Key codes of device management profile

Size: px

Start display at page:

Download "Key codes of device management profile"

Victor Watkins
5 years ago
Views:

1 Key codes of device management profile Administrators can download detailed information of the device management profile in XLS file at Devices & Users > Devices. Policies of the device management profile are shown as JSON for the android platform, XML code for the ios platform. See below table about the profile key value. Android Wi-Fi Wi-Fi Wi-Fi Direct Wi-Fi hotspot Wi-Fi SSID whitelist settings Wi-Fi SSID blacklist settings Wi-Fi auto connection Wi-Fi minimum security level setting Bluetooth USB Bluetooth Desktop connection Data transfer Discoverable mode Bluetooth tethering Bluetooth UUID blacklist Bluetooth UUID whitelist PC connection USB tethering activation USB Host Storage (OTG) USB exception allowed list USB debugging Application Allow installation of applications from unknown sources Wi-Fi AllowWiFi AllowWiFiDirect AllowWiFiHotSpot WifiSsidWhiteList WifiSsidBlackList AllowAutomaticConnectionToWifi WifiMinimumRequiredSecurity Bluetooth AllowBluetooth AllowDesktopConnectivity AllowDataTransfer AllowDiscoverableMode AllowBluetoothTethering BluetoothUuidBlackList BluetoothUuidWhiteList Usb AllowPcConnectivity AllowUsbTethering AllowUsbHostStorage UsbExceptionList AllowUsbDebugging App AllowNonTrustApps 527

2 Google Play YouTube blacklist whitelist Application removal blacklist Application running blacklist Application running whitelist Action on application forgery Application running prohibited list Battery Optimization exception apps setting Show ProgressBar when installing apps Phone Airplane mode Data connection Voice call Allow SMS Incoming Allow SMS Outgoing Allow MMS Incoming Allow MMS Outgoing Use SIM card locking Default SIM PIN Set app voice recording whitelist Roaming Data connection for roaming WAP push for roaming Data sync for roaming Voice calls for roaming Location Mock location GPS Report device location Report device location interval AllowMarket AllowYouTube AppInstallationBlackList AppInstallationWhiteList AppDeletionBlackList AppRunningBlackList AppRunningWhiteList AppModificationMeasure AppPreventStartBlackList AppBatteryOptimizationWhiteList ShowDownloadProgressbar Phone AllowAirplaneMode AllowCellularData AllowCall AllowIncomingSms AllowOutgoingSms AllowIncomingMms AllowOutgoingMms EnableSimPinLock DefaultSimPin AppCallRecordingWhiteList Roaming AllowRoamingData AllowRoamingPush AllowRoamingSync AllowRoamingVoiceCalls Location AllowMockLocation AllowGps EnableUpdatingLocation UpdateLocationInterval 528

3 Browser Android browser Cookies JavaScript Autofill Pop-up block Browser proxy URL System Factory reset Power off Backup OTA upgrade Settings Data usage limit Quit application upon killing activities System app shutdown App crash report to Google Multiple users Expand status bar Change wallpaper Change date and time Screen capture Clipboard Share list S Beam If device OS tampering is detected Smart Clip NFC control Allow the device manager to install and activate applications Allow developer mode Use reboot banner Reboot banners stationery Google Android security update policy Browser AllowBrowser AllowUseOfCookies AllowUseOfJavaScript AllowUseOfAutoFill AllowUseOfPopups ProxyUrl System AllowWipeDevice AllowPowerOff AllowBackup AllowOtaUpgrade AllowSettingsChanges AllowBackgroundProcessLimit AllowKillingActivitiesOnLeave AllowStopSystemApp AllowGoogleCrashReport AllowMultiUsers AllowStatusBarExpansion AllowWallpaperChange AllowChangeDateTime AllowScreenCapture AllowClipboard AllowShareList AllowBeam OsModificationMeasure AllowSmartClip AllowNfc AllowAdministrationApp AllowDeveloperMode EnableRebootBanner RebootBannerText AllowSecurityUpdate 529

4 Wearable equipment policy succession Safe mode Control Power saving mode Firmware download mode control SD Card External SD card Unauthorized SD card detected Microphone Microphone Recording S Voice Enrollment EMM Guardian Kiosk Kiosk app settings Task manager System bar Disallow hardware keys Multiple windows Air Command Air view Allow edge screen Kiosk Browser Set screen saver Retry Set screen saver type screen saver ID Communication retry count Communication retry interval (min) Password Minimum strength EnableWearable AllowSafeMode AllowPowerSavingMode AllowFirmwareRecovery Allow SdCard AllowExternalSdCard EnableDetectUnauthorizedSdCard Microphone AllowMicrophone AllowAudioRecord AllowSVoice Enrollment AllowDmMonitor Kiosk KioskAppPackageName AllowTaskManager AllowSystemBar AllowHardwareKeys AllowMultiWindow AllowAirCommand AllowAirView AllowEdgeScreen KioskSingleWeb KioskScreenSaverContent Type Ids Retry NumRetries RetryInterval Password Quality 530

