Some users may encounter an error when attempting to open a file from Outlook or OneDrive in Goodnotes. The error may manifest as the message displayed below.
Unable to import
Importer failed: Cannot open URL at: file:///private/var/mobile/Containers/Data/
Application/xxx-xxx-xxx-xxx/tmp/imports/xxxx-xxxx-xxxx-xxx-xxx/name%20of%20file.pdf
What does this mean?
This error arises when an attempt is made to open a file from an Intune App Protection Policy (APP) application in Goodnotes without the proper deployment of Goodnotes through Intune.
What are APPs?
APPs are a set of security and compliance rules used to protect corporate data within mobile apps. These policies are deployed by the company using MDM, specifically Microsoft Intune. APPs are designed to control company owned data without having to manage the whole device. They target certain apps and can encrypt their data or require extra security steps to access certain apps. For example: Needing a PIN to enter Outlook or not being able to share documents from Outlook into Goodnotes or requiring log in to certain apps with Microsoft.
According to Microsoft's documentation:
"Intune app protection policy cannot control the iOS/iPadOS share extension without managing the device. Therefore, Intune encrypts "corporate" data before it is shared outside the app. You can validate this encryption behavior by attempting to open a "corporate" file outside of the managed app. The file should be encrypted and unable to be opened outside the managed app."
A illustrations showing how MDM and APP protection protect corporate data. Source
How does this effect Goodnotes?
This encryption restricts access to corporate data within "unprotected applications." If your APP or MDM does not include Goodnotes, or is not correctly setup, you will not be able to open files from APP applications into Goodnotes.
How can I fix it?
Goodnotes can be integrated with APPs, and when configured appropriately, it can facilitate sharing with APP protected applications. However, your organization will need a Goodnotes for Enterprise subscription to do so.
Using the regular Goodnotes app from an App Store will not allow this. The regular Goodnotes consumer app can not decrypt file information from APP protected applications.
Organizations using Intune and holding an Enterprise subscription can enable their license for application integration by incorporating the following in their XML when deploying their License Key:
<key>isIntuneUser</key>
<true/>
If you do not wish to use Intune's App Protection Policies, you shouldn't add the isIntuneUser key.
You can check this key in your App Config Menu:
- Launch Goodnotes and (where you see all your documents).
- Visit this URL in Safari: goodnotes6://managed-app-config. That URL allows you to see exactly what the Managed App Configuration contents pushed to the device are.
If this has not resolved the issue, please reach out to our Professional Support Team here with the following information:
- Your organisation name + details.
- Your license key.
- A screenshot of your App Config.