Showing results for 
Show  only  | Search instead for 
Did you mean: 

MobileIron Configuration Flow for Android

Before you begin please follow steps below to deploy the Identity Certificates and Trusted Certificates.

To get Android devices configured and working with MobileIron the MobileIron instance must be registered with Google EMM services and this is documented in the MobileIron help section Setting up Android enterprise.  Once this is complete please follow the steps below to configure the Android VPN Client.

How to configure Mobile Iron

To do this select Configurations on the Mobile Iron top menu bar as shown:

Screen Shot 2019-06-15 at 5.43.11 PM.png

Then proceed to edit or add the below configurations.

Android enterprise (Android for Work) Configuration

Screen Shot 2019-06-15 at 5.45.59 PM.pngScreen Shot 2019-06-15 at 5.46.29 PM.png

The key point is to make sure it is enabled and ensure that it applies to devices in all spaces.

Managed Device with Work Profile Configuration

This is required for Android 8+ devices

Screen Shot 2019-06-15 at 5.53.43 PM.pngScreen Shot 2019-06-15 at 5.53.56 PM.png

Ensure that it is enabled and set to distribute to desired device classes (Shown here as all devices but it can actually be a custom list)

Android enterprise: Work Managed Device (Android for Work) Type:  Work Managed Devices (Device Owner)

Enable this to test Work Managed Devices (this is what Supervised mode is called on Android.)

Screen Shot 2019-06-15 at 6.05.30 PM.png

Screen Shot 2019-06-15 at 6.05.42 PM.png

Ensure that it is enabled and set to distribute to desired device classes (Shown here as all devices but it can actually be a custom list)

Setting Default App Runtime Permissions

(Unclear if as of this writing this is needed and if it can help w/ auto configuring the identity certificate in the VPN Profile.)

Screen Shot 2019-06-15 at 5.50.04 PM.pngScreen Shot 2019-06-15 at 5.50.17 PM.png

Configure the App Catalog to include the McAfee Mobile Cloud Protection Client

Navigate to the Application Catalog by clicking on Apps in the top bar and then select Add to add the application. Change the dropdown for source to Google Play and search for the client as shown.

Screen Shot 2019-06-15 at 6.10.29 PM.png

The test version of the app should be found by typing in the package ID com.mcafee.mcpmobile.test as shown.

In production search by the App name which will be "McAfee Mobile Cloud Protection"


Screen Shot 2019-06-15 at 6.12.02 PM.png

Choose one or more categories and optionally enter a description. The description can be used to ensure you are seeing the version you intended on the device.


Screen Shot 2019-06-15 at 6.12.11 PM.png

Ensure the App is delegated to all spaces.


Screen Shot 2019-06-15 at 6.12.32 PM.png

Ensure the distribution is set to everyone or your target set of users by defining a custom distribution


Screen Shot 2019-06-15 at 6.12.53 PM.png

Click on the + button next to Managed Configurations for Android.

Screen Shot 2019-06-15 at 6.15.18 PM.png

Enter McAfee Web Gateway Address - (Get this information from MVision Cloud -> Certificate Page


Enter a name for the configuration and set the Gateway Address, User Certificate, Remote ID and Local ID as required.


Screen Shot 2019-06-15 at 6.14.40 PM.png

To set the user certificate first click on the Icon next to the value shown above. This will change the control to a drop down list. You can then change the value to the configuration name of the Identity certificate you would have defined earlier.


Screen Shot 2019-06-15 at 6.15.18 PM.png


Click on "Install Application configuration settings and ensure that "Install on Device" is turned on. You can also use the optional silent install for KNOX and Zebra devices if you are using those.


Screen Shot 2019-06-15 at 6.15.47 PM.png

Optionally you can click on "Gogle Play Release" and set the desired release track, Production, Alpha or Beta - Leave this alone for most purposes.

Note that it takes MobileIron a few minutes to reflect the newly added app and it will eventually appear on the App catalog screen. It may take a few hours for the app to appear on the devices.

Configure Always On VPN

Must be done after the App has been added to the App Catalog.

Navigate to Configurations on the mobile iron top bar. Click Add and then choose Always On VPN

Screen Shot 2019-06-15 at 6.35.38 PM.png

Choose the McAfee App by typing into the name field and then ensure distribution is set right and that the configuration is enabled.

Screen Shot 2019-06-15 at 6.37.41 PM.pngScreen Shot 2019-06-15 at 6.37.53 PM.png


Configuration on the device

  1. Install the Mobile Iron GO app
  2. Enter user credentials as provided by the administrator
  3. The McAfee Mobile Cloud Protection client will show up in a while and be configured and the profile will be visible on the main screen.
  4. If Always On was configured it will immediately connect and show connected status.


Version history
Revision #:
7 of 7
Last update:
‎10-17-2019 01:33 PM
Updated by:

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community