Kaspersky Secure Mobility Management

Configuring other apps

Expand all | Collapse all

These settings apply to corporate devices and devices with a corporate container.

The Configure other apps settings let you configure installed apps that support configurations.

To add app configurations:

1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Policies & profiles. In the list of group policies that opens, click the name of the policy that you want to configure.
2. In the policy properties window, select Application settings.
3. Select Android and go to the App configuration section.
4. On the Configure other apps card, click Settings.

   The Configure other apps window opens.

5. Enable the settings using the Configure other apps toggle switch.
6. Click Add.

   The Add app configuration window opens.

7. In the Method for adding configuration drop-down list, select how to add configuration:
   • App package uploaded by administrator

     When adding an app configuration by using an APK file from your computer, you must select a file saved on your computer.

     After that, you can view the description for each setting of the configuration. These descriptions are part of the configuration file.

     Configuration keys uploaded from the app package cannot be deleted. If you want to add a new setting to the uploaded configuration, click the Add setting button.

   • Kaspersky Security Center installation package

     When adding an app configuration using an installation package from Kaspersky Security Center, you need to select the app from a list of mobile app packages.

     After that, you can view the description for each setting of the configuration. These descriptions are part of the configuration file.

     Settings of configurations added using installation packages cannot be deleted.

   • Manual configuration

     When this method is selected, click the Add setting button to add a new setting to the configuration.

8. In the Configuration data section, specify the following settings:
   • App name

     Name of the app to which the configuration is to be applied.

     When importing a configuration from an APK file or an installation package, the value is inserted automatically.

   • Package name

     Name of the package to which the configuration is to be applied.

     How to get the package name of an app

     To get the name of an app package:

     1. Open Google Play.
     2. Find the app and open its page.

     The app's URL ends with its package name (for example, https://play.google.com/store/apps/details?id=com.android.chrome).

     To get the name of an app package that has been added to Kaspersky Security Center:

     1. In the main window of Kaspersky Security Center Web Console, select Assets (Devices) → Mobile → Apps.
     2. Click Android apps.

        In the list of apps that opens, app identifiers are displayed in the Package name column.

     When importing a configuration from an APK file or an installation package, the value is inserted automatically.

     You can add only one configuration for each package name.

   • Version

     Version of the app, that the created configuration will be based on.

     When importing a configuration from an APK file or installation package, the value is inserted automatically.

   • Comment

     An optional comment.

   An example of configured basic parameters for the Microsoft Outlook app.

   Microsoft Outlook app configuration

   Configuration key	Description	Type	Value	Default value
   com.microsoft.outlook.EmailProfile.EmailAccountName	Username	String	The username that will be used to pull the username from Microsoft Active Directory. It might be different from the user's email address. You can either enter a value or select a macro by clicking the button. For example, User.
   com.microsoft.outlook.EmailProfile.EmailAddress	Email address	String	The email address that will be used to pull the user's email address from Microsoft Active Directory. You can either enter a value or select a macro by clicking the button. For example, user@companyname.com.
   com.microsoft.outlook.EmailProfile.EmailUPN	User Principal Name or username for the email profile that is used to authenticate the account	String	The name of the user in email address format. For example, userupn@companyname.com.
   com.microsoft.outlook.EmailProfile.ServerAuthentication	Authentication method	String	Username and Password – Prompts the device user for their password. Certificates – Certificate-based authentication.	Username and Password
   com.microsoft.outlook.EmailProfile.ServerHostName	ActiveSync FQDN	String	The Exchange ActiveSync email server URL. You don't need to use http:// or https:// in front of the URL. For example, mail.companyname.com.
   com.microsoft.outlook.EmailProfile.AccountDomain	Email domain	String	The account domain of the user. You can either enter a value or select a macro by clicking the button. For example, companyname.
   com.microsoft.outlook.EmailProfile.AccountType	Authentication type	String	ModernAuth – Uses a token-based identity management method. Specify ModernAuth as the Account Type for Exchange Online. BasicAuth – Prompts the device user for their password. Specify BasicAuth as the Account Type for Exchange On-Premises.	BasicAuth

9. Click the Add setting button to add a block of the app configuration settings. You can add several blocks of settings.

   Specify the following parameters for each block of settings of the configuration:

   • Key

     Cannot be left blank. The value of this parameter is filled in manually.

   • Type

     Cannot be left blank. The value of this parameter is selected from a drop-down list.

     The following types are available:

     • String. A sequence of characters, digits, or symbols, always treated as text.
     • Bool. True or false.
     • Integer. A numeric data type for numbers without fractions.
     • Bundle. A set of fields of any type, except for Bundle or BundleArray.
     • BundleArray. A set of Bundles.
   • Value

     An optional parameter, whose value depends on the setting type.

   For some types of settings, additional parameters can be configured. For example:

   • You can add macros for a String.
   • You can add a field to a Bundle.
   • You can add a Bundle to a BundleArray.

   It is also possible to edit a setting to be added to a BundleArray by clicking the Configure Bundle button and configuring the setting's parameters.

   For information about configuring rules, please refer to the official documentation for the app to be configured.

10. Click Add.

    The configuration appears in the list of app configurations.

    You can modify or delete app configurations in the list using the Edit and Delete buttons at the top of the list.

11. Click OK.
12. Click Save to save the changes you have made.

The app configuration is applied.

Some apps may not notify Kaspersky Endpoint Security for Android that the app configuration has been applied.

When configuring some apps, certificates installed on devices via Kaspersky Security Center can be used. In this case, you must specify a certificate alias in the app configuration:

• VpnCert for VPN certificates.
• MailCert for mail certificates.
• SCEP_profile_name for certificates received using SCEP.