Android 2.2: Ready For Enterprise?Android 2.2: Ready For Enterprise?

Android 2.2 Froyo arrived with much fanfare on May 20 at Google's I/O conference. The new platform software for smartphones is chock full of new features, such as tethering and Wi-Fi hotspot services, faster performance, and Flash 10.1. To add enterprise features, Google licensed Microsoft's ActiveSync technology.

Enterprise Features

When it comes to new enterprise features, the official list for Android 2.2 is relatively short.

First, Android now has a device policy manager. Google says the new device policy management APIs allow developers to write "device administrator" applications that can control security features of the device. Users can select the administrators that are enabled on their devices.

Second, Android 2.2 includes much better password support and improved security. Exchange administrators can enforce password policies, which now include numeric pin or alpha-numeric password options to unlock the device. Remote wipe is the other big one. Exchange administrators can remotely reset the device to factory defaults to secure data in case the device is lost or stolen.

Third, Android 2.2 has better feature support for end users. For example, Exchange Calendars are now supported, which syncs enterprise calendar data with the devices. The auto-discovery tool lets people simply enter their username and password to set up and sync an Exchange account (available for Exchange 2007 and higher).

Android 2.2 also adds global address lists. This means users can search through their corporate directory from within the handset's e-mail application, which includes the auto-complete function of recipient names.

Prior to Android 2.2, some vendors (such as HTC) had offered a handful of these features in third-party e-mail programs. Now, the entire Android community has access to the same enterprise features.

It's "At Least Usable"

Gartner has two minimum requirements for any mobile platform for it to meet enterprise acceptance: the ability to remotely wipe the device and the ability to set complex passwords.

"It appears from what they've announced that Android 2.2 is ready for the enterprise," said Ken Dulaney, VP of mobile computing with Gartner. "We typically take a deep look to make sure there are no surprises hiding under a stone anywhere, but Android now meets the requirements through Exchange ActiveSync. That's what sealed the deal."

There are still enterprise features lacking from the platform. Android 2.2 doesn't offer device encryption or encryption on the microSD card, for example. "This is not a deal breaker with our clients," said Gartner's Dulaney. "In fact, some of our clients like that it is not there. Google could have added certificate management to help with this, but 80% of our customers are happy with the two policy changes that Google made."

When asked just how strong enterprise interest in Google's Android platform is, Dulaney noted that on a global basis Nokia's Symbian, Apple's iPhone, and Google's Android are the most requested. Notably absent? Microsoft's Windows Phone software. "There's no enterprise interest in Windows Mobile or webOS on a global scale," noted Dulaney.

Gartner cautions that Android 2.1 and lower are not recommended for the enterprise. The security policies don't extend to older versions of Android. Gartner expects that some liberal organizations might move forward with Android 2.2 pilots, but believes conservative organizations such as the federal government and financial sector will stay away from it for the time being.

Altimeter Group's Michael Gartenberg isn't as sold as Gartner is. "Google is still pretty new to this game," Gartenberg contends. "As much as they'd like to think they are seniors or veterans, they are still the new guys on the block. Businesses have a different set of requirements than consumers do. Exchange has not been a priority in Google's universe because its customers were using Google Apps. It's taken time for Google to realize that Exchange is important and needs to be supported natively. Google finally got some corporate religion."

Gartenberg points out that the the encryption issue is perhaps bigger than Gartner thinks. "No ability to encrypt the microSD card means anyone who finds the phone can get into the memory card and easily access files and attachments. That makes things problematic." This makes it a harder sell for some enterprises, to be sure, which might be used to more control over the individual parts or features of smartphones.

In the end, Gartenberg said of Android 2.2, "It is at least usable in a corporate setting, but there still a lot of hurdles to get past IT in terms of security and encryption." Apple, Microsoft, and RIM have much better security options.

Ovum's Jan Dawson said that both employees and IT departments will see improvements in Froyo and that employees will push harder to use Android devices in the enterprise. He sees some problems though. "HTML e-mail still doesn't seem to work ideally for many users, so there's some work still to be done to make the Exchange integration ideal, and most enterprise applications haven't yet been ported to the Android platform."

Security is Dawson's bigger issue. "The Exchange security features they've added... don't deal with the issue of users installing rogue or unapproved apps which could compromise data and security. Having said that, it's now not that far behind the iPhone in terms of security, but it's quite a way behind the Windows Mobile platform and way behind the BlackBerry platform, which is still the gold standard for enterprise security," he said.

Current Analysis' Avi Greengart agrees. "I can say that enterprise acceptance has been an area where Android has lagged the competition. With each new version of Android and OS X, Google and Apple are dotting the 'i's' and crossing the 't's' in 'enterprise.' Microsoft actually went in the other direction and took its enterprise-ready mobile OS and threw it away in favor of a more consumer-friendly rewrite."

Controlling The Droid

What is IT to do if employees bring Android handsets into the enterprise without permission? IT admins will need to use third-party software such as Good Technology or Sybase's Afaria to manage Android and other devices.

"We're aware of user-centric devices coming into the enterprise," said Mark Jordan, senior product manager of Afaria. "The model of the enterprise doling out handsets is changing. iPhones and Android are coming to the enterprise, whether IT likes it or not."

Sybase recently announced enterprise support for Android it its Afaria product. Afaria will let IT support the ActiveSync manager in Android 2.2, and do things such as block Android handsets from accessing corporate e-mail.

"What we've put into this first version is Android management through ActiveSync. There are varying capabilities on different devices, but we offer remote kill, password configuration, and enforcement and the ability to block access or gate off the e-mail if the devices don't comply," noted Jordan.

Sybase's initial steps for Android 2.2 are centered around security. As Android itself matures, Sybase will add support for more enterprise features.

Sybase said these changes in its core enterprise device management product were necessary. "Right now, our customers are asking for Android support. We're seeing people playing with it, so it must be part of Sybase's strategy. Even though Android hasn't been widely adopted by the enterprise, we're seeing that trend change." Afaria already supports iPhone, Windows Mobile, and Symbian. It lets IT control policies and manage updates for all enterprise-wide devices from a central console.

Sybase isn't the only Android management game in town. A company called Tangoe recently announced what could be termed "mild" enterprise support for Android.

Version 5.0 of Tangoe's mobile device management software supports devices running Android 2.0 and higher. Its on-device client collects data from the handset and lets IT manage a number of features, such as carrier plans. This means enterprises can control voice, SMS, and data usage to manage costs.

Tangoe's goal is specifically to help companies control telecom expenses, and it falls short of providing the deeper security support that Sybase does.

The Bottom Line

Ovum's Dawson summed up the situation nicely: "Enterprises have to figure out the correct balance between letting users have the device they want and identify with, and applying the appropriate security to user devices. In many respects, users and IT departments are in conflict, and that's not a tension that will be resolved anytime soon."

The take-away here is that Google's Android 2.2 Froyo will work as an enterprise platform. The base level security features of complex passwords and remote wipe can be enforced and managed. If those are the only hurdles preventing your enterprise from joining the Android army, feel free to enlist today.

If more advanced security support is necessary, proceed with caution. The big shortcoming of Android 2.2 is that encryption (of the device, its files, or the microSD card) is not supported. Complex passwords or not, without microSD-level encryption, lost devices can still spill company secrets.

For Further Reading:

First Impressions Of Android 2.2 Froyo

Android 2.2 Coming To Most HTC Phones

Android 2.2 To Add Tethering, Wi-Fi Hotspot