Question & Answer
Question
What will be the expected behavior on Android 10+ device when MaaS360 agent targets Android Q (10) APIs and Device Admin management (DA) is considered deprecated?
Answer
Device Admin policy features that will no longer be supported on Android 10+ with MaaS360 app version 7.20
- Passcode policies - Quality, length or expiry
- Restrictions > Camera
- Security > Disable Keyguard Features
- Device Management> Disable Device Management Actions
- Wi-Fi policies > Ability to detect whether a WiFi profile is configured is no longer available. This may lead to some undesired outcomes. Eg: same Wi-Fi profiles could be configured number of times
- App Compliance > Action policy > "Block from use" or "Block App" for any blocklisted application or apps running blocklisted permissions.
- All OEM specific policies for LG, Kyocera, M3, Panasonic, Bluebird will not work. Samsung and Zebra specific policies will continue to work.
Other device and reporting impacts on Device Admin (DA) enrolled devices
•Factory WiFi MAC address, Platform Serial Number, and IMEI will no longer be reported on DA enrolled devices.
•Google has deprecated Android Beam (NFC) support. This will impact NFC based DO enrollments for devices on 10+
•Buzz, Send Message actions comes as notification, rather than a forced action. Buzz will time out after 3mins user does not accept.
•Background app restrictions imposed on Android 10. Not all apps will function in the background as they did previously.
•Security Policies on Apps workflow such as Enforce authentication and compliance not supported.
•App compliance policy to Block app from use not supported
•Instant Install works only on Samsung and Zebra. Will cease functioning on other OEMs
Moving forward....
•DA Enrollments will continue to work, but there are no workarounds for the above restrictions, other than migrating to an Android Enterprise scenario. KME enrollments will continue to work as well.
•New Customers will need to setup Android Enterprise without which Android Enrollments will not proceed.
•Already enrolled DA devices will continue to work, however, the devices will lose API functionalities on upgrade to 10/Target.
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSXX","label":"IBM MaaS360"},"Component":"","Platform":[{"code":"PF003","label":"Android"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]
Was this topic helpful?
Document Information
Modified date:
08 September 2020
UID
ibm16091042