Basic security mechanisms
We are using the Apple iPad Air with Citrix XenMobile installed. The Apple iPad Air can be set up to allow Tropical Cruises to run only one application on the device, which will be the Citrix XenMobile application. Employees will have a Citrix account that can be created and managed for them. We can set the permissions of each user and decide which application each employee can use out of the Citrix Receiver App Store. For example, the engineering team will not have access to the same applications as the reservations team. All employees will have iPads on them at all times and have email accounts set up. This will allow for sending mass emails and quickly contacting all employees who need to be contacted. What makes the Citrix XenMobile application a preferred application is that only one application is on the device, but all applications in the Citrix Receiver App Store and all the data and documents used within each application are stored in the Citrix Cloud. Data is never stored on any of the devices directly. This flexibility, allows us to permit employees to take iPads off the ship and if they lose the device or it gets stolen, we can simply wipe the data off of the device, without having to have the actual device in our possession. This relieves the pressures of having to worry about an employee setting down an iPad in an unauthorized or unsafe area. The way the IT support team and employees will interact with the iPad is very simple. First the IT support team will take an Apple iPad air and install the XenMobile application on it. We then create a Citrix account for each employee. With the XenMobile application we are required to register the application to each employee, thus only allowing the registered employee to log into that particular iPad. In the case if an employee departs or is terminated from the company we can expunge the employees Citrix account and unregister the XenMobile application. Once the account is expunged, we can then reassign the application and iPad to another employee. Only one employee can be registered per XenMobile application at a time. In order to log into the iPad the employee has to use their Citrix user name and password along with a seven-digit pin the employee has registered as their XenMobile pin. Again, the pin is specific to that device and employee, increasing the security of the device and information even more. As Far as the types of applications that the employees will need, the Citrix Receiver application comes complete. Citrix leverages all windows applications including outlook for mail, and Lync mobile for quick instant messaging between employees. Also, all the files and data that the employees save within all the applications are stored in the cloud and associated with each specific user, allowing you the level of security to always have control. Ultimately, Apple’s iPad is the device we will be hosting the Citrix XenMobile application on.

On the other hand, with the iPad air we will have the ability to create configuration profiles. A configuration profile is an XML file that allows you to distribute configuration information. If you need to configure a large number of devices or to provide a large amount of custom email settings, network settings, or certificates to a large number of devices, configuration profiles are an easy way to do it. Within the configuration profile we can grant certain access rights based on, Wi-Fi settings, VPN settings, email server settings, exchange settings, LDAP, directory service settings, CalDAV calendar service settings, web clips, credentials and keys. Configuration profiles can be deployed easily to the devices in a handful of ways. Our options include, using apple configurator, sending a link via an email message, hosting the link on a webpage, using the apple Over-the-Air Profile, or using delivery and configuration using a Mobile Device Management server, in which we have acquired with Citrix MDM solutions.
Aside from the passcode lock that is on the XenMobile application, the iPads will also have passcode lock as well obligating employees will have to log in twice to get into their data. The passcode lock protects the iPad with the ability to set a complex multi-digit passcode. In addition, a feature called auto lock, will lock the device after it has been left unlocked for a certain amount of time and we can also set up the device so that after Ten failed login attempts, the device will be completely wiped of all data and information.
Furthermore, Allowing each device a secured way to access data remotely helps ensure that when the device is: lost, broken, stolen or so on, there will be no loss of data because its all kept remotely. Not only would the data be safe when the device is lost but also if we regain possession of the device as well. All iPads come with a location services that will allow us to find a lost device. If it becomes unlikely that we will be able to regain possession of the device(s), we can wipe the device of all data remotely. We will also have the ability to install custom software onto the iPad to increase password encryption strength.