# How to configure Lenovo devices with OEMConfig Organizations often require advanced enterprise-grade device management features specific to the mobile device they use. OEMConfig enables you to remotely configure advanced device management features custom to Lenovo mobile devices through the Hexnode UEM console. OEMConfig app is a set of custom build APIs that help create custom device-specific features that the UEM can support in no time. The Lenovo OEMConfig is one such app that allows you to remotely manage the devices when incorporated with a UEM solution. With these OEMConfig capabilities and the built-in device features of Hexnode, you can exercise complete management of your device with ease. Note It is recommended to use the UEM specific device management feature if supported, as opposed to the corresponding OEMConfig feature to reduce discrepancies. To configure Lenovo devices with OEMConfig, 1. Enroll your organization in the [Android Enterprise](https://www.hexnode.com/mobile-device-management/help/how-to-enroll-organization-in-android-enterprise-using-hexnode-mdm/). 2. Enroll the devices in the Android Enterprise either as [Device Owner](https://www.hexnode.com/mobile-device-management/help/how-to-enroll-a-device-in-android-in-the-enterprise-as-device-owner-using-hexnode-mdm/) or [Profile Owner](https://www.hexnode.com/mobile-device-management/help/how-to-enroll-a-device-in-android-in-the-enterprise-as-profile-owner-using-hexnode-mdm/). 3. Approve and add [Lenovo OEMConfig app](#add-lenovo-oemconfig-to-the-app-inventory) in the Hexnode app repository. 4. Set up the [app configurations](#set-up-lenovo-specific-configurations) for the app. 5. Associate the configurations with [target entities](#associate-target-devices). Add Lenovo OEMConfig to the app inventory ----------------------------------------- 1. On your Hexnode MDM console, navigate to the **Apps** tab. 2. Click on **+Add Apps > Managed Google Apps**. 3. Search for [Lenovo OEMConfig](https://play.google.com/work/apps/details?id=com.lenovo.oemconfig.rel&hl=en_IN&gl=US) and select the app. 4. Click on **Approve**. 5. A pop-up specifying the permissions required by the app will be displayed. Go through it and click **Approve**. 6. This will take you to the **Approval Settings** page. Select a method by which you would handle new app permission requests. You can choose from: 1. **Keep approved when app requests new permissions:** Select this to ensure that the app is kept approved in the portal even if new permissions are requested. The users will be able to install the updated app. 2. **Revoke app approval when this app requests new permissions:** Select this option to remove the app from the app repository until it is reapproved when it requests new permissions. 7. On the same pop-up wizard, navigate to the **Notifications** tab. To subscribe to email notifications when the approved apps request new permissions, enter the email address and click on **Add**. You can add as many subscribers as you need. 8. Click on **Done**. This will add the app to the Hexnode app repository. Before deploying the OEM configurations to the devices, you have to make sure that Lenovo OEMConfig is installed on the devices. You can use the [Install Application](https://www.hexnode.com/mobile-device-management/help/install-android-app/#install-apps-via-remote-actions) action or the [Mandatory App](https://www.hexnode.com/mobile-device-management/help/how-to-enforce-app-installation-on-android-devices-using-hexnode-mdm/#add-mandatory-apps-via-policy) policy to remotely roll out the app to the devices. Set up Lenovo specific configurations ------------------------------------- 1. On your Hexnode MDM console, navigate to the **Policies** tab. 2. Click on **New Policy** to create a new policy or edit an existing policy. Provide a policy name and description (Optional) if you are creating a new policy. 3. Go to **Android > App Management > App Configurations**. 4. Click on **Configure > + Add new configuration**. 5. Search and select **Lenovo OEMConfig** from the list of apps. 6. Configure the available settings before saving. You’ll have the following features to configure, Device Restrictions SettingsDescriptionDisable System Upgrade(OTA)Enable/disable Lenovo system updates over-the-air.Disable Power KeyToggle on this option to disable power key on your devices.Disable Volume_up KeyWhen disabled, the hardware key used to increase the device volume will not work.Disable Volume_down KeyWhen disabled, the hardware key used to decrease the device volume will not work.Disable CameraDisable this option to block users from accessing the camera app on the devices.Disable SD UpgradeDisable this option to block the system update with the help of the SD Card.Disable FastbootUse this option to allow or block devices to enter the fastboot mode from reboot to bootloader. Fastboot is a protocol used to write data into the flash memory of the device.Disable Hard Reset ItemsEnable or disable the hard reset of the device. Apply update from ADB, Wipe data/factory reset.Disable Recovery HotkeyIf enabled, recovery hotkeys can be enabled on the device keyboard.Enable Boot on ChargerEnable this option to allow the device to auto turn on when the USB charger is plugged. App Component Management SettingsDescriptionThe Component IntflagUse this option to kill the application that contains a specified component. Input 0 to kill the app that contains the component, else use 1.The Component StateUse this option to enable