deny app access 5
Worklight
(apps)
Periodic query for device compliance status
Endpoint Manager
(devices) 3
Report compliance violation 4

13. A “Single Device View” enables administrators and helpdesk personnel to easily view device details and take required action

14. A flexible enrollment process enables organizations to include a EULA and to collect critical device and employee data via customizable questions

15. Distribute apps using the Enterprise App Store

16. A user-friendly iOS Profile Configuration Wizard exposes the configuration capabilities of Apple’s MDM APIs

17. A Self-Service Portal empowers employees to locate lost devices and perform tasks such as lock, clear passcode, and device wipe

18. iOS Jailbreak Notification

19. View installed apps on Android and iOS devices

20. IBM Endpoint Manager for Mobile Devices Architecture
TEM Server DB
Console / Web Reports
Relay(s)
Android
Apple
Apple Push Notification Servers w/
ActiveSync
Phones / Tablets
Desktops /
Laptops
Full Agents
http / 52311
ActiveSync / IBM Sync
https
Apple MDM Interaction
Apple Push Notification
Servers
Management Extender for (Exchange or Lotus)
Mgmt Extender for iOS
Apple App
Android App
Server
(Exchange/Lotus)

21. Summary of security controls to be enforced on mobile devices when Tivoli Endpoint Manager for MDM is installed 21