COSU (Corporate Owned Single Use) Kiosk mode

The COSU (Corporate Owned Single Use) Kiosk mode settings disable features and Launcher settings on an Android device in kiosk mode.

Restriction settings

The following table describes the settings that you can manage on an Android device in kiosk mode:

Policy setting	Description	Supported devices
Enable Kiosk Mode	Kiosk mode is enabled on the device.	Android 6.0+ DO
COSU Mode Type	Kiosk mode that is applied on a device: Show custom home page with allowed apps - App IDs for allowed apps in kiosk mode: The apps that are allowed on a device in kiosk mode. To make the application part of a folder, specify the folder name and the application ID separated with a slash (/). For example, folder_name/app_id. The orders of the apps added here are maintained on the device. Allows all apps from app catalog: MaaS360 automatically allows all apps from the App Catalog to be used in the kiosk without adding them individually to the App IDs for the allowed Apps policy. The apps from the App Catalog that is distributed and installed on the devices are displayed in the kiosk. Note: This policy setting is available only when the Show custom Home page with allowed Apps option is selected in the COSU Mode Type. The sequence of apps from the kiosk policy is displayed first, according to the policy's order, and apps from the App Catalog will be placed at the end of the UI in the kiosk. Automatically launch a required app and lock the device to display only this - MaaS360 launches the configured app.	Android 6.0+ DO
App ID of the app to be automatically launched	The app ID of an app that is automatically launched on the device. Displayed if Automatically launch a required app and lock the device to display only this is selected in the COSU Mode Type.
App IDs for Apps allowed to run in the background	The apps that are specified here cannot be launched from kiosk mode but they continue to run in the background. This is only required for special cases. For more information on configuring background apps, see Configuring background apps in Android Kiosk mode.	MaaS360 for Android app version 7.90+ Android 6.0+ (DO)
Time after which app should be launched automatically (in seconds)	Configure the time before the configured app is automatically launched when users exit the single app mode. Users exit the single app mode to perform activities such as changing device settings and checking the billing ID. Important: If this setting is not configured, the configured app is automatically launched 60 seconds after users exit the single app mode. Supported only for the single app mode. To enable the single app mode, the COSU Mode Type setting must be set to Automatically launch a required app and lock the device to display only this.	Android 6.0+ (DO)
Set device to kiosk mode (only for multi-app kiosk)	Immediately: Kiosk mode is launched immediately. Once any allowlisted app is installed: Kiosk mode is launched when the first app in the kiosk allowlist is added.	Android 6.0+ DO
Keep device on when plugged in	If this setting is disabled, the device can sleep when tethered to a power source. The screen can continue to dim based on the device's Screen Timeout settings. This setting applies to all applications.	Android 6.0+ DO
Enable widgets	Allows users to add or delete widgets on a device in kiosk mode.	Android 6.0+ DO
Wi-Fi Settings	Enables Wi-Fi Settings on the kiosk launcher.	Android 6.0+ DO
Allow Users to set Screen Brightness	Allows users to set screen brightness on the device. If this setting is enabled, the brightness set by the user overrides the system settings.	MaaS360 for Android app 6.30+
Bluetooth Settings	Enables Bluetooth settings on the kiosk launcher.	Android 6.0+ DO
Auto update kiosk app only when kiosk mode is exited Auto upgrade kiosk	The MaaS360 core app 5.75+ in kiosk mode is upgraded to the latest kiosk only when Kiosk is enabled on the device. If kiosk mode is already enabled on the device and an upgraded version is available, then the kiosk needs to be exited and should be enabled again to upgrade the kiosk app. This ensures that the device's current kiosk version is replaced with the upgraded one during the enablement process.	Android 6.0+ DO
Auto update kiosk app without exiting kiosk mode	The MaaS360 core app 8.60+ in kiosk mode is automatically upgraded to the latest kiosk without exiting kiosk mode. Whenever new updates are available, the kiosk app is updated immediately with a silent upgrade without any interruption of existing functions. Important: This policy takes precedence over the Auto update kiosk app only when kiosk mode is exited Auto upgrade kiosk policy. Whenever the Auto update kiosk app without exiting kiosk mode policy is enabled, the Kiosk app will auto-upgrade without exiting, regardless of the other policy settings (either enabled or disabled). By default, third-party apps allowed in the Kiosk are also updated silently without exiting the Kiosk Launcher without any policy control. For more information, see https://www.ibm.com/support/pages/node/7156356.	Android 6.0+ DO
Enable admin bypass for kiosk mode	The user can use a passcode that is set up by the administrator to temporarily bypass kiosk mode on the device. The following settings can be configured for bypass mode: Admin-Defined passcode: The passcode contains a minimum of 4 characters, and supports only letters and numbers. Enable dynamic passcode generation: The passcode is dynamically generated for each bypass action.	Android 6.0+ DO
Allow introductory hints on first app launch	If this setting is enabled, apps display tutorials when the app is first launched on a device.	Android 6.0+ DO
Block hardware keys	The user cannot use hardware keys on a device in kiosk mode. For more information about the supported keys for a device in kiosk mode, see https://developer.android.com/reference/android/view/KeyEvent.html	Android 6.0+ DO
Hide system UI	If this setting is enabled, the status bar, navigation bar, power menu, and keyguard feature are disabled. Note: This setting overrides the individual settings for Home, navigation bar, notifications, status bar, system bar, and system popups.	Android 9.0+ (DO)
Hide System Popups	If this setting is enabled, the power button long-press menu (Power off and restart options) is disabled.	Android 9.0+ (DO)
Hide Keyguard	If this setting is enabled, the keyguard (lock screen) features are disabled on the device such as PIN/Pattern/Password, face scan, fingerprint, iris, camera, notifications, and widgets.	Android 9.0+ (DO)
Hide Home Button	If this setting is enabled, the Home button on the navigation bar is disabled. Note: If the Home button is hidden, the notification and navigation bars are also hidden.	Android 9.0+ (DO)
Hide Navigation Bar	If this setting is enabled, the navigation bar (Home, Recents) is disabled. Note: For Samsung devices that use KNOX with DO, the settings apply to tablets only. The navigation bar is enabled only if the Home button is enabled.	DO with KNOX (SAFE 4.0+) Android 9.0+ (DO)
Show App Badges	Allows users to subscribe to badge notifications such as missed calls or new email alerts especially if the notification bar is disabled. For more information about app badges, see https://www.ibm.com/support/pages/node/1073822. This policy lets you restrict the display of the Show App Badges and the Hide App Badges options in the kiosk settings on the device. This policy is enabled by default. If this policy is disabled, the Show App Badges option in the Kiosk/COSU settings is not available to users. Note: Do not blocklist the Settings app.

