- Kaspersky Secure Mobility Management help
- What's new
- Working in Kaspersky Security Center Web Console
- About Kaspersky Secure Mobility Management
- Getting started
- Solution architecture
- Deployment scenarios
- Deploying a mobile device management solution in Kaspersky Security Center Web Console
- Deploying Kaspersky Security Center Linux and Kaspersky Security Center Web Console
- Deploying mobile management plug-ins
- Configuring Administration Server settings for connecting mobile devices
- Scenario: Configuring a connection gateway to connect mobile devices to Kaspersky Security Center Web Console
- Adding installation packages to Administration Server repository
- Adding a license key to the Administration Server repository
- Installing Network Agent Linux
- Configuring Kaspersky Security Center Linux Web Server settings
- Deploying an iOS device management system
- About iOS device operating modes
- About device management profiles
- Deploying Kaspersky Security for iOS
- Deploying a management system using the iOS MDM protocol
- Deploying iOS MDM Server
- Configuring an iOS MDM Server installation package
- Installing iOS MDM Server using a remote installation task
- Local installation of iOS MDM Server on a device via an installation package
- Updating iOS MDM Server using a remote installation task or locally
- Deleting iOS MDM Server using a remote uninstallation task
- Viewing the list of installed iOS MDM Servers and configuring their settings
- Configuring an iOS MDM Server certificate
- Configuring a reserve iOS MDM Server certificate
- Receiving or renewing an APNs certificate
- Installing an APNs certificate on iOS MDM Server
- Configuring access to Apple Push Notification service
- iOS MDM Server events
- Obtaining iOS MDM Server diagnostic data
- Deploying iOS MDM Server
- Deploying an Android device management system
- About Android device operating modes
- Using Firebase Cloud Messaging
- Deploying Kaspersky Endpoint Security for Android
- Permissions for Kaspersky Endpoint Security for Android
- Starting and stopping Kaspersky Endpoint Security for Android
- Activating Kaspersky Endpoint Security for Android
- Updating Kaspersky Endpoint Security for Android
- Removing Kaspersky Endpoint Security for Android
- Managing mobile devices in Kaspersky Security Center Web Console
- Creating administration groups
- Configuring policies
- Creating a policy
- Modifying a policy
- Copying a policy
- Moving a policy to another administration group
- Viewing the list of policies
- Viewing the policy distribution results
- Managing revisions to policies
- Restricting permissions to configure policies
- Configuring role-based access control
- Configuring policy profiles
- Deleting a policy
- Connecting mobile devices to Kaspersky Security Center Web Console
- Configuring synchronization settings
- Managing certificates of mobile devices
- Configuration and management
- Control
- Protection
- Configuring anti-malware protection on Android devices
- Protecting Android devices on the internet
- Protection of data on a stolen or lost device
- Configuring the device unlock password strength
- Configuring a virtual private network (VPN)
- Configuring Firewall on Android devices (only Samsung)
- Protecting Kaspersky Endpoint Security for Android against removal
- Detecting hacked devices
- Configuring a global HTTP proxy on iOS MDM devices
- Adding security certificates to iOS MDM devices
- Adding a SCEP profile to iOS MDM devices
- Restricting SD card usage (only Samsung)
- Management of mobile devices
- Managing Android devices
- Managing iOS MDM devices
- Adding a configuration profile
- Installing a configuration profile on a device
- Removing a configuration profile from a device
- Configuring managed apps
- Installing an app on a mobile device
- Removing an app from a device
- Configuring roaming on an iOS MDM mobile device
- Viewing information about an iOS MDM device
- Disconnecting an iOS MDM device from management
- Configuring kiosk mode for iOS MDM devices
- Management of mobile device settings
- Configuring connection to a Wi-Fi network
- Configuring email
- Configuring protection levels in Kaspersky Security Center
- Managing app configurations
- Managing app permissions
- Creating a report on installed mobile apps
- Installing root certificates on Android devices
- Configuring notifications for Kaspersky Endpoint Security for Android
- Connecting iOS MDM devices to AirPlay
- Connecting iOS MDM devices to AirPrint
- Configuring the Access Point Name (APN)
- Corporate container
- Adding an LDAP account
