Category filter

Getting Started with iOS Kiosk Management

iOS Kiosk Management transforms an iPhone or iPad into a dedicated purpose device by locking it into a restricted environment. This ensures devices are used strictly for work-related tasks, enhancing security and productivity.

To get started with iOS kiosk management using Hexnode UEM, administrators must follow a specific workflow involving supervision, app deployment, and profile configuration.

Strategic Importance of iOS Kiosk Mode

Implementing a Kiosk strategy transforms consumer hardware into dedicated enterprise tools.

Enhanced Productivity: Eliminates digital distractions by restricting access to social media, games, and personal browsing.
Fortified Security: Prevents users from altering critical system settings (Wi-Fi, Bluetooth, Passcode) or accessing sensitive local files.
Customer Engagement: Creates seamless self-service terminals for retail, hospitality, and healthcare environments.
Cost Efficiency: Reduces data overages and IT support tickets caused by accidental device misconfiguration.

Technical Prerequisites & Compatibility

To successfully deploy Kiosk mode, your fleet must meet the following Apple-mandated requirements:

Supervised Mode (Critical): Kiosk lockdown is a hardware-level restriction that is only available on “Supervised” devices. This state is achieved via Apple Business Manager (ADE) or Apple Configurator.
APNs Certificate: A valid Apple Push Notification service certificate must be active in your Hexnode portal.
OS Versions:
- Single App Mode: iOS 6.0+
- Multi-App Mode: iOS 9.3+
- Autonomous Single App Mode (ASAM): iOS 7.0+

App Installation and Preparation

Before activating the kiosk lock, the necessary applications must be present on the device. You can deploy the following app types via Hexnode:

Store Apps: Public apps from the Apple App Store.
Enterprise Apps: Custom in-house apps (.ipa files).
VPP Apps: Apps purchased in bulk via the Volume Purchase Program.
Web Apps: Shortcuts that launch specific URLs.

Configuring Kiosk Modes

Hexnode UEM offers different kiosk types depending on the use case.

Single App Kiosk

This mode locks the device to run exactly one application.

Function: The app launches immediately upon boot and cannot be closed.
Use Case: Digital signage, self-service check-in stands, or point-of-sale (POS) terminals.

Multi-App Kiosk

This mode allows access to a specific allowlist of apps.

Function: The device displays a custom home screen showing only the allowed apps. All other apps and settings are hidden.
Use Case: Field workers who need a specific set of tools (e.g., Maps, CRM, and Email) but nothing else.

Web App Kiosk

Restricts the device to a secure browser environment.

Function

Advanced Peripheral & UI Controls

Unlike standard iOS management, Hexnode’s Kiosk policies offer granular control over hardware and the user experience:

Hardware Button Lockdown: Disable the Sleep/Wake button, Volume buttons, and the Side Switch to prevent unauthorized exits.
User Interface Customization: Remotely set the Home Screen and Lock Screen wallpapers to reflect corporate branding.
Interaction Restrictions: Disable “Touch” or “Auto-Lock” (keeping the screen always on) and manage accessibility features like Zoom or VoiceOver.

Autonomous Single App Mode

A dynamic kiosk mode that activates automatically based on user action.

Function

Maintenance: Updating Apps in Kiosk Mode

Updating apps on a locked device requires specific handling to ensure uptime.

Updating Store Apps: Admins can push updates via the MDM console. If the app was installed via a “Required Apps” policy, updates can be pushed automatically.
Updating Enterprise Apps: To update a custom app, add the new version to the App Inventory. If deployed as a required app, the new version will install silently in the background.

Exiting Kiosk Mode

When a device needs to be serviced or repurposed, kiosk mode must be disabled.

Remote Exit

Troubleshooting iOS Kiosk Management

If you encounter issues while you get started with iOS kiosk management, refer to these common solutions:

Issue 1: Kiosk Policy fails to apply

Cause: The device is likely not Supervised.

Solution: Check the device details in the Hexnode console. If “Supervised” is marked as “No,” you must wipe the device and re-enroll it using Apple DEP or Apple Configurator.

Issue 2: Apps are not updating

Cause: The device is asleep or cannot reach the Apple servers.

Solution: iOS generally schedules app updates when the device is plugged into power and connected to Wi-Fi. Ensure the device is not in a low-power state.

Frequently Asked Questions (FAQs)

Q1: Can I turn a personal (BYOD) iPhone into a kiosk?

A: Generally, no. Kiosk mode requires the device to be Supervised, which implies the device is institutionally owned. Supervising a personal device requires wiping it, which is usually not suitable for BYOD scenarios.

Q2: What happens if the device reboots while in Single App Mode?

A: The device will boot up and immediately launch the designated kiosk app. The user will not see the Apple home screen or lock screen.

Q3: Do I need an Apple ID for Kiosk Mode?

A: Not necessarily. If you use VPP (Volume Purchase Program) device-based licensing for Store apps, or if you use Enterprise apps, you do not need a personal Apple ID logged in on the device.

Q4: How does Autonomous Single App Mode differ from standard Single App Mode?

A: Standard Single App Mode is “always on” until the admin removes the policy. Autonomous Mode allows the app itself (if developed with the correct code) to lock and unlock the device based on specific workflows (like starting a secure exam).

Q5: Can I control volume in Web App Kiosk Mode?

A: Yes. When configuring the Kiosk policy in Hexnode, you can choose to enable or disable hardware buttons, including volume controls and the sleep/wake button.

Need more help?

Raise a Ticket

Ask Community

Chat With us