Internal

ALLIANZ MOBILE CLIENT

KICK OFF

03 February 2022
Allianz Technology SE

© Copyright Allianz
 Internal
Allianz Mobile client

AGENDA

Allianz Mobile client

1 and its functionalities

The service
2 what’s included & run costs

Service Prerequisites
3 what’s required

Service Onboarding
4 how does it work

© Copyright Allianz 2
 Internal
END USER DEVICE TARGET LANDSCAPE

PROPOSED END USER DEVICE TARGET LANDSCAPE

BASED ON USE CASES AND USER PREFERENCES Focus today

Use Cases
Always online, mostly within
In or outside Allianz buildings, online and basic offline usage
Allianz buildings or at home

Stationary Mobile / Activity based working

End Device
Options Managed devices (COBO, COPE)1 Unmanaged devices (BYOD)2

Desk-
Laptops Tablets and smartphones
bound

Mobile Allianz Mobile Allianz Mobile Managed iOS iOS Android Chrome OS
Thin Client3 Thin Client3 Client Win10 Client Developer4 (iPhones/ iPads) (iPhones/ iPads) (phones/ tablets) (Chromebook)

Device VMWare Workspace One VMWare Workspace One

Mgmt
Mobile Device Management (MDM) Secure Container / Work Profile (optional)
Platform Dell Wyse Cloud
Management Suite3
Microsoft Intune Mobile Application Management (MAM) for Office 365 resources

© Copyright Allianz 1 COBO – corporate owned, business only | COPE – corporate owned, private enabled 3 Enhancement of current Thin Client platform with moving device management to the cloud and adding mobile version 3
2 BYOD – bring your own device (i.e. unmanaged device, company or privately owned) 4 Expanding shared Unified Endpoint Management (UEM) platform to other operating systems, e.g., MacOS for developers
 Internal

ALLIANZ MOBILE CLIENT

AND ITS FUNCTIONALITIES

© Copyright Allianz
01
 Internal

WHAT IS THE ALLIANZ MOBILE CLIENT SERVICE?

Enrol your device in less than 15
minutes and step into the new
Allianz work solution
Work on same presentation with With the new Cloud Technology, you can
colleagues, at the same time, with work offline, and everything will be
M365 Apps
Fast out of
uploaded to the Cloud the next you connect
the box
to the internet
device
enrollment
Allianz Cloud Seamless
ready with full off-/online
Office 365 working
integration experience

State of the art office laptop with

Adhering to Group security standards
touch capabilities

Centrally
managed Future proof
lightweight device
mobile client strategy

© Copyright Allianz 5
 Internal
Allianz Mobile Client and its Functionalities

ALLIANZ MOBILE CLIENT IN A NUTSHELL

 Support for modern hardware

 No dedicated image needed, use of standard
Operating System
 Regular operating system updates, keeping the
device secure and up-to-date

 Transforms standard Operating System into a

secure and managed environment according to
Allianz standards
 Device management and security through
VMWare Workspace One

 Automatic distribution of applications

 Seamless application updates
 Software provisioning process

© Copyright Allianz 6
 Internal
Allianz Mobile Client and its Functionalities

ALLIANZ MOBILE CLIENT KEY BENEFITS

Productivity

Collaboration
Allianz connect
intranet access

Communication

Allianz Virtual Client

Business Applications

© Copyright Allianz 7
 Internal

Allianz Mobile Client and its Functionalities

SEAMLESS INTEGRATION WITH EXISTING PLATFORMS

Cloud Enabled
Easy access to files, emails, collaboration and
communication tools on all your platforms.