- Adding a contacts account
- Adding a calendar account
- Configuring a calendar subscription
- Configuring SSO
- Managing Web Clips
- Setting a wallpaper
- Adding fonts
- Working with commands for mobile devices
- Managing the app by using third-party EMM systems (Android only)
- Participating in Kaspersky Security Network
- Samsung Knox
- Using the Kaspersky Endpoint Security for Android app
- App features
- Main window at a glance
- Status bar icon
- Device scan
- Running a scheduled scan
- Changing the Protection mode
- Anti-malware database updates
- Scheduled database update
- Things to do if your device gets lost or stolen
- Web Protection
- Get Certificate
- Synchronizing with Kaspersky Security Center
- Activating the Kaspersky Endpoint Security for Android app without Kaspersky Security Center
- Installing the app on corporate devices
- Installing root certificates on the device
- Installing and using mail and VPN certificates on the device
- Enabling accessibility on Android 13 or later
- Updating the app
- Removing the app
- Applications with a briefcase icon
- Knox app
- Using the Kaspersky Security for iOS app
- Application licensing
- Comparison of solution features by management tool
- Contact Technical Support
- Sources of information about the application
- Glossary
- Activating the application
- Activation code
- Administration group
- Administration Server
- Administrator's workstation
- Anti-malware databases
- Apple Push Notification service (APNs) certificate
- Application management plug-in
- Basic control
- Basic protection
- Certificate Signing Request
- Compliance Control
- Corporate container
- Corporate device
- Device administrator
- Device management profile
- End User License Agreement
- Group task
- IMAP
- Installation package
- iOS MDM device
- iOS MDM profile
- iOS MDM Server
- Kaspersky categories
- Kaspersky Private Security Network (KPSN)
- Kaspersky Security Center Administrator
- Kaspersky Security Center Web Server
- Kaspersky Security Network (KSN)
- Kaspersky update servers
- Key file
- License
- License term
- Malware
- Manifest file
- Network Agent
- Personal device
- Phishing
- Policy
- POP3
- Proxy server
- Quarantine
- SSL
- Standalone installation package
- Subscription
- Supervised device
- Unlock code
- Virtual Administration Server
- Information about third-party code
- Trademark notices
Configuring kiosk mode for iOS MDM devices
Kiosk mode is an iOS feature that lets you limit the set of apps available to a device user to a single app. In this mode, a device user can open only one app that is allowed on the device and specified in the kiosk mode settings.
The kiosk mode settings apply to iOS MDM devices managed through Kaspersky Security Center.
Open the kiosk mode settings
To open the kiosk mode settings:
- In the console tree, in the Managed devices folder, select the administration group to which the iOS MDM devices belong.
- In the workspace of the group, select the Policies tab.
- Open the policy properties window by double-clicking any column.
Complete the following steps within 15 minutes. Otherwise, you may face an error when saving changes to the policy.
- In the policy Properties window, select the Kiosk mode section.
Configure kiosk mode
To enable kiosk mode:
- Click the Enable kiosk mode (supervised only) check box to activate kiosk mode on a supervised device.
- In the App's bundle ID field, enter the unique identifier of an app selected for kiosk mode (for example, com.apple.calculator). How to get the bundle ID of an app
To select a different app, you need to disable kiosk mode, save the changes to the policy, and enable kiosk mode for a new app.
The app that is selected for kiosk mode must be installed on the device. Otherwise, the device will be locked until kiosk mode is disabled.
The use of the selected app must also be allowed in the policy settings. If the use of the app is prohibited, kiosk mode will not be enabled until the selected app is removed from the list of forbidden apps.
In some cases, if the use of the selected app is prohibited in the policy settings, kiosk mode can still be enabled.
To get the bundle ID of a native iPhone or iPad app,
Follow the instruction in Apple documentation.
To get the bundle ID of any iPhone or iPad app:
- Open App Store.
- Find the required app and open its page.
The app's URL ends with its numerical identifier (for example, https://apps.apple.com/us/app/google-chrome/id535886823).
- Copy this identifier (without letters "id").
- Open the web page https://itunes.apple.com/lookup?id=<copied identifier>.
