Kiosk device policy
The Kiosk policy lets you restrict devices to Kiosk mode by limiting the apps that can run. XenMobile does not control which part of the device locks in Kiosk mode. The device manages the Kiosk mode settings after you deploy the policy.
To add or configure this policy, go toConfigure > Device Policies. For more information, seeDevice policies.
To put a Samsung SAFE device into Kiosk mode
Enable the Samsung SAFE API key on the mobile device, as described inSamsung MDM license key device policies. This step lets you enable policies on Samsung SAFE devices.
Enable Firebase Cloud Messaging for Android devices, as described inFirebase Cloud Messaging. This step enables Android devices to connect back to XenMobile.
Add a Kiosk device policy, as described in the next section.
Assign those three device policies to the appropriate delivery groups. Consider whether you want to include other policies, such as App inventory, in those delivery groups.
To remove the devices from Kiosk mode, create a Kiosk device policy that hasKiosk modeset toDisable. Update the delivery groups to remove the Kiosk policy that enabled Kiosk mode and to add the Kiosk policy that disables Kiosk mode.
To add a Kiosk device policy
All apps that you specify for Kiosk mode must already be installed on the user devices.
Some options apply only to the Samsung Mobile Device Management (MDM) API 4.0 and later.
Samsung SAFE settings
You can specify that only a specific app or apps can be used. This policy is useful for corporate devices that are designed to run only a specific type or class of apps. This policy also lets you choose custom images for the device home screen and lock screen wallpapers for when the device is in Kiosk mode.
- Kiosk mode:ClickEnableorDisable. The default isEnable. When you clickDisable, all the following options disappear.
- Launcher package:Citrix recommends that you leave this field blank unless you have developed an in-house launcher to enable users to open the Kiosk app or apps. If you use an in-house launcher, enter the full name of the launcher application package.
- Emergency phone number:Enter an optional phone number. Anyone can use this number to contact your company to find a lost device. Applies only to MDM 4.0 and later.
- Allow navigation bar:Select whether to let users see and use the navigation bar while in Kiosk mode. Applies only to MDM 4.0 and later. The default isOn.
- Allow multi-window mode:Select whether to let users use multiple windows while in Kiosk mode. Applies only to MDM 4.0 and later. The default isOn.
- Allow status bar:Select whether to let users see the status bar while in Kiosk mode. Applies only to MDM 4.0 and later. The default isOn.
- Allow system bar:Select whether to let users see the system bar while in Kiosk mode. The default isOn.
- Allow task manager:Select whether to let users see and use the task manager while in Kiosk mode. The default isOn.
- Change Common SAFE passcode:This setting helps protect against inadvertent changes to the Common SAFE passcode field. When this setting isOff, you can’t change the Common SAFE passcode field. The default isOff.
- Common SAFE passcode:If you set a general passcode policy for all Samsung SAFE devices, enter that optional passcode in this field.
- Wallpapers
- Define a home wallpaper:Select whether to use a custom image for the home screen while in Kiosk mode. The default isOff.
- Home image:When you enableDefine a home wallpaper, select the image file by clickingBrowseand navigating to the file location.
- Define a lock wallpaper:Select whether to use a custom image for the lock screen while in Kiosk mode. The default isOff. Applies only to MDM 4.0 and later.
- Lock image:When you enableDefine a lock wallpaper, select the image file by clickingBrowseand navigating to the file location.
- Define a home wallpaper:Select whether to use a custom image for the home screen while in Kiosk mode. The default isOff.
- Apps:For each app that you want to add to Kiosk mode, clickAddand then do the following:
- New app to add:Enter the full name of the app to add. For example, com.android.calendar lets users use the Android calendar app.
- ClickSaveto add the app or clickCancelto cancel adding the app.
Android Enterprise settings
You can allow apps and set lock task mode for dedicated Android Enterprise devices, which are also known as corporate owned single use (COSU) devices. By default, Secure Hub and Google Play services are on the allow list.
To allow an app, clickAdd. You can allow multiple apps. For more information, seeAndroid Enterprise.
Note:
The XenMobile Server console includes the terms “blacklist” and “whitelist”. We are changing those terms in an upcoming release to “block list” and “allow list”.
- 应用白名单:Enter the package name of the app you want to whitelist or select the app from the list.
- ClickAdd newto enter the package name of the app approved to show in the list.
- Select the existing app from the list. The list shows apps that are uploaded in XenMobile Server. By default, Secure Hub and Google Play services are whitelisted.
- Lock task mode:ChooseAllowto set the app to be pinned to the device screen when the user starts the app. ChooseDenyto set the app not to be pinned. By default, Secure Hub and Google Play services are allowed. The default isAllow.
When an app is in lock task mode, the app is pinned to the device screen when the user opens it. No Home button appears and the Back button is disabled. The user exits the app using an action programmed into the app, such as signing out.