5 Maximum failed attempts If maximum failed attempts is exceeded Minimum length Expires after (days) Retain history for Lock device after (min) Maximum length of sequential numbers Maximum length of sequential characters Lock device after (min) Scheduler update schedule EMM app update schedule Storage Storage encryption Logging Save logs Log level Maximum log size (MB) Maximum days for storage (day) SmartCard Smartcard Browser Authentication Certificate Certificate deletion Certificate verification when installing Attestation Attestation Actions for when verification fails Mail Domain blacklist NTP Settings Server address MaximumFailedAttempts MaximumFailedAttemptsViolationMeasure MinimumLength MaximumAgeInDays History MaximumGracePeriod MaximumNumericSequenceLength MaximumCharacterSequenceLength TimeToLock Scheduler UpdateProfileScheduler UpdateAgentScheduler Storage StorageEncryption Logging AllowLog LogLevel MaximumLogSize MaximumLogDuration SmartCard AllowSmartCardBrowserAuthentication Certificate AllowUserRemoveCertificates EnableCertificateValidationAtInstall Attestation EnableAttestation AttestationViolationMeasure Mail DomainBlacklist Ntp NtpServerAddress 531

6 Maximum number of attempts Polling cycles (hr) Short polling cycle (sec) Timeout (sec) Notification Set Notifications from an event to On. Set Notifications from an event to Off. Fix Event Notification Firewall DeX Permission (By Application) Prohibition (By Application) Permission (Domain) Prohibition (Domain) DNS Allow DeX mode Allow Ethernet only Application visibility blacklist blacklist whitelist NtpMaxAttempts NtpPollingInterval NtpPollingIntervalShorter NtpTimeout Notification ShowEventOnNotification ShowEventOffNotification ShowEventOffNotification Firewall AllowAppRuleList DenyAppRuleList DomainAllowRuleList DomainDenyRuleList DnsList DeX AllowDexMode AllowEthernetOnly DexAppRunningBlackList DexAppInstallationBlackList DexAppInstallationWhiteList Knox System Screen capture Clipboard Share list Google account synchronization App crash report to Google System AllowScreenCapture AllowClipboard AllowShareList AllowGoogleAccountSync AllowGoogleCrashReport 532

7 Power off Settings Home key System app shutdown Expand status bar Third Party Keyboard Add Account Allow USB access Package Name Vendor ID Product ID Microphone Microphone Recording SdCard External SD card Whitelisted apps for external SD card AdvancedSystem Trusted Boot Verification WiFi Add a new Wi-Fi network Browser Android browser Cookies JavaScript Autofill Pop-up block Browser proxy URL ContainerDataExchange Moving an application to container Moving a file to Knox area Moving a file to General area AllowPowerOff AllowSettingsChanges AllowHomeKey AllowStopSystemApp AllowStatusBarExpansion AllowThirdPartyKeyboard AllowAccountAddition EnableUsbAccess PackageName VendorId ProductId Microphone AllowMicrophone AllowAudioRecord Allow SdCard AllowExternalSdCard AllowExternalSdCardAppWhiteList AdvancedSystem AllowTrustedBoot WiFi AllowAddUserProfiles Browser AllowBrowser AllowUseOfCookies AllowUseOfJavaScript AllowUseOfAutoFill AllowUseOfPopups ProxyUrl ContainerDataExchange AllowMoveAppToContainer AllowMoveFileToContainer AllowMoveFileToOwner 533

8 App Calendar data sync Contacts data sync blacklist whitelist Application removal blacklist Application running blacklist whitelist GMS application Application running prohibited list Battery optimization exception apps setting App Data deletion protection list App Data deletion protection exceptional list Show ProgressBar when installing apps Password Enterprise Identity Authentication Domain Address Setup file FIDO Request URL Response URL Package Name Minimum strength Maximum failed attempts Expires after (days) AllowCalendarSyncData AllowContactsSyncData App AppInstallationBlackList AppInstallationWhiteList AppDeletionBlackList AppRunningBlackList AppInstallationPermissionWhiteList AllowGms AppPreventStartBlackList AppBatteryOptimizationWhiteList AppClearDataBlackList AppClearDataWhiteList ShowDownloadProgressbar Password EnableEnterpriseIdentityAuthentication EnterpriseIdentifyAuthenticationAddress EnterpriseIdentifyAuthenticationPackageName EnableFido FidoRequestUrl FidoResponseUrl FidoPackageList Quality MaximumFailedAttempts MaximumAgeInDays Number of previous passwords MaximumHistoryLength Minimum length Minimum number of letters Minimum number of lowercase letters MinimumLength MinimumLetter MinimumLowerCase 534