This downloads a text file.
- Open the downloaded file and find there the "bundleId" fragment.
The text that directly follows this fragment is the bundle ID of the required app.
To get the bundle ID of an app that has been added to Kaspersky Security Center:
- In the console tree of Kaspersky Security Center go to Advanced > Remote installation > Installation packages.
- Click the Additional actions button and select Manage mobile apps packages in the drop-down list.
In the Mobile apps package management window that opens, identifiers of managed apps are displayed in the Application name column.
If you have an app package as an .apk or .ipa file and want to know the app identifier, you can add the app package to the Mobile apps package management window by clicking the New button and following the on-screen instructions.
- Specify the settings that will be enabled on the device in kiosk mode. For available settings, see the "Kiosk mode settings" section below.
- Specify the settings that the user can edit on the device in kiosk mode.
- Click the Apply button to save the changes you have made.
Once the changes to the policy are saved, kiosk mode is enabled. The selected app is forced to open on a supervised device, while the use of other apps is prohibited. The selected app reopens immediately after the device is restarted.
To edit the kiosk mode settings, you need to disable kiosk mode, save changes to the policy, and then enable kiosk mode again with the new settings.
To disable kiosk mode:
- Select the Disable kiosk mode (supervised only) check box to deactivate kiosk mode on a supervised device.
- Click the Apply button to save the changes you have made.
Once the changes to the policy are saved, kiosk mode is disabled. The use of all apps is allowed on a supervised device.
Now, you can enable kiosk mode again with the new settings.
Kiosk mode settings
- Auto-Lock
If the check box is selected, Auto-Lock is enabled. The screen is automatically locked on the device.
If the check box is cleared, Auto-Lock is disabled.
This check box is selected by default.
- Touch (not recommended to disable)
If the check box is selected, all touch input capabilities are enabled.
If the check box is cleared, all touch input capabilities are disabled.
This check box is selected by default.
- AssistiveTouch
If the check box is selected, AssistiveTouch is enabled. The device screen is adapted to the user's unique physical needs.
If the check box is cleared, AssistiveTouch is disabled.
This check box is cleared by default.
- Voice Control
If the check box is selected, Voice Control is enabled. The user can navigate and interact with the device using voice commands.
If the check box is cleared, Voice Control is disabled.
This check box is cleared by default.
- VoiceOver
If the check box is selected, VoiceOver is enabled. Audible descriptions of what appears on the screen are given.
If the check box is cleared, VoiceOver is disabled.
This check box is cleared by default.
- Speak Selection
If the check box is selected, Speak Selection is enabled. The text selected on the screen is spoken.
If the check box is cleared, Speak Selection is disabled.
This check box is cleared by default.
- Volume Buttons
If the check box is selected, the volume buttons are enabled. The user can adjust the volume on the device.
If the check box is cleared, the volume buttons are disabled.
This check box is selected by default.
- Mono Audio
If the check box is selected, Mono Audio is enabled. The left and right headphone channels are combined to play the same content.
If the check box is cleared, Mono Audio is disabled.
This check box is cleared by default.
- Zoom
If the check box is selected, Zoom is enabled. The user can zoom in and out on the content on the screen.
If the check box is cleared, Zoom is disabled.
This check box is selected by default.
- Auto-Rotate Screen
If the check box is selected, Auto-Rotate Screen is enabled. Screen orientation automatically changes when the device is rotated.
If the check box is cleared, Auto-Rotate Screen is disabled.
This check box is selected by default.
- Invert Colors
If the check box is selected, inverting colors on the screen is enabled. The displayed colors are changed to their opposite colors.
If the check box is cleared, inverting colors on the screen is disabled.
This check box is cleared by default.
- Ring/Silent Switch
If the check box is selected, Ring/Silent Switch is enabled. The user can switch between Ring and Silent modes to mute or unmute sounds and alerts.
If the check box is cleared, Ring/Silent Switch is disabled.
This check box is selected by default.
- Sleep/Wake Button
If the check box is selected, the Sleep/Wake button is enabled. The user can put the device to sleep or wake the device.
If the check box is cleared, the Sleep/Wake button is disabled.
This check box is selected by default.
|
See also: |