Category filter
Getting Started with Android App Management
Mobile Application Management (MAM) provides granular control at the application level, allowing administrators to secure corporate data without compromising the entire device. This guide covers how to get started with Android app management using Hexnode UEM to enforce policies, distribute software, and manage the app lifecycle.
Before you can manage applications, the devices must be active in the portal.
-
Enrollment: You must enroll your devices in Hexnode UEM to establish the communication channel required for app management.
App Distribution and Installation
Once enrolled, the core step to get started with Android app management is populating your app inventory and deploying apps to devices.
App Sources
Hexnode allows you to add apps to the inventory from multiple sources:
- Store Apps: Public apps from the Google Play Store.
- Enterprise Apps: In-house/Custom apps (APK files).
- Web Apps: Shortcuts to URLs that act like native apps.
- Managed Google Apps: Approved apps for Android Enterprise.
- Bundle IDs: Adding apps using their unique package identifier.
Organization
- App Groups/Catalogs: Bundle related apps together for easier deployment.
- Play Store Layout: Design a custom “Store” layout for users, available specifically on Android Enterprise devices.
Silent App Installation
Administrators can push apps without user intervention. The app installs in the background with no prompts.
Supported Platforms for Silent Install:
- Samsung Knox
- LG GATE
- Kyocera Business Phones
- Android Enterprise (Device Owner/Profile Owner)
- Rooted Android Devices
- Devices with Hexnode UEM as a System App
Policy and Control
Managing how apps function is just as important as installing them.
Blocklisting and Allowlisting
- Allowlist: Permit only specific essential apps to run.
- Blocklist: Prevent specific non-compliant apps from launching.
Mandatory Installation
-
Required Apps: Enforce the installation of essential tools. If a user uninstalls a required app, Hexnode can automatically reinstall it.
Configurations and Permission
Pre-configure app settings (like server URLs or login hints) and define permissions (access to camera/contacts) before the app reaches the user.
This feature is primarily supported on Android Enterprise devices.
App Lifecycle Maintenance
To successfully get started with Android app management, you must plan for updates, maintenance, and eventual removal.
Updating Apps
- Standard Updates: Push the latest versions of Store or Enterprise apps remotely.
- Kiosk Mode Updates: Update Enterprise apps or the Hexnode Agent itself without exiting Kiosk mode, ensuring zero downtime for dedicated devices.
Downgrading Apps
If a new update is buggy, Hexnode allows you to push a lower version of the app to downgrade it to a stable state.
Data Management
Clear Cache/Data: Remotely wipe application data or cache to resolve glitches or free up space.
This feature is supported only on Samsung Knox devices.
Uninstallation
Apps can be removed in three ways:
- Manual: Admin initiates removal from the console.
- Policy Removal: If an app was installed via a policy, removing that policy removes the app.
- Disenrollment: Apps can be set to automatically uninstall when the device leaves Hexnode management.
Troubleshooting Android App Management
Common issues administrators face when they get started with Android app management, and how to fix them.
1: Silent Installation Failed
Symptoms: The user is prompted to tap “Install” manually, or the command times out.
Cause: The device does not have the necessary privileges.
Solution: Ensure the device is enrolled via Android Enterprise or is a Samsung Knox device. Standard Android devices usually require user confirmation for installs due to OS security.
2: App Configurations are not applying
Symptoms: The app installs, but the pre-configured settings (like email server address) are empty.
Cause: The app itself does not support “Managed Configurations.”
Solution: Check the app developer’s documentation. Not all apps are coded to accept MDM configurations via the Android Enterprise standard.
3: Cannot Clear App Cache Remotely
Symptoms: The action is greyed out or fails immediately.
Cause: The device is not Samsung Knox.
Solution: This feature is exclusive to Samsung’s API. For other devices, the user must clear cache manually via Settings > Apps.
Frequently Asked Questions (FAQ)
Q: Can admins install apps silently on any Android phone using Hexnode?
A: No. Silent installation requires elevated privileges. It works on Android Enterprise (Work Profile/Device Owner), Samsung Knox, LG GATE, Kyocera, or rooted devices. Standard Android enrollments will prompt the user to accept the installation.
Q: What happens if admins remove a “Required App” from the policy?
A: If you configured the policy to “Remove app from the device on policy removal,” the app will be uninstalled. Otherwise, it will remain on the device but will no longer be enforced (the user can uninstall it manually).
Q: Can admins update an app while the device is locked in Kiosk mode?
A: Yes. Hexnode supports updating Enterprise apps and the Hexnode Agent while in Kiosk mode. However, for Store apps, the Play Store usually requires background access, which might require specific Kiosk settings to function correctly.
Q: How do admins downgrade an app?
A: You can downgrade an app by uploading an APK file with a lower version number than the one currently installed and pushing it to the device via the Hexnode console.
