Show
System RequirementsTo activate Kiosk mode on your Android device, you should have
This
locks your device down to a purpose-specific machine well suited for work-related applications. The end-users can only perform that operations and actions that are approved by the organization on their kiosk lockdown-activated devices. Exception: For all devices running MIUI versions that have MIUI optimization turned on, Write System Permissions cannot be enabled. This leads to several issues including kiosk exiting unexpectedly, apps not getting installed silently, and so on. MIUI optimization must be disabled to fix such issues. To disable MIUI optimization:
Set up and Enable lockdown ModeSet up Kiosk ModeEnroll Devices with Hexnode UEMThe first step is to enroll your devices with the Mobile Device Management software. All methods of enrollment are explained in this section. Open Enrollment (No Authentication) Open Enrollment requires only the server name and no enrollment credentials. It is the easiest and fastest method of enrollment. All the devices that are enrolled using Open Enrollment get assigned to a default user. Organizations may prefer open enrollment to set up kiosks seamlessly. If you wish to display digital signages or simply set up a customized screen with the required apps, open enrollment is the perfect choice for your organization. To set up Open Enrollment:
To create a new user,
An enrollment request will be sent via mail/SMS to the user, consisting of the Server name and QR code. Enrollment with Authentication Enrollment with authentication requires the server name and an authentication password. This password is randomly generated and can be used only once. Authenticated enrollment makes sure that only the right users have the right access to the devices. If you want to set up kiosks and make it available only for the required users, go with enrollment with authentication. Note: If the agent is removed from the device, but is still enrolled in the portal, a new enrollment request has to be sent to re-enroll the device.
To create a new user,
An enrollment request will be sent via mail/SMS to the user, consisting of server name, password, and QR code. The devices can now be enrolled with authentication. Self-Enrollment Self-enrollment allows users to enroll their devices in Hexnode UEM manually. If an organization needs to set up kiosks only for the users in their directory services, enroll devices using self-enrollment. Self Enrollment using AD User allows the user to directly enroll in Hexnode UEM if they already have their dedicated Active Directory credentials. To configure Active Directory,
Once the AD users are imported to the Hexnode console,
Self Enrollment using Azure AD user allows the user to directly enroll in Hexnode UEM if they already have their dedicated Azure AD credentials. To configure Azure AD,
Once the Azure AD users are imported to the MDM console,
Self Enrollment using Local User: The admin creates a default user and a dedicated password manually or assigns a common password or individual passwords for the users and sends it to them as a bulk mail. The devices can be enrolled with these credentials.
Self Enrollment using Google User allows the user to directly enroll in Hexnode UEM if they already have their dedicated Google Workspace (G Suite) credentials. To configure G Suite,
Once the G Suite users are imported to the Hexnode console,
Self Enrollment using Okta User allows users to enroll their devices in Hexnode UEM if they already have their dedicated Okta credentials. Before configuring Okta enrollment, you have to configure the Okta domain in Hexnode. To configure Okta with Hexnode,
Once the Okta users and groups are imported to the Hexnode console,
The devices can now be self-enrolled. Bulk Enrollment Hexnode UEM allows you to enroll devices in bulk. To do this,
Pre-Approved Enrollment Pre-approved enrollment lets the administrator set up policies for devices even before the devices are enrolled in Hexnode UEM. The configurations/restrictions are automatically applied once the device is enrolled. Pre-approved enrollment is set up by adding a CSV file with all the device details. You can also add DEP devices as pre-approved devices in the portal. Notes:
Install Hexnode MDM App to Android DevicesHexnode UEM Android app can be downloaded from Google Play.
Associate Kiosk Policy with Enrolled DevicesTo turn your device into a Kiosk, you need to push the kiosk policy.
The policy will be automatically associated with the device. Enable Android device lockdownIn Android Marshmallow (6.0) and above, you’ll need to allow ‘Draw over apps’. To allow this,
Note: Skip this step in older Android versions. When the policy is applied, Hexnode UEM will be launched and you’ll be asked to
Advanced Bulk Deployment OptionsIf you are into shipping, like, thousands of devices
to several other industries, they won’t be willing to download the Hexnode app and enter the server address on every device they have. In such a case, you can make the Hexnode MDM app as a system app, MDM pre-configured and kiosk mode pre-activated. Additional BenefitsYou will benefit from these additional features if you add Hexnode UEM as a system app.