9 Minimum number of capital letters Minimum number of nonletters Minimum number of numeric characters Minimum number of special characters Maximum length of repeated characters Maximum length of sequential characters Minimum length of character change Prohibited words Maximum length of sequential numbers Time to Lock Screen Password visibility settings Pattern lock visibility settings Unlock with fingerprint Unlock with iris Enforce Multi factor Authentication Firewall Firewall type Permission Permission (IP) Host Pattern Port (range) Port Range Package Name Prohibition Prohibition (IP) IP Address (range) Port (range) Port Range Package Name SmartCard MinimumUpperCase MinimumNonLetter MinimumNumeric MinimumSymbol MaximumDupliationCharacter MaximumSequentialCharacterLength MinimumChangeLength ForbiddenStrings MaximumSequentialNumericLength TimeToLock PasswordVisibility PasswordPatternVisibility AllowFingerprintBiometricAuthentication AllowIrisBiometricAuthentication EnforceMultifactorAuthentication Firewall EnableFirewall AllowRuleList AllowAppRuleList IpAddress PortNumber PortLocation PackageName DenyRuleList DenyAppRuleList IpAddress PortNumber PortLocation PackageName SmartCard 535

10 Smartcard Browser Authentication TIMACCM TIMA CCM profile app whitelisting settings TIMA CCM profile app whitelisting settings TIMA CCM profile app access restriction exception list Bluetooth Bluetooth Low Energy Phone Book Access Profile (PBAP) via Bluetooth AllowSmartCardBrowserAuthentication TimaCcm AllowAllPackages CcmProfileAppWhiteList CcmProfileAppExemptionList Bluetooth AllowBle AllowContactsSharing ios Password policies Minimum strength Maximum failed attempts Minimum length Expires after (days) Retain history for Set screen lock after (min) Maximum validity period for screen lock (min) Screen unlock with Touch ID allowpassword passwordquality passwordmaxfailedattempts passwordminlength passwordmaxpinageindays passwordpinhistory passwordmaxinactivity passwordmaxgraceperiod allowfingerprintforunlock allowappinstallation Allow App Store to install Apps allowuiappinstallation Application uninstallation YouTube itunes Store Explicit content on music and podcasts Require itunes password for every purchase Game Center Adding friends in Game Center Multiplayer games allowappremoval allowyoutube allowitunes allowexplicitcontent forceitunesstorepasswordentry allowgamecenter allowaddinggamecenterfriends allowmultiplayergaming 536

11 ibookstore Inappropriate content download on ibookstore imessage Find friends In-app purchase Autonomous single app mode List of apps allowing auto single app mode To trust Company app Modification of cellular data settings for each application Video calling Voice dialing Background fetch for roaming Data transfer from managed to unmanaged applications Data transfer from unmanaged to managed applications AirDrop Consider AirDrop not managed Backup Document synchronization Photo stream Photo sharing Keychain synchronization Managed app synchronization Handoff Safari Cookies JavaScript Autofill Pop-up block Untrusted TLS certificate Web forgery warning Screen capture allowbookstore allowbookstoreerotica allowchat allowfindmyfriendsmodification allowinapppurchases autonomoussingleappmodepermittedappidssettin g autonomoussingleappmodepermittedappids allowenterpriseapptrust allowappcellulardatamodification allowvideoconferencing allowvoicedialing allowglobalbackgroundfetchwhenroaming allowopenfromunmanagedtomanaged allowopenfrommanagedtounmanaged allowairdrop forceairdropunmanaged allowcloudbackup allowclouddocumentsync allowphotostream allowsharedstream allowcloudkeychainsync allowmanagedappscloudsync allowactivitycontinuation allowsafari safariacceptcookies safariallowjavascript safariallowautofill safariallowpopups allowuntrustedtlsprompt safariforcefraudwarning allow allowscreenshot 537

12 Siri Siri on lock screen Web serach result on Siri Profanity filter on Siri Submission of diagnosis and usage details Passbook on lock screen Control center on lock screen Display notifications on lock screen allowassistant allowassistantwhilelocked allowassistantusergeneratedcontent forceassistantprofanityfilter allowdiagnosticsubmission allowpassbookwhilelocked allowlockscreencontrolcenter allowlockscreennotificationsview Display Today view on lock screen allowlockscreentodayview Manual installation for profile Control editing account information Automatic updates of certificate trust settings Encryption for itunes backup itunes pairing Limit Ad tracking Factory reset Result of web search with Spotlight Block configuration Change device name Allow Bluetooth Modification Rating for each country Movies TV Shows Application allowuiconfigurationprofileinstallation allowaccountmodification allowotapkiupdates forceencryptedbackup allowhostpairing forcelimitadtracking allowerasecontentandsettings allowspotlightinternetresults allowenablingrestrictions forcedevicenamesetting allowbluetoothmodification ratingregion ratingmovies ratingtvshows ratingapps 538

device management The following policies can be applied to Knox container of Samsung devices. [Android OS, Samsung Only(Knox2+)]

device management The following policies can be applied to Knox container of Samsung devices. [Android OS, Samsung Only(Knox2+)] Knox container device management policy The following policies can be applied to Knox container of Samsung devices. System group Screen capture Clipboard Share list Google account synchronization App crash