Allianz Mobile Client

Enterprise Mobility Service

Allianz Virtual Client

8
© Copyright Allianz
 Internal
Allianz Mobile Client and its Functionalities

MODERN APPLICATIONS OFFER NEW FEATURES

Outlook
Mailing as you know it
features Email, Calendar & Contacts
Office ProPlus
The familiar office applications
OneDrive newest features included
Personal Storage
easy access over multiple devices

Webex / Jabber
Collaboration and communication
Teams features conferencing, chat and more
easily work together in one place
simultaneously, safe and seamless

© Copyright Allianz 9
 Internal

THE SERVICE
WHAT’S INCLUDED &
RUN COSTS

© Copyright Allianz
02
 Internal
Allianz Mobile Client Service Overview

AMC SERVICE BUILDING BLOCKS

Office 365
Extended
Designed to provide access
and authentication plus AMC Service
basic Office 365 capabilities
Patch- and security
management, application
lifecycle management and
EMS Base Service continuous service improvement
Mobile Device Management
for up to 5 devices
(COBO/+, BYOD/+, AMC) AMC Hardware Service
Global Hardware Service
Framework with selected providers
and modern devices and the
possibility to re-use existing
hardware

© Copyright Allianz 11
 Internal
Allianz Mobile Client Service Overview

HARDWARE SERVICE DETAILS

01
Global Hardware Service
 Flexible end device strategy with modern hardware options Hardware
can be ordered through your local Allianz Technology Branch
 Global hardware provisioning process with DELL and Lenovo
 Zero-touch deployment by the end user

02 Last option: Re-use of existing hardware

 Possibility to re-use existing hardware
 Customized AMC image necessary (development costs)
 Testing of image and updates needs to be done on OE-side
 See service prerequisites for hardware requirements and recommendations

© Copyright Allianz 12
 Internal

AMC LINE UP HARDWARE – GLOBAL COVERAGE *

Device Dell Lenovo ThinkPad
type
Latitude 7300 Latitude 7310 X1 Carbon**(Gen7) T490 X1 Carbon (Gen8) T14 (Gen1)

Standard

Latitude 5300 2in1 Latitude 5310 2in1 X1 Yoga** (Gen4) X1 Yoga (Gen 5)

Convertible
(2in1)

Mobile Precision 3541 Mobile Precision 3551 P53 P15

Developer

*in some countries via partners **Workers Council approval given

AMC Hardware | strategic workplace procurement

© Copyright Allianz 13
 Internal

AMC HARDWARE ORDERING

HW basket, prices, country
list and uplifts per For procurement
Country/Region available topics please
under the AZ connect link* contact:
Lavinia Duban [Link]@[Link]

Daniel Krieg [Link]@[Link]

Local OE procurement to
order HW locally via AZ Tech
Branches OR manufacturers
or re-sellers
© Copyright Allianz 14
 Internal
Allianz Mobile Client Service Overview

EMS BASE SERVICE - OPERATIONAL MODELS

Bring your own Device (BYOD) Corporate owned Business only (COBO)

BYOD BYOD+ COBO COBO+

• Private or company owned • Private or company owned • Company owned iOS Device • Company owned iOS Device
Android or iOS Device iOS Device • Secured and fully managed • Secured and fully managed
• Secured and managed Container • Secured and managed Container Device Device
Solution Solution • Access to corporate E-Mail, • Access to corporate E-Mail,
• Access to corporate E-Mail, • Access to corporate E-Mail, Contacts, Calendar, AZ Connect, Contacts, Calendar, AZ Connect,
Contacts and Calendar Contacts and Calendar File sharing and corporate apps File sharing and corporate apps
• Additional access to AZ Connect, • Additional access to Apple Appstore
File sharing and corporate apps
BYOD on iOS BYOD on Android

Boxer Web-Browser
(Mailing)
Native Apps
WorkspaceOne File sharing
Hub Tunnel App
Send
O365 Apps*

Apple
Business
Manager
Lookout App Supervised
(MDM)
Corporate space
© Copyright Allianz *O365 Apps: Word, Excel, Powerpoint, Teams, OneDrive, MAM: Mobile Application Management 15
Private space OneNote, ToDo, Edge, Planner MDM: Mobile Device Management
Intune (MAM Policy)
 Internal
Allianz Mobile Client Service Overview