or disable a specified component. Input 0 to enable the component, else use 2.The Component ClassInput the component of an app you want to disable/enable.The Component Package nameInput the package name of the app that contains the specified component that you want to disable/enable. App Management Settings SettingsDescriptionDisable Application UninstallationToggle on this option to block uninstallation of applications on the devices. If disabled, all app uninstallations including the silent app uninstallations will be blocked.Set Uninstallation WhitelistEnter the package name of applications that can be uninstalled from the device. Click on the **Add Group** to add more applications to the list. Enable “Disable Application Uninstallation” for this action to take effect. Set Installation BlacklistEnter the package name of applications that is to be blacklisted. The blacklisted applications will be blocked to run/install on the device. Click on the **Add Group** to add more applications to the blacklist. Enable “Disable Application Installation” for this action to take effect. Set Installation WhitelistEnter the package name of applications that you wish to whitelist. Any applications that are not whitelisted will not be able to run/install on the device. Click on the **Add Group** to add more applications to the whitelist. Enable “Disable Application Installation” for this action to take effect. Disable Application InstallationToggle on this option to allow installation of applications on the devices. If disabled, all app installations including the silent app installations will be blocked. Notes: To find the package name of an app, open the app in Google Play Store on a web browser. The package name will be displayed at the end of the URL after “id=”. Connectivity Settings SettingsDescriptionEnable SIMcardToggle on this option to enable the use of SIM cards on the devices.Disable SIMcardToggle off this option to disable the use of SIM cards on the devices.Set Default APNEnter the name of the default APN that should be used on the devices. For example: CMNET or CMWAP.Disallow to Configure the Settings of APNAllow or block users from changing the APN settings of the devices.Enable Mobile DataUncheck this option to prevent the device from connecting to the mobile data.Disallow to Configure Settings of Mobile DataWhen toggled on, the users will be able to the edit the mobile data connection configurations.Is WiFi connectedEnable or disable Wi-Fi connection on the device. Check this option to enable the device to connect to the Wi-Fi network that you can configure through this policy.WiFi TypeSelect the type of the Wi-Fi network that you wish to connect to. For example: enter 0 for None, 1 for WEP, 2 for PSK and so on.WiFi PasswordEnter the password of the Wi-Fi network whose SSID and Type is configured in this policy.WiFi SSIDEnter the SSID of the Wi-Fi network that you wish the connect the device to.Disable WiFi ConnectionIf disabled, the device will be restricted from connecting to a Wi-Fi network.Disallow to Configure Settings of WiFiDisable this feature to allow users to manually change the Wi-Fi configuration of devices.Disallow to Configure Settings of WIFI Access PointAllow or block users to connect to available Wi-Fi access point.Enable Wi-Fi HotspotDisable this option block the access to Wi-Fi hotspot settings on the devices.Disallow to Configure Settings of WiFi HotspotDisable this feature to allow users to manually change the Wi-Fi hotspot configuration of devices.Disallow to Configure Settings of WiFi Direct ConnectionEnable or disable the device from connecting to the nearby devices via Wi-Fi direct.Disable WIFI captive portalAllow or block accessing captive portal for Wi-Fi connection on the device.Http Proxy PortEnter the port address of the HTTP proxy server that you want to set up on the device. For example: 8080 or 8888.Http Proxy HostEnter the address of the HTTP proxy server. For example: proxy.example.com.Http Proxy Bypasslist ItemEnter the list of addresses that can bypass an active proxy. Click on **Add Group** to add more to the list.Set current USB modeSet any of the following as the current USB connection mode: charging, mtp, ptp, midi.Disallow to Change USB ModeDisable this feature to block users from changing the USB mode on the devices.Enable USB TetheringToggle off this option to block the USB tethering on the device.Disallow to Configure Settings of USB TetheringIf disabled, users will be able to configure USB tethering on the devices.Enable Bluetooth connectionEnable this option to allow devices to make Bluetooth connections.Disallow to Configure Settings of BluetoothDisable this option to allow users to change the Bluetooth configuration of the devices.Enable Bluetooth TetheringToggle off this option to block the Bluetooth tethering on the device.Disallow to Configure Settings of Bluetooth TetheringIf enabled, Bluetooth tethering option cannot be modified by the end-user.Set Location ModeSet any of the following as the device’s location mode: close, sensor_only, battery_saving, high_accuracy.Enable LocationEnable or disable the device location.Disallow to Configure Settings of LocationIf toggled on, the location services will remain un-configurable on the device.Disable SD CardEnable or disable the usage of SD card on the devices.Enable Flight ModeEnable or disable flight mode on the devices.Disallow to Configure Settings of Flight ModeIf toggled on, users will be blocked from configuring the Flight Mode