Configuration

The app Configuration option lets you control and apply app restrictions (black list) on the device. You can create new app configurations and apply the configurations on the devices.

When you create the app configuration, you can restrict any new app installation (even published apps) on ADO and Knox supported devices. For non-ADO and non-Knox devices, restriction will not be applied on new app installation, but the app which you are about to install will be blocked.

You can also recommend apps with specific version, but if the user has the higher or earlier versions of the app, then also the recommended app will not be blocked by using the “Do not block apps which are pending for upgrade/downgrade” option. You may configure this setting where your recommended app will not be blocked.

You can block access for any newly installed apps on the Android devices and block the apps based on the selected app categories that are available in Seqrite Enterprise Mobility Management (mSuite). You can apply restrictions to block apps for the full time. You can also recommend apps for installation on the user devices. You can add a particular version or multiple versions of the apps as suggested, restricted, fully blocked, or whitelisted.

Additionally, you can also restrict and limit the usage of the apps by configuring Launcher. With the App Launcher option, the user will be able to see and access only the selected active apps. After App Launcher is configured on a particular device, the Launcher screen will be activated and then the user can view only the selected apps and configure only the selected settings on the device.

You can configure apps for the devices that are enrolled using Android Management API Enrollment through the Android App Management tab. This App Management will not be applicable to any other enrolled devices.

Advanced Search for App Configurations

The Advanced Search option allows you to perform an advanced search for different app configurations.

To search app configurations, follow these steps:

1. Log on to the Seqrite EMM console and in the left pane, select Apps > Configuration.
2. On the App Configurations page, click Advanced Search.
3. Following search category is displayed:
   • Select Created By: Select this option to search configurations as per creator name.
4. Select the creator name and click Search.

   The search result gets displayed.

Taking an action for App configurations

The Take Action list appears on the App Configurations page when you select a single or multiple Admin role. The available options in the Take Action list are:

• Delete: Helps you to delete the single or multiple selected app configurations.
• Apply to Groups: Helps you to apply the selected app configuration to the groups. You can apply the single configuration to multiple groups at the same time.
• Apply to Device: Helps you to apply the selected app configuration to the multiple selected devices.

• Select the option from the Take Action list and then select one of the following actions:
  • Select Delete and click Submit.
  • Select Apply to Groups or Apply to Devices > select the groups or devices to apply the configuration > click Apply.

  The selected action is carried out on the selected apps.

Adding app configuration and activating the Launcher

The Add button on the upper-right side of the App Configuration page lets you create a new app configuration. With the help of this app configuration, you can block access to newly installed apps, block apps based on their categories, recommend an app or restrict an app from uninstalling. You can also block an app fully as per your requirement. Also, you can configure Launcher to restrict and limit the usage of the apps on the user’s device.

Next, you can configure the management of apps through the Android Management API (AMA). For more information on AMA app configuration, see Android App Management.

App configuration provides many useful features to manage the apps as follows:

App Categories

Seqrite Enterprise Mobility Management (mSuite) provides App Categories section to help block different categories to which the applications belong. The app category blocking is applicable only to the Android devices. You can select either a single or multiple or all the app categories.

Whitelisted Apps

With this option, you can white list the apps. The white listed apps are accessible, even if their category is blocked. You can also add particular versions of the app to the white list. Only the selected, white listed versions of the application will be accessible to the user and other versions would be blocked. You can remove single or multiple versions of the app from the whitelist.

Blacklisted Apps

The Blacklisted Apps feature applies restriction on apps in the following ways:

Apps to Remove

If you want the user to uninstall all the versions of the app, select the entire package to uninstall all the versions. You can also add the particular version of the app to the uninstall apps list. The selected single or multiple app versions will be blocked and the other app versions will be accessible. This functionality is only applicable to the Android devices.

Apps to Block

The Apps to Block option helps you to add the particular version of the app to the block list. The selected single or multiple app versions will be blocked and the other app versions will be accessible. If you want the user to block all the versions of the app, then select the entire application. You can fully block the apps of Android mobile devices.

• The Apps to remove and Apps to block lists are not visible to the ADO and KNOX supported devices.

Published Apps

Published Apps functionality helps the user to add the apps to the Published Apps list and view the list. You can select the entire app or a specific version of the app and add to the recommended list. The selected app version will be recommended and the other app versions will be blocked. If you want the user to access all the versions of the app, then select the entire app and add to the recommended list. If the Restrict new app installation on ADO & Knox Enabled Devices check box is selected in the app configuration settings, then you will receive a prompt to clear the check box and then recommend the apps.

System Kiosk Mode

System Kiosk Mode is applicable to the ADO enabled Android devices or Supervised iOS devices, where Seqrite Enterprise Mobility Management (mSuite) Agent is the device user and also to the Samsung KNOX supported devices. At times if both Kiosk Modes (System Kiosk Mode and Launcher Kiosk Mode are enabled, then System Kiosk Mode will have the priority. Thus, System Kiosk Mode setting will be applied on the device. But for Non-ADO devices, Launcher Kiosk Mode will be applied.

