Kaspersky Secure Mobility Management

The help for this version of the solution is no longer updated, so it may contain outdated information. For up-to-date information about the solution refer to the Kaspersky Secure Mobility Management 4.1 Help.

Configuring Kiosk mode

Kiosk mode is a Kaspersky Endpoint Security for Android feature that lets you limit the set of apps available to a device user, whether a single app or multiple apps. You can also efficiently manage some device settings.

The kiosk mode settings apply to devices managed via Kaspersky Endpoint Security for Android in device owner mode.

Kiosk mode types

The following kiosk mode types are available in Kaspersky Endpoint Security:

• Single-app mode - Kiosk mode with only a single app. In this mode, a device user can open only one app that is allowed on the device and specified in the kiosk mode settings.

  If the app that you want to add to kiosk mode is not installed on the device, kiosk mode activates after the app is installed.

  On devices with Android 9.0 or later, an app must support kiosk mode functionality and call the startLockTask() method itself to launch the app.

  On devices with Android 9.0 or earlier, the app launches directly in kiosk mode.

• Multi-app mode - Kiosk mode with multiple apps. In this mode, a device user can open only the set of apps that are allowed on the device and specified in the kiosk mode settings.

Presettings

Pre-configuration for kiosk mode includes the following:

• Before specifying apps that are allowed to be run on the device in kiosk mode, you need first to add these apps in App Control > List of categories and apps and mark them as required. Then, they will appear in the App package list of the kiosk mode.

  Recently added required apps may not appear in the App package list. To view all added apps and select the app for single-app mode, you need to save and close the policy, and then reopen it. All added apps will appear in the list.

• Before activating kiosk mode, we recommend that you prohibit launching of Google Assistant by enabling the corresponding restriction in Policy > Device owner mode > Feature restrictions > Apps > Prohibit use of Google Assistant. Otherwise, Google Assistant launches in kiosk mode and allows non-trusted apps to be opened.

Open the kiosk mode settings

To open the kiosk mode settings:

1. In the console tree, in the Managed devices folder, select the administration group to which the Android devices belong.
2. In the workspace of the group, select the Policies tab.
3. Open the policy properties window by double-clicking any column.
4. In the policy Properties window, select the Device owner mode > Kiosk mode section.

Configure single-app mode

To configure single-app mode:

1. In the Kiosk mode drop-down list, select Single-app mode.
2. In the App package drop-down list, select an app package with the app that is allowed to be run on the device.
3. Specify any required restrictions. For available restrictions, see Kiosk mode restrictions below.
4. Select the Trusted apps check box if you want to add additional apps that are allowed on the device. To learn how to do this, see Add trusted apps below.
5. Click the Apply button to save the changes you have made.

Configure multi-app mode

To configure multi-app mode:

1. In the Kiosk mode drop-down list, select Multi-app mode.
2. Click Add, select apps that are allowed to be run on the device, and then click OK.
3. Specify any required restrictions. For available restrictions, see Kiosk mode restrictions below.
4. Select the Allow navigation to trusted apps check box if you want to add additional apps that are allowed on the device. To learn how to do this, see Add trusted apps below.
5. Click the Apply button to save the changes you have made.

Kiosk mode restrictions

You can set the following restrictions in kiosk mode:

• Prohibit Overview button (Android 9.0 or later)

  Selecting or clearing this check box specifies whether the Overview button is hidden. This restriction is supported on devices with Android 9.0 or later.

  The check box is selected by default.

• Prohibit Home button (Android 9.0 or later)

  Selecting or clearing this check box specifies whether the Home button is hidden. This restriction is supported on devices with Android 9.0 or later.

  The check box is selected by default.

• Prohibit status bar (Android 9.0 or later)

  Selecting or clearing this check box specifies whether the status bar is blank with notifications and indicators such as connectivity, battery, and sound and vibrate options. This restriction is supported on devices with Android 9.0 or later.

  The check box is selected by default.

• Prohibit displaying system notifications (Android 9.0 or later)

  Selecting or clearing this check box specifies whether system notifications are hidden. This restriction is supported on devices with Android 9.0 or later.

  The check box is selected by default.

• Add Kaspersky Endpoint Security for Android as trusted app

  Selecting or clearing this check box specifies whether Kaspersky Endpoint Security for Android will be added to the list of trusted apps. This option is available if the Allow navigation to trusted apps check box is selected.

  The check box is selected by default.

Add trusted apps

Besides locking the device to a single app or set of apps, you can also add trusted apps that a device user can navigate to. To do this, in the Kiosk mode section:

1. Select the Allow navigation to trusted apps check box. The Trusted Apps list appears.
2. Click Add, select the desired app package name, and then click OK.
3. Click the Apply button to save the changes you have made.