settings on the devices. Environment Settings SettingsDescriptionSet System TimeEnter the time in this field in the format yyyy-MM-dd HH:mm:ss to configure the time settings on the device.Disallow to Set System TimeDisable this option to allow users to change the system time manually.Set System DateEnter the date in the format yyyy-MM-dd that you want to set in the device in this field.Disallow to Change System DateDisable this option to allow users to change the system date manually.Set System TimezoneEnter the time zone of your device in this field for remote configuration on the device. For example: Africa/Windhoek.Disallow to Change System TimezoneDisable this option to allow users to change the time zone manually.Set Screen BrightnessEnter the numeric value corresponding to the screen brightness that you require. The value to be entered can be between 0 to 255.Disallow to Change Screen BrightnessEnabling this option blocks users from manually setting the screen brightness.Set Media VolumeEnter the numeric value corresponding to the media volume that you require. The value can be between 0 to 15.Disallow to Change Media VolumeEnable this control to block users from manually changing the volume of the media.Set Notification VolumeSet the volume for notifications on the device. The value can be between 0 to 15.Disallow to Change Notification VolumeEnable this option to prevent users from changing the notifications volume on the device.Set Alarm VolumeSet the device alarm volume using these controls. The value can be between 0 to 15.Disallow to Change Alarm VolumeEnable this option to prevent users from changing the alarm volume on the device.Set Sleep TimeoutSet the idle time after which the device will automatically power off. It can be a value between 0 and 2147483647.Disallow to Change Sleep TimeoutEnable this option to block users from manually changing the sleep timeout configuration.Set Boot TimeSet the device boot time in the 24h format: HH:MM.Disallow to Change Boot TimeSet to allow, to block users from manually changing this configuration.Set Shutdown TimeSet the time at which device has to be powered off in the 24h format: HH:MM.Disallow to Change Shutdown TimeEnable this option to block users from changing the shutdown time configurations manually. Kiosk Mode Settings SettingsDescriptionDisallow to Configure the Settings of Lockscreen NotificationEnable this option to block users from manually turning on lock screen notifications.Disable Lockscreen NotificationEnable this option to show notifications on the device lock screen.Disable Status Bar NotificationDisable this option to prevent apps from displaying notifications on the status bar of the device. Custom UI Settings SettingsDescriptionDisallow to Change LauncherEnable this option to block users from manually changing the default launcher on the device. Security Settings SettingsDescriptionDisable Safe ModeIf enabled, the device can be booted to Safe Mode.Disable Entrance of Android GameEnable to block users from accessing games on Android devices.Enable Developer ModeDisable to block the developer mode settings on the device.Disallow to Enter Developer ModeIf disabled, users can enter developer mode on the device.Enable USB DebuggingAllow or disallow USB debugging feature on the device.Disallow to Configure the Settings of USB DebuggingEnable this to prevent users from changing the USB debugging settings on the device.Set Lockscreen ModeEnter a numeric value corresponding to the lockscreen mode that you wish to set on the device. Use –1 for Invalid, 0 for None and 1 for Swipe.Disallow to Switch LockScreen ModeIf enabled, users will not be able to edit the LockScreen mode settings on the device.Enable Permissions for All ApplicationsIf enabled, the permissions required for the applications to run will be granted.Enable Runtime Permission for All ApplicationsToggle on to enable runtime permissions for all apps.Enable Unkown Sources for All ApplicationsToggle on to enable app installations from unknown sources on the device.The package name of the applicationUse this option to enable unknown sources for an individual application rather than for the whole device. Enter the package name of the application for which ‘install from unknown sources’ has to be enabled. Is EnableEnable this toggle to permit installation from unknown sources for the specified application. If this is not enabled, unknown sources will stay disabled for the application. Once you have saved these configurations, click on the pencil icon corresponding to the app name in the “App Configurations” tab to edit any of the configured settings. Associate target devices ------------------------ If the policy has not been saved, 1. Navigate to **Policy Targets**. 2. Click on **Devices/ Device Groups/ Users/ User Groups/ Domains**. 3. Choose the targets and click **OK** and then **Save**. If you have the policy saved already, 1. Go to **Policies** tab and choose the desired policy. 2. Click on the **Manage** drop-down and select **Associate Targets**. 3. Choose the target entities and click **Associate**. You can choose devices, users, device groups, user groups, and domains as the policy targets. Note: The OEM specific-settings explained in this document are based on the configurations set by the respective OEM vendors, which may vary frequently. Since Hexnode is not solely responsible for setting up these configurations, you may find slight variations in the settings displayed on the portal from this document.