Hi Experts,
One of our customer has the below question:
There's a new parameter in the mobility policy on Skype for Business called
- EncryptAppData ($True/$False) along with GET/NEW/SET-Csmobilitypolicy.
It's nowhere mentioned in Technet but if you run the command it gives an option to choose this parameter. There is no documentation which details what
this parameter does.
https://docs.microsoft.com/en-us/intune/deploy-use/configure-and-deploy-mobile-application-management-policies-in-the-microsoft-intune-console
Referred the below information on the above article but quite not clear on how the policy parameter relates to inTune/MAM though?
===============================================================
| Encrypt app data |
This setting specifies that all data associated with this app will be encrypted. This includes data stored externally, such as in SD cards.
Encryption for iOS
For apps that are associated with an Intune mobile application management policy, data is encrypted at rest through device-level encryption that the OS provides. This is enabled through a device PIN policy that the IT admin sets. When a PIN is required, the
data will be encrypted according to the settings in the mobile application management policy. As stated in Apple documentation,
the modules that iOS uses are FIPS 140-2 certified.
Encryption for Android
For apps that are associated with an Intune mobile application management policy, Microsoft provides encryption. Data is encrypted synchronously during file I/O operations. Content on the device storage will always be encrypted. The encryption method
is FIPS 140-2 compliant for Samsung KNOX devices only. |
===============================================================
Any pointers about what this parameter does and
how the policy parameter relates to inTune/MAM though?
Many thanks !!
