DoD Mobility Overview

(1)

UNCLASSIFIED

DoD Mobility Overview

Mr John Hickey

DoD Mobility Portfolio Manager

14 May 2014

(2)

HOME MOBILE (TDY/DEPLOY) WORK FUTURE DEVICES

Secure

Government

Enterprise

Services

Wireless Carriers

Standardized service plans & DoD negotiated rates

Commercial Mobile Devices

Simplified pre-approval of multiple DoD devices

DoD Enterprise Capabilities

Mobile Device Management

VoIP/

Video

Email

Txt

Msging

Calendars

DoD Mobile Application Storefront

Shared pre-approved Apps from across DoD

Mobility Networking

Mobility Gateway

Apps and devices authorized & ready to connect to DoD networks & services

New mission-specific capabilities are more agile with standard infrastructure available

Mobility End-to-End Vision

2

DoD Enterprise Benefits

- Efficient, Cost Savings

- Consistent Security

- Rapid Technology Insertion

- Shared Applications extend

capabilities to all users

Identity Management

(3)

UNCLASSIFIED

UNCLASSIFIED UNCLASSIFIED

UNCLASSIFIED

Mobility Initial Releases

DoD Enterprise Capabilities

M

DM

DoD Enterprise Mobile Application Storefront

Shared pre-approved Apps within an initial Enterprise

Store

Commercial Mobile Devices

Apple (1.0)

Samsung (2.0)

Security

Integrity checking via FIXMO (1.0) CAC Readers for S/MIME (1.0) Soft certificates for basic e-mail (2.0)

Secure mobile network connectivity via VPN (2.0)

Wireless Carriers

Major Carrier Service in CONUS (1.0) OCONUS capability (2.0)

Mobility Networking

Enterprise MAS (Apple & Android Baseline) – Jan

Additional Apps – 2.0

DEE and DCO Access

Enterprise MDM – 50K user support FY14

Tiered Support Construct

Level 2/3 via DISA

Level 1 at CC/SA

Tiered Permissions via Admin Portal (EMCC)

Release 1.0: 31 January 2014

Release 2.0: 1 May 2014

(4)

DoD Mobility Unclassified Capability (DMUC)

4

Activity Comment

Service Offering

• Devices managed by Enterprise Mobile Device Manager

• Includes access to Enterprise Mobile Application Store

• Subscribing organizations provide device and service plan

• Access to DoD Enterprise Email

• Support for Encrypting and Digitally Signing Email on Apple Devices

• Coming Soon support for PKI credentials stored on Device and Knox 2.0 with support for Encrypting and Digitally Signing Email

Devices

• Approved phones: iPhone 4S, 5, and 5S, Samsung Galaxy S4 phones

• Approved tablets: iPad 2, 3, 4

• Coming Soon: iPad Air tablet, Samsung Galaxy tablet

Deployment Date

• Began transition from pilot to service offering on 31 January 2014

• Continuing to work with current customers to transition to new Mobile Device Management

• Conducting customer engagement with new customers interested in subscribing Current Number of Devices on New Mobile

System

• 2000+ devices as of May 2014

(5)

UNCLASSIFIED

DoD Unclassified Mobility Service (DMUC) Components

Device*

• Purchased by organization

before entry into DMUC

Program.

• List of currently approved

devices and CAC readers

may be viewed at

www.disa.mil/mobility

.

• Devices must be GFE and

can be purchased through

organizational contracting

office.

Carrier Service Plan*

• Contracted by organization

before entry into DMUC

Program.

• Any carrier is acceptable.

• Carrier service plans must

be on a Government

contract and can be

coordinated through

organizational contracting

office.

Infrastructure Service

• Defense Capital Working

Fund service provided by

DISA.

• Provides for Mobile Device

Management (MDM) and

Mobile Application Store

(MAS).

• DoD App Store provides a

secure app solution, tailorable

to organizational needs.