AMC SERVICE DETAILS

Service
Functions

Support

Email Save and Collaboration Call Business Availability 99,8 %

Calendar share data Intranet Conference Application
Contacts chat access

Data Protection
Products

Security
Allianz connect
intranet access
Administration

Device
Management
Infrastructure

Global Hardware VMWare Office 365

Service Workspace One Continuous Service
Improvement

© Copyright Allianz 16
 Internal
Allianz Mobile Client Service Overview

NEW FEATURES ARE RELEASED ON A REGULAR BASIS

OE requirements

Daily Scrum

24 h

Workplace Advisory
Board 2 weeks
sprint

Product backlog Sprint backlog Potentially shippable

product increment
Continuous improvement

Workplace Advisory Board (WAB) on MS Teams or WAB@[Link]

© Copyright Allianz 17
 Internal

RING METRIC FOR CONTINUOUS SERVICE IMPROVEMENT

Ring 3 are the users tagged as VIP for AMC

Ring 3 Ring 2 will be monitored for 14 days and if there are no major issues reported, the required product will be
deployed for Ring 3 users.

This ring has the regular AMC users excluding the VIP

Ring 2 The application/profile/update will be available to Ring 2 post Ring 1 testing with the known issues documented.

This ring contains OE SPOCs and limited number of friendly users

Ring 1 Ring 1 will start the testing after the testing is completed by Ring 0 users along with the known issues identified
and fixed. Ring 1 users commit to intense testing and regular feedback sessions.

Contains only user from Allianz Technology AMC and WPS technical team
Ring
0
Ring 0 / 1 users should raise questions and issues on the following connect page:
[Link]
© Copyright Allianz 18
 Internal
Allianz Mobile Client Service Overview

O365 BASIC SERVICE DETAILS

• One basic service designed to provide access and authentication plus basic Office 365 capabilities (Online and Mobile only)
• Already existing services designed to be enhanced with additional Office 365 capabilities
• New Office 365-based services designed to ensure flexible Office 365 usage

Mandatory to access Office 365

Office 365 “Extended”: Features the MS Office Desktop Suite
Office 365 Basic Word Excel PowerPoint Teams with offline functionality are supported from the service for AZ
Required for all Office 365 users incl. OE’s administrating their own client Tech Shared Workplace Services AVC / AMC / EMS - E3 and E5
infrastructure required no additional costs – for local clients OE has to take care
OneDrive for
OneNote Outlook Business of the support)

Exchange Online: Mailboxes can be transferred to Exchange

Online and back to on premise
Teams SharePoint OneDrive for Planner Office Online Office Mobile Exchange (E1 mandatory for small mailboxes (<50GB), E3 and E5 for large
Online Online Business Online Online mailboxes (<100GB))
Apps Apps
Online
Available on:
“Multi-Geo-Location”: Separately orderable
All Platforms as Online Only Multi-Geo (OE can choose desired data center - default: Azure European)
Includes:
• Azure Active Directory Connect (AAD Connect)​ “Office 365 Add-Ons”: Separately orderable
• Active Directory Federation Services (ADFS) (Available for AZ Tech Shared Workplace Services AVC / AMC / EMS -
• Office 365 tenant administration Visio Project Access E3 and E5 required)
• Office 365 online features and mobile apps
“Teams Unified Communication” (former Skype for Business):
• Network enhancements for Cloud Access
decommissioning of WebEx/Jabber and replacement with Teams
• 2nd / 3rd level support for Office 365
Requirements
Teams UC UC Out of Scope of current program
(E1 mandatory for chat, E5 mandatory for dial-in conferencing and telephony)
• Minimum: E3 / E5 license (responsibility for client implementation
lies with provider of client infrastructure) “Office 365 Analytics”: MyAnalytics, PowerBI, Delve
MyAnalytics PowerBI Pro Delve (E5 mandatory)
To be defined in a later phase
“Step-up Services”: Enhance the user experience
with single, specific apps/features
Customer Azure Information Dynamics 365 (Dedicated license assignment per user and app/feature.
Lockbox Protection List of apps/features is not complete)