Make Hexnode UEM a System App before the Device is Turned OnUsed by enterprises collaborating with OEM vendors, devices are manufactured with specially configured ROM, with all privileges and permissions granted to Hexnode UEM. Flashing a custom ROM makes Hexnode UEM a system app even before the device is turned on for the first time, and automatically enrolls the device in the MDM. Major Kiosk FeaturesHexnode Kiosk features are endless. Here’s a list of selected features that most of the industries are looking for. For a full list of features, see Hexnode Android Kiosk web page. Hexnode Browser LiteThe Hexnode Browser Lite is a single tabbed browser that opens the web apps added in either single app/multi-app kiosk mode. It can also open the external URLs within the web app, provided the URLs are whitelisted. To enable the Hexnode Browser Lite in Kiosk mode,
Hexnode Kiosk BrowserThe Hexnode Kiosk Browser enables secure multi-tabbed browsing, by restricting user access to URLs and web apps permitted by the enterprise alone. To enable the Hexnode Kiosk browser in Kiosk mode,
Notes:
When Multi-tabbed browsing is enabled, the Hexnode Kiosk browser will get downloaded to the device. It will be installed silently only on Samsung Knox, LG GATE, Kyocera business phones, devices with Hexnode UEM as a system app, and devices enrolled in Android for Work as Device Owner. Advanced Website Kiosk SettingsHexnode allows you to configure advanced configurations for a set of whitelisted web apps opened in Hexnode Browser Lite or Hexnode Kiosk Browser. It allows you to configure additional settings to set up the perfect kiosk experience tailored for your use case. To configure advanced website kiosk settings,
Digital Signage DisplayHexnode’s digital signage module transforms your devices into images/video streaming screens. This feature enables you to display images and play videos for advertising/informational purposes in Android kiosk mode. You can play the media files in loops and add custom background music to it. To enable digital signage display on your devices,
Notes:
Hexnode MessengerThe Kiosk messenger module enables the admin to broadcast text messages to user devices, even while they are in Kiosk mode. The communication is unidirectional, from admin to user only.
Now, the broadcast messages can be sent to the enrolled devices via the Hexnode Messenger. Update Enterprise AppsHexnode UEM makes it possible to update Enterprise apps set up in Kiosk, without taking them out of the Kiosk mode. You can either,
Hide AppsApp icons can be hidden away, yet run the app in the background, with the Background Apps feature in Kiosk mode. This enables the enterprise to install an app in the device but restrict the user from tampering with it. Hidden apps can’t be set as a Default app. Add PDF and Video shortcuts in single/multi app modeHexnode UEM allows admins to create shortcuts for PDF and video files in the portal. These PDF and video shortcuts can be added in Single App/Multi App kiosk mode. Hexnode provides its own Hexnode Document Reader and Hexnode Media Player to open PDF and video shortcuts respectively. Users are also free to choose their own apps to open these file shortcuts. Set up a Default Kiosk appA default app can be set in Kiosk mode which would launch automatically as per the auto-launch period set in the policy and would run in the foreground at all times. You can access the other apps in multi-app Kiosk mode by pressing the back button and returning to the home page. The default app launches automatically when the device enters Kiosk mode or when the device stays idle for a set time. Setting up a default Kiosk app can be done in the Kiosk Lockdown > Android Kiosk Lockdown > Launcher > Auto-Launch. You can also customize the kiosk launcher and choose the desired size for the kiosk app icon as per its requirements. Kiosk ScreensaverWith Hexnode’s Kiosk Screensaver feature, enterprises can transform their Android devices into images/video streaming screens while in kiosk mode. It allows users to display images and play videos as screensavers for devices locked in kiosk mode. To enable kiosk screensaver,
ReportingHexnode UEM stores the device, user, compliance, location, data management, application, and audit data, which can be accessed from the “Reports” tab. Choose any report, click on “Export” and select the file format – PDF or CSV, for it to be saved to your computer. It allows you to generate the following kiosk reports:
Peripheral SettingsFrom Wi-Fi and Bluetooth configurations to Display and App settings, Peripheral Settings include a broad range of peripheral controls for the devices in Android Kiosk mode. For a detailed description of the configurations, refer to the Peripheral Settings document. Disable Android device lockdownDisabling or exiting Kiosk mode can be done from the portal as well as from the device. After ensuring your devices are connected to a network, you can use any of the following methods to disable/remove Kiosk mode from the MDM console.
With this method, you can temporarily get the device out of kiosk mode. You can get back into kiosk mode by clicking Manage > Actions > Enable Kiosk Mode.
You can also setup exit-alternatives where the users themselves can exit kiosk lockdown mode from the device end. These methods do not require internet connectivity. They are mentioned below.
Notes:
|