Kiosk Launcher settings (optional)

The following table describes the Launcher settings that you can customize on an Android device in kiosk mode:

Policy setting	Description	Supported devices
Disable auto rotate	The user cannot automatically rotate the device screen in kiosk mode. If you enable this setting, the device view changes when the user rotates the device.	Android 6.0+ DO
Screen orientation in Portrait Mode	The user can launch a kiosk mode device in Portrait Mode.	Android 6.0+ DO
App icon size	The size of the app icon that is displayed for the Launcher.	Android 6.0+ DO
App name font size	The font size that is used to display the app name on a device in kiosk mode.	Android 6.0+ DO
Allow users to rearrange icons	The user can rearrange icons on a device in kiosk mode.	Android 6.0+ DO
Allow users to change wallpaper	The user can change the wallpaper on a device in kiosk mode. Additional wallpaper options: The selected wallpaper to use on the device. This setting is only supported for Android MDM App 5.35+.	Android 6.0+ DO
Show custom status bar	A status bar displays the status of battery life, Wi-Fi connectivity, and mobile network connectivity on a device in kiosk mode.	Android 6.0+ DO
Logo position	The position of the logo that is displayed on a device in kiosk mode.	Android 6.0+ DO
System apps to be allowed	The following apps and settings are allowed from the Launcher on a device in kiosk mode: Chrome Camera Calendar Contacts Settings Gmail Dialer Gallery Google Play Store	Android 6.0+ DO
Allow MaaS360 apps	The following MaaS360® managed apps and settings can be launched on a device in kiosk mode: MaaS360 Email MaaS360 Docs MaaS360 Browser MaaS360 Messages MaaS360 App Catalog Note: Also distribute these apps to devices through the App workflows available in the MaaS360 Portal. kiosk	Android 6.0+ DO
Show Sign In and Sign Out options for shared devices	When this setting is turned on, the Sign in and Sign out options are displayed directly in the Kiosk launcher. Note: This policy setting is available only in the Kiosk multi-app mode. If the Show custom Home page with allowed apps option is selected in the COSU Mode Type. This setting is not available in the single-app mode.	Android 6.0+ DO

Kiosk Device Settings (optional)

The following table describes the device settings that you can customize on an Android device in kiosk mode:

Policy setting	Description	Supported devices
Show custom Wi-Fi settings	If this setting is turned on, the Wi-Fi settings on the device are enabled through the MaaS360 custom UI and show only the necessary options.	Android 5.75+ DO
Show custom Bluetooth settings	If this setting is turned on, the Bluetooth settings on the device are enabled through the MaaS360 custom UI and show only the necessary options.	Android 5.75+ DO
Show settings provided by device manufacturers	If this setting is turned on, only the settings that are specified by device manufacturers in the Kiosk Launcher settings are shown on the device. You can enable the following settings: Accessibility settings Biometrics and passcode settings Bluetooth Settings Location settings NFC Settings Note: Enabling this setting might allow users to navigate to other relevant sections related to this setting on the device.	Android 8.60+ DO
Add custom launch item	If this setting is turned on, you can add custom launch items using the Android custom intent feature. For more information, see Android custom intent. Note: Enabling this setting might allow users to navigate to other relevant sections related to this setting on the device.	Android 8.60+ DO

Kiosk Additional Settings

Add custom settings to configure display of options that aren't built in to the MaaS360 portal. You can use these settings to control features and settings on an Android device in kiosk mode. For more information, see Configuring Additional settings in Android Kiosk mode.