With the VMware end-user computing management changes in the news last week, it’s time to take a look at where VMware is on the enterprise mobility management mobile front.
AppDetective wrote a blog post titled Despite hiring Sumit Dhawan and Bob Schultz from Citrix, VMware has no choice but to make a mobile acquisition very soon, and concludes that MobileIron is the prime candidate for this.
AppDetective mentioned that VMware’s EMM offerings aren’t that good, and subsequently there was some confusion about this in the comments. I want to add my two cents by taking a closer look at VMware’s offerings, what individual components they’re missing, and why they’re important.
What they have
We’ve gone over the background of VMware’s mobile efforts a few times in the past. (It feels like I write this same article about every six months...) The short version of the story is that despite releasing several assorted mobile products (we’ll go over them in a second), VMware is still trailing far behind Citrix and many other vendors when it comes to enterprise mobility management. (Read here for more details about 2013, and here for more about 2012.)
So what do they have now? Here’s the list:
Horizon Workspace apps for iOS and Android - These apps allow users to access web apps, remote desktops, and files through Horizon Data, VMware’s mobile file syncing product.
Horizon Mobile Virtualization Platform for Android - This is their OS-enabled dual-persona solution for Android that came out last May. Like other specialized Android products, it’s limit to just certain devices, though VMware has done a good job of getting carriers and OEMs to provide support (including over-the-air updates for devices already out in the wild, which is really cool). The one downside is that Horizon Mobile Android devices can only be managed via the Horizon platform. This is different from the approach of other specialized Android offerings (such as Samsung SAFE and KNOX-enabled devices) that make management APIs available to multiple EMM vendors.
VMware Horizon Mail for Android - This app is presumably for Android devices that don’t support the virtualization platform. VMware doesn't have an iOS email apps, but there are a lot of companies out there that use the built-in app for iOS and a third-party app for Android, so this makes sense for now.
(Unreleased) MAM for iOS using the iOS 7 MDM protocol - VMware announced an app wrapping product back in 2012, but then when iOS 7 came along, they scrapped it and decided to just use the MAM functionality that now comes with iOS MDM.
What they need
So what do they need to really address the enterprise mobility management needs for Android and iOS (Not to mention Windows Phone, Windows 8.1, Mac OS X, etc...) and come up to par with other vendors?
More third-party MAM - I define third-party MAM as management features that are built directly into apps, so that apps can be secured without worrying about the underlying device. Examples of third-party MAM include app wrapping, SDKs, productivity apps like email and file syncing, or partner ISVs that produce apps that have hooks for MAM products.
For Android, VMware will naturally be pushing the mobile virtualization platform, but remember that not all devices support it and it won’t be the right tool in all situations. Some cases will just call for third-party MAM. The Horizon Workspace and email apps are a start, and probably adequate for many use cases today. But if they want get closer to the cutting edge of EMM, VMware will need to get into more advance third-party MAM for Android.
Then there’s iOS. The MAM features that come with iOS 7 MDM are great, but there are plenty of situations where you want to leave the device alone and not use MDM. All VMware has for this right now is Horizon Workspace, so again, they’ll have to take a closer look at third-party MAM techniques, especially an email client.
Real MDM for iOS and Android - Some of the comments argued that MDM is a relic of the past, but the reality is that if you want to manage any random app (not just the specialized ones mentioned above) using OS-enabled MAM, or if you want use a device’s built-in email client, you need MDM.
Since VMware is already working on MAM for iOS 7 using the Apple MDM protocol, they should in theory be all set here for managing iPhones and iPads. But for Android, they’ll need to have something that can manage devices that don’t support mobile virtualization. Since they already have the technology to manage Android VMs, in theory it shouldn’t be too difficult. But in practice, going beyond the basics to support advanced manufacturer-specific management APIs will take more work.
Conclusion: So should they buy someone?
You can see that compared to the likes of Citrix, MobileIron, AirWatch, and others, VMware is only just barely beginning to be able to cover a small slice of potential use cases. For a few basic use cases, their products could be adequate (that is, once their iOS product comes out). But remember that as AppDetective mentioned, VMware has talked a lot about their commitment to EUC. If they’re serious about EUC and mobile, than covering just a few use cases won’t cut it. (And I didn’t even get into things like Windows Phone management, Mac OS X management, and other more peripheral parts of EMM.)
AppDetective already provided a lot insight about the idea of VMware acquiring MobileIron or other vendors or simply working out some partnerships. I don’t have much to add, but I’ll mention that if VMware did buy MobileIron, that would be a big threat to the remaining independent EMM vendors like AirWatch.