Home > Enterprise Mobility Management > Apps and Software > Android Kiosk Mode in Systems Manager

Android Kiosk Mode in Systems Manager

Android devices in Device Owner Mode running Android version Marshmallow (6.0) and above can enable kiosk mode to lock users into one or more specific applications. Kiosk mode prevents user from accessing the home page, system settings, or any unauthorized apps. Kiosk Mode is helpful in cases like:

  • Locking employees into only work applications on company-owned devices
  • Preventing students from searching for answers during a test
  • Preventing the accidental closure of an app

System Manager offers the ability to deploy both Google Play Apps and Private Apps into Kiosk Mode.

Note: This article covers Kiosk Mode for devices enrolled in Android Enterprise, and does not cover the Samsung Knox-specific kiosk mode.

For information on iOS Single App Mode, see this article.

Configuring Kiosk Mode for Google Play Apps

The most common use case for kiosk mode is limiting access to specific native system apps or Play Store hosted apps, which are configured in MDM > Apps. This includes custom applications that have been uploaded to the Developer Play Store. To configure the Kiosk Mode payload for Google Play apps in Systems Manager:

  1. Navigate to Systems manager > MDM > Settings.
  2. Use an existing profile, or create a new Meraki managed profile.
  3. Select + Add Settings > More Android > Kiosk Mode.
  4. Select App Type to be Google Play Apps.
  5. Specify the System update policy. This determines the device's behavior if a system OS update is available while the device is in kiosk mode.
  6. Choose to Enable or Disable the ability to boot the device into Safe Mode.
  7. Set a numeric unlock code. This number is used to unlock the device temporarily while in kiosk mode.
  8. From the drop-down, select the applications you want to be made available whlie in kiosk mode. Only built-in apps and Android apps configured in MDM > Apps will appear in the list. If native system app isn't already listed, you can add its app identifier (e.g. com.google.example) to the list.

Note: Custom APKs uploaded on Systems manager > Apps will appear under Google Play apps.

Screen Shot 2017-10-26 at 2.10.50 PM.png

Configuring Kiosk Mode for Custom APKs

The recommended method of deploying custom Android applications is to host them on the Developer Play Store or alternatively upload them to Systems manager > Apps, both options allow them to be configured as 'Play Store Apps'. However, Systems Manager also has the ability to lock into private apps via APK URL.

  1. Navigate to Systems manager > MDM > Settings.
  2. Use an existing or create a new Meraki managed.
  3. Select + Add Settings > More Android > Kiosk Mode
  4. Select App Type to be Private Apps
  5. Specify the System update policy. This determines the device's behavior if a system OS update is initiated while the device is in kiosk mode.
  6. Choose to Enable or Disable the option of booting the device into Safe Mode.
  7. Set a numeric unlock code. This number is used to unlock the device temporarily while in kiosk mode.
  8. Select Add new APK and enter the URL where the file is hosted. The APK URL field must point to the direct download link to a publicly hosted file, or an internally hosted server accessible by the end user's device.

image.png

Using Kiosk Mode

Once kiosk mode has been pushed, your device will be locked into a screen like the following. In this example, users can switch between Jabber, Gmail, and AnyConnect through a launcher page, but cannot return to the device home page, access device settings, or start any other apps.

Unlocking a Device

In order to unlock an Android device in Kiosk Mode, unscope the profile from the device or remove the Kiosk Mode payload in Systems manager > MDM > Settings. Alternatively, long press the banner in Systems Manager 6 times to unlock and enter appropriate unlock code to temporarily unlock the device for 15 minutes.
UNLOCK.png

Re-enabling Kiosk Mode

If the profile was unscoped from the device, re-push the profile in Systems manager > MDM > Settings to re-enable kiosk mode. 

If the unlock code was used to temporarily bypass kiosk mode, follow the below steps to re-enable kiosk mode.

  1. Open the Meraki Systems Manager application on the device
  2. Select the menu at the top left and navigate to Configuration
  3. Under Policies, select Android Kiosk Mode
  4. Select Launch Kiosk Mode to put the device back into Kiosk Mode

Screenshot_20171122-102939.png       Screenshot_20171122-102945.png

You must to post a comment.
Last modified

Tags

Classifications

This page has no classifications.

Explore the Product

Click to Learn More

Article ID

ID: 6402

Explore Meraki

You can find out more about Cisco Meraki on our main site, including information on products, contacting sales and finding a vendor.

Explore Meraki

Contact Support

Most questions can be answered by reviewing our documentation, but if you need more help, Cisco Meraki Support is ready to work with you.

Open a Case

Ask the Community

In the Meraki Community, you can keep track of the latest announcements, find answers provided by fellow Meraki users and ask questions of your own.

Visit the Community