# Getting Started with iOS Kiosk Management iOS Kiosk Management transforms an iPhone or iPad into a dedicated purpose device by locking it into a restricted environment. This ensures devices are used strictly for work-related tasks, enhancing security and productivity. To get started with iOS kiosk management using Hexnode UEM, administrators must follow a specific workflow involving supervision, app deployment, and profile configuration. Strategic Importance of iOS Kiosk Mode --------------------------------------- Implementing a Kiosk strategy transforms consumer hardware into dedicated enterprise tools. - **Enhanced Productivity**: Eliminates digital distractions by restricting access to social media, games, and personal browsing. - **Fortified Security**: Prevents users from altering critical system settings (Wi-Fi, Bluetooth, Passcode) or accessing sensitive local files. - **Customer Engagement**: Creates seamless self-service terminals for retail, hospitality, and healthcare environments. - **Cost Efficiency**: Reduces data overages and IT support tickets caused by accidental device misconfiguration. Technical Prerequisites & Compatibility -------------------------------------------- To successfully deploy Kiosk mode, your fleet must meet the following Apple-mandated requirements: - **[Supervised Mode](https://www.hexnode.com/mobile-device-management/help/ios-supervised-mode/) (Critical)**: Kiosk lockdown is a hardware-level restriction that is only available on “Supervised” devices. This state is achieved via [**Apple Business Manager (ADE)**](https://www.hexnode.com/mobile-device-management/help/enrollment-of-apple-devices-through-dep/) or [**Apple Configurator**](https://www.hexnode.com/mobile-device-management/help/apple-configurator-mdm-enrollment/). - **APNs Certificate**: A valid Apple Push Notification service certificate must be active in your Hexnode portal. - **OS Versions**: - **Single App Mode**: iOS 6.0+ - **Multi-App Mode**: iOS 9.3+ - **Autonomous Single App Mode (ASAM)**: iOS 7.0+ App Installation and Preparation --------------------------------- Before activating the kiosk lock, the necessary applications must be present on the device. You can deploy the following app types via Hexnode: - [**Store Apps**](https://www.hexnode.com/mobile-device-management/help/apple-mdm-app-distribution/): Public apps from the Apple App Store. - [**Enterprise Apps**](https://www.hexnode.com/mobile-device-management/help/distribute-ios-enterprise-app/): Custom in-house apps (.ipa files). - [**VPP Apps**](https://www.hexnode.com/mobile-device-management/help/how-to-deploy-apple-vpp-apps-with-hexnode-mdm/): Apps purchased in bulk via the Volume Purchase Program. - [**Web Apps**](https://www.hexnode.com/mobile-device-management/help/lock-ios-devices-one-website-using-kiosk-mode/): Shortcuts that launch specific URLs. Configuring Kiosk Modes ------------------------ Hexnode UEM offers different kiosk types depending on the use case. ### Single App Kiosk This [mode](https://www.hexnode.com/mobile-device-management/help/how-to-enable-kiosk-mode-for-ios/) locks the device to run exactly **one application**. - **Function**: The app launches immediately upon boot and cannot be closed. - **Use Case**: Digital signage, self-service check-in stands, or point-of-sale (POS) terminals. ### Multi-App Kiosk This [mode](https://www.hexnode.com/mobile-device-management/help/how-to-enable-multiple-app-kiosk-mode-in-ios/) allows access to a specific **allowlist of apps**. - **Function**: The device displays a custom home screen showing only the allowed apps. All other apps and settings are hidden. - **Use Case**: Field workers who need a specific set of tools (e.g., Maps, CRM, and Email) but nothing else. ### Web App Kiosk Restricts the device to a secure browser environment. - **[Function](https://www.hexnode.com/mobile-device-management/help/lock-ios-devices-one-website-using-kiosk-mode/)**: Limits navigation to specific URLs while blocking unauthorized websites and data streaming. ### Advanced Peripheral & UI Controls Unlike standard iOS management, Hexnode’s Kiosk policies offer granular control over hardware and the user experience: - **Hardware Button Lockdown**: Disable the Sleep/Wake button, Volume buttons, and the Side Switch to prevent unauthorized exits. - **User Interface Customization**: Remotely set the Home Screen and Lock Screen wallpapers to reflect corporate branding. - **Interaction Restrictions**: Disable “Touch” or “Auto-Lock” (keeping the screen always on) and manage accessibility features like Zoom or VoiceOver. ### Autonomous Single App Mode A dynamic kiosk mode that activates automatically based on user action. - [**Function**](https://www.hexnode.com/mobile-device-management/help/configuring-ios-autonomous-single-app-mode-mdm/): An app functions normally in the foreground but can trigger itself to enter “locked” kiosk mode (e.g., when a user logs in to take a test) and release itself back to normal mode when the task is finished. Maintenance: Updating Apps in Kiosk Mode ----------------------------------------- Updating apps on a locked device requires specific handling to ensure uptime. - [**Updating Store Apps**](https://www.hexnode.com/mobile-device-management/help/how-to-update-an-app-in-ios-single-app-mode/): Admins can push updates via the MDM console. If the app was installed via a “Required Apps” policy, updates can be pushed automatically. - [**Updating Enterprise Apps**](https://www.hexnode.com/mobile-device-management/help/how-to-update-enterprise-apps-in-ios-kiosk-mode-using-hexnode-mdm/): To update a custom app, add the new version to the App Inventory. If deployed as a required app, the new version will install silently in the background. ### Exiting Kiosk Mode When a device needs to be serviced or repurposed, kiosk mode must be disabled. - [**Remote Exit**](https://www.hexnode.com/mobile-device-management/help/disable-single-app-mode-ios-devices/): Administrators can remove the Kiosk policy from the Hexnode portal to return the device to standard functionality. Troubleshooting iOS Kiosk Management ------------------------------------- If you encounter issues while you get started with iOS kiosk management, refer to these common solutions: ### Issue 1: Kiosk Policy fails to apply **Cause**: The device is likely **not Supervised**. **Solution**: Check the device details in the Hexnode console. If “Supervised” is marked as “No,” you must wipe the device and re-enroll it using Apple DEP or Apple Configurator. ### Issue 2: Apps are not updating **Cause**: The device is asleep or cannot reach the Apple servers. **Solution**: iOS generally schedules app updates when the device is plugged into power and connected to Wi-Fi. Ensure the device is not in a low-power state.