• FY14 cost is $7.36 per month

per device.

Mission Partners procure these before subscribing…..

….to this DWCF service

through our portal.

(6)

DoD Mobility Classified Capability (DMCC)

6

Activity Comment

Service Offering

• Secure Phone Calls to DMCC phone

• DoD Enterprise Email access via Outlook Web Access (OWA)

• Support Other Email Capability for CC/S/A via OWA

Deployment Date • Pilot is ongoing, transition to Defense Working Capital Funding (DWCF) service planned for June 2014

Device Management

• Coming soon: International Roaming (31 May 2014) and automated updates over- the-air with Mobile Device Manager (31 August 2014)

(7)

UNCLASSIFIED

Pace of Mobility

MDM/MAS

Carriers

OEM

CAC Readers

Apps

DMUC Infrastructure

BAI Mobile

Precise

Biometrics

Thursby

• Rapidly evolving technology

• Reacting to release of new HW/SW

• Integration across vendor technology

• Developing Mobile Polices & Business Processes

• Meeting wide range of DoD Mission Requirements

• Government driving integration

• Early vendor cooperation

• Driving policy (new STIGs/SRGs, etc)

(8)

UNCLASSIFIED

• Security Built into Products; continued support of mobile

Security Requirements Guides (SRG), Protection Profiles and

National Information Assurance Partnership (NIAP)

Certification

• Enterprise Approach to Procure Commercial Applications

• Automated Solution for Derived Credentials on Mobile Devices

• Continued Development of Enabled Secure GOTS Mobile and Web

Applications

– Mobile Apps as a Service/Platform

(9)

UNCLASSIFIED

DMUC iOS/Android Baselines

Apple iOS

Devices

• iPhone 4, 4s & 5, 5s

• iPad 2, 3, 4 & Mini

Baseline Operating System

• iOS 7.1.1

Enabled Features

• Siri (limited use; only available

when device is unlocked)

• Apple App Store (approved

apps only)

Disabled Features

• AirDrop

• Voice dialing

iOS & Android

Android

Enabled Features

• Secure Wi-Fi

• Camera (except open Secret)

• GPS • Bluetooth • Native browser • YouTube • Contacts Disabled Features • Screen capture

• Browser auto fill

• Browser pop ups

• Personal email accounts

• Cloud Backups

Security Policy

• Password required

• 30 day inactivity limit

• 15 minute LockScreen Timeout

• Device Wipe at 10 failed attempts

• Blocks jail broken/rooted devices

• No System Files tampering

• Integrity Checking

Devices

• Samsung Galaxy SIII & SIV

w/Knox

Baseline Operating System

•

4.4 Enabled Features

• Device Encryption

Disabled Features

• Google Play

• SD Card

• Tethering (USB & Wi-Fi)

• USB

• Near Field Communication

(NFC)

(10)

DMUC Initial App Baseline

Department of Defense

App Store

Legend: P – Android Phone or Apple iPhone U – Universal App (iPhone and iPad)

*Note: iOS Apps will be deployed at most recent version,

Android at versions listed

1) Adobe Reader v10.4.2 _(U)(P)

4) Documents to Go 3.0 v3.004 (P) 5) IFastCAC 2) Slate v.1.1.3 (P)_(P) 8) Sparse RSS v1.1.3 (P)

16) Adobe Connect Mobile _(U)

18) Thursby Pkard Reader

(U) 14) Twitter (U) 17) Appian (U)

Baseline Apps*

12) Kindle 11) Flipboard _(U)

9) DOD Safe Helpline

(U) (U) v1.0 (P) 3) Pandora v4.1.2 (P) (U) 10) Facebook (U) 6) Fixmo Safezone v5.3.0.293 (P) 7) Fixmo Sentinel v1.0 (P) 13) TED (U) (U) 15) USA Today (P) (U) 19) baiMobile PCSC-Lite 10

(11)

UNCLASSIFIED

UNCLASSIFIED 11