In System Kiosk Mode, you can add only one app to the ADO-supported devices or Supervised iOS devices. The user can access only the app added in the System Kiosk Mode. The app will be auto launched whenever the System Kiosk Mode is applied on the device or user restarts the device or if the user locks and unlocks the device. In case, if the Restrict new app installation on ADO & Knox Enabled Devices check box is selected in the app configuration, then you must first clear the check box and add an app to System Kiosk Mode.

To enable System Kiosk mode on iOS device, make sure the added app is already installed on the iOS device. If the app is not installed on the device, the device will be blocked.

Seqrite Launcher

Seqrite Launcher gives the experience of customized style and function of your mobile device. The Launcher tab helps you to activate the Seqrite Launcher.

Launcher Setting

In this section, you can configure Seqrite Launcher, Whitelisted Apps & Settings, and Custom Device Settings on Launcher.

Seqrite Launcher

After the Launcher is activated on the device, the user must enable the Accessibility Service on the device. If the Accessibility Service is not enabled on the user device, the device will be blocked. To enable the accessibility service on the device, the user must select Enable Service. If the accessibility service of the device is disabled, the Launcher may not work properly on the device. After activating Launcher, only the active apps will be visible on Seqrite Launcher and other apps will not be accessible.

If any app configuration with the Launcher is activated on the device, the Launcher configurations will have the highest preference and all the other app configurations will be overridden. In case, you have deactivated the Launcher, the App Configurations will be activated on the device by overriding the Launcher configurations.

At times, if the Restrict new app installation on ADO & Knox Enabled Devices check box is selected, you will receive a prompt to clear the check box and then recommend an app for Launcher setting.

Also, you can configure the exit launcher duration from the Launcher section.

Whitelisted Apps & Settings

Custom Device Settings on Launcher

The Device Settings help to manage and control the following aspect of the device such as brightness, volume, Wi-Fi, data network, auto rotate, Bluetooth, Airplane mode, and sound.

Active Apps

If the apps added to the Active Apps list are installed on the user’s device then only these apps will be visible and accessible on the launcher. In case, the added apps are not installed on the device then the apps will be added to the recommended list on the user’s device and the user must install the published apps on the device.

The Active Apps section includes Normal mode and Kiosk mode.

• Normal Mode: In this mode, you can add apps to the Active apps list. This list includes the apps that you want the user to access on the device when the launcher is activated.
• Custom Kiosk Mode: In this mode, you can add only one app to the active apps list of Kiosk mode. The user can access only the app added in the kiosk mode. The app will be auto launched when the kiosk mode is applied on the device, user restarts the device, or if the user locks and unlocks the device.

Branding

The Branding option is helpful in changing the company name, company logo, and wallpaper on Launcher. These Launcher Setting override all the custom settings at company level Admin settings.

Adding new app configuration and activating the Launcher

To add new app configuration, follow these steps:

1. Log on to the Seqrite EMM console and in the left pane, click Apps > Configuration.
2. On the App Configurations page, click Add App Configuration.

   The Create App Configuration page appears.

3. In Edit Details section, enter the App Configuration Name.
4. To block newly installed app from opening on ADO and KNOX supported devices, select the Restrict new app installation on ADO & Knox enabled devices check box.
   • If you do not want to block the new app installation on ADO and KNOX devices, clear the check box.

     Note:
     If you are recommending the apps, adding app to the Launcher, or adding app to System Kiosk Mode, then you will receive a prompt to clear the Restrict new app installation on ADO & Knox Enabled Devices check box. Then either use the check box or the App Configuration settings. The Launcher Setting and Branding options are visible only for the Android device.

   If you want to make this app configuration a default one, select the Default check box.

5. To allow any recommended app irrespective of its upgrade or downgrade, select the Do not block the apps which are pending for upgrade/downgrade check box.
6. Click Next.

   The Edit Configurations tab displays App Categories, Blacklisted Apps, Published Apps, and System Kiosk Mode sections.

7. In App Categories section, you can take the following steps:
   • Select the app categories check boxes that you want to block.
   • To select all the available app categories, you can select the Select All check box.
   • To exclude any app from the blocked category, you can add that particular app to the Whitelisted apps list by clicking Add Apps.

   In Add apps to whitelist dialog box, you can perform an advance search to view the downloaded, system, suggested, and restricted apps. Also, white list particular version of an app.

8. Click Next.
9. In Blacklisted Apps section, you can restrict the apps by adding the apps to the Apps to remove list and Apps to block list.

   Note:
   Apps added to the Apps to block list are not visible/disabled on the ADO and KNOX supported devices. Apps added to Apps to remove list can be remotely uninstalled or disabled from ADO and KNOX devices. For iOS devices only those apps can be uninstalled which are added by mSuite console.