© Copyright Allianz * Kindly note that for AMC usage E3/E5 O365 are the minimum requirement. 19
 Internal
Allianz Mobile Client Service Overview

AMC SERVICE PRICING MODEL

Recommended services

 Global Mail / EXO 4.92 €

 Webex
 Jabber
 AVC
3.
O 99
16
ffi
c e
36 €
.3 5
Ex

8. AM 2 te
n
Pr
ic EM 55 C
Se € de
d **
lo on ing rv

AM
ca h
l s ar dep
up dw e
S
Ba
s e
€ ic
e
Se
C
Ha po ar nd rv
rd rt e & s ic
e*
w m
ar
e
od Total
Se
rv
el
ic
Minimal required service stack 28.86 €
e
plus hardware fee / local support model
(or re-use existing hardware)

* Activation of up to 5 EMS devices

** Enables O365 Extended service on all shared service platforms
all prices on a per user per month basis, excluding VAT
© Copyright Allianz 20
 Internal

SERVICE PREREQUISITES
WHAT’S REQUIRED

© Copyright Allianz
03
 Internal

AMC ONBOARDING PREREQUISITES

Technical

 Office 365 Extended Onboarded (E3 or E5)

 EMS Onboarding
 Global Mailing Service (local exchange not supported) or EXO (M365)

Technical
Compliance
 Dedicated Cloud IT Risk Assessment (CITRA) and Privacy Impact Assessment
Compliance
(PIA)
 Compliance (e.g. local law and guidelines) for using a cloud service and migrating
Preparation the data to M365 is ensured by the OE
 Order agreements to be signed (Enablement/ Migration & Service)

Preparation
 One SPOC for continuous change management is assigned locally, proper
communication matrix provided
 Hardware to be purchased through local Allianz Technology Branch or re-use of
existing hardware
 Local End user support to be mobilized (i.e. 1st level support training incl. 2nd
level support interfaces)
 OE specific user communication and training

© Copyright Allianz 22
 Internal

RE-USE OF HARDWARE REQUIREMENTS LIST

Group Item Minimum Requirements
Windows 10 (64 Bit)
Version
New devices must have the latest stable build installed. The last stable build -1 is permitted 60 days after the release of the current build.
Operating
System Edition Windows 10 Pro or Windows 10 Enterprise

License Microsoft Enterprise E3 or E5 license as part of the Enterprise Agreement between Microsoft and Allianz

Disc Space 265 GB SSD

Memory 8 GB

UEFI Version 2.3.1 or higher / recent UEFI version recommended

Hardware
TPM Module TPM version 2.0 or higher / latest TPM version recommended

Windows Hello Support Fingerprint and/or infrared camera

Keyboard -
Peripherals &
connectivity Network Either Wi-Fi 802.11ac/n WPA2 or 100 Mbit/s Ethernet

Enrolment Hardware ID Device hardware ID is required for Windows Autopilot enrollment

Information

Certification Microsoft Windows 10 ready PC

Windows Defender.
Software Antivirus
No other antivirus software must be installed on the device
23

Connection Outside Allianz For best result please use an internet connection outside the Allianz network

© Copyright Allianz In case you are interested in other hardware options, please make sure they meet the minimum hardware requirements shown above.
 Internal

SERVICE ONBOARDING
HOW DOES IT WORK

© Copyright Allianz
04
 Internal
Allianz Mobile Client Service Overview

AMC ONBOARDING PROCESS

© Copyright Allianz 25
 Internal

THANK YOU

PROJECT CONTACT DETAILS

UEM-ONBOARDING@[Link]

© Copyright Allianz