How to configure Lenovo devices with OEMConfig
Organizations often require advanced enterprise-grade device management features specific to the mobile device they use. OEMConfig enables you to remotely configure advanced device management features custom to Lenovo mobile devices through the Hexnode UEM console. OEMConfig app is a set of custom build APIs that help create custom device-specific features that the UEM can support in no time. The Lenovo OEMConfig is one such app that allows you to remotely manage the devices when incorporated with a UEM solution. With these OEMConfig capabilities and the built-in device features of Hexnode, you can exercise complete management of your device with ease.
To configure Lenovo devices with OEMConfig,
- Enroll your organization in the Android Enterprise.
- Enroll the devices in the Android Enterprise either as Device Owner or Profile Owner.
- Approve and add Lenovo OEMConfig app in the Hexnode app repository.
- Set up the app configurations for the app.
- Associate the configurations with target entities.
Add Lenovo OEMConfig to the app inventory
- On your Hexnode MDM console, navigate to the Apps tab.
- Click on +Add Apps > Managed Google Apps