• To add the apps to the list, click Apps to remove. Click the Add Apps button. In new window, select the apps. Add Apps button gets visible. Click Add Apps.
• To add apps to fully blocked list, click Apps to block. Click the Add Apps button. In new window, select the apps. Add Apps button gets visible. Click Add Apps.

  When adding apps to Apps to remove or Fully Blocked list, you can also perform an advanced search to view the separate list of downloaded, system, suggested, and restricted apps.

10. Click Next.
11. In Published Apps section, to recommend any Android app or app version, click Add Apps. In new window, select the apps. Add Apps button gets visible. Click Add Apps. Make sure the Restrict new app installation on ADO & Knox Enabled Devices check box is not selected in app configuration.

    Note:
    – User will not be able to uninstall, force stop, and clear cache for published apps on Samsung KNOX devices. – Custom Apps in recommended list will be silently installed on the ADO and Samsung KNOX devices.

12. Click Next.
13. In System Kiosk Mode section, you can recommend a single app in Kiosk mode for ADO and KNOX supported devices.
    • In System Kiosk Mode for ADO devices page, click Add Apps.
    • In Add Apps for Kiosk Mode page, select the app, and click Add Apps.

    Make sure the Restrict new app installation on ADO & Knox Enabled Devices check box is not selected in app configuration.

14. Click Next.

    A confirmation to enable the ADO Kiosk mode is displayed.

15. Click OK.

    You are directed to the Launcher settings section.

16. In the Launcher section, you can turn on the device Launcher. After enabling the Launcher, on the confirmation screen, click Activate.

    The Restrict new app installation on ADO & Knox Enabled Devices check box must be cleared before recommending an app for Launcher.

When the Launcher activates, you can configure the following things:

• Launcher reminder: Use this option to set the time and send a prompt to the user to activate the Launcher on the device. The available options are 1 minute, 2 minutes, 3 minutes, 5 minutes, 10 minutes, and 30 minutes.
• Launcher Exit Duration: You can configure the time to exit the Launcher. Enter the time in the Launcher Exit Duration field to allow the user to exit the Launcher for a limited period. The user of the device must enter the passcode to exit the launcher. The default time to exit the launcher is 30 minutes.
• Whitelisted Apps and Settings: Configure the Whitelisted Apps and other settings to access the selected settings on the device Launcher screen.
• Custom Device Settings on Launcher: Configure the device settings to access the selected device settings on the Launcher screen.

17. Click Next.

    The Active Apps section appears.

18. Select either the Normal Mode or Kiosk Mode. For more information about normal and kiosk mode, see Active Apps.
    • To add apps to the Active Apps list in Normal Mode and Kiosk Mode, click Add Apps. The Add apps on launcher dialog box appears. Select the apps that you want to view on the Launcher and click Add Apps.

19. Click Next.

    You are directed to the Branding section, where all the fields would be dimmed/disabled. You can make following changes to the Launcher setting.

20. On the Branding page, select the Branding on Launcher check box.

    All the other fields on the page are enabled, where you can change the Company Name, Company Logo, and Launcher Wallpaper.

• Change the Company logo and Launcher Wallpaper by clicking the down arrow > Upload > selecting the image. For best logo and wallpaper image experience, you must use the following image resolutions:
• Company logo: Between 300 X 300 pixels to 1000 X 1000 pixels.
• Wallpaper: 1080 x 1920

21. Click Save.

    The changes are reflected on the Launcher.

    The app configuration is created successfully.

    You can export the details of the configuration in PDF format.

Editing the app configuration and Launcher

You can edit the app configuration details at any point of time.

To edit the app configurations, follow these steps:

1. Log on to the Seqrite EMM console and in the left pane, click Apps > Configuration.
2. On the App Configurations page, select one of the app configurations, and then click the Edit icon.
3. To edit the configuration name, device and group details, click the Edit tab.

   In the Devices section, you can add the devices to which the configuration needs to be applied.

   In the Groups section, you can add the groups to which the configuration needs to be applied.

4. To edit the app configuration, click the Edit Configuration tab.
   • In the App Categories section, you can block the category or remove category blocking by selecting or clearing the check boxes. Also, white list the apps or app versions.
   • In the Blacklisted Apps section, you can edit the uninstall list or fully blocked list.
   • In the Published Apps section, you can add apps or app versions to the recommended list.
   • In the System Kiosk Mode, you can add or remove the app that will be visible on ADO supported devices in Kiosk mode.

   To get more information, see Adding new app configuration and activating the Launcher.

5. Click the Launcher tab.

   In this section, you can change the Launcher settings and edit the Active Apps list as follows:

• Turn on or off the Launcher, change the alert time, or change the Launcher exit duration.
• You can change the Whitelisted Apps and other settings or device settings.
• You can edit the active apps list.
• With respect to branding, you can add or change the company logo and wallpaper that will be displayed on the Launcher.

  To save the edited configuration, click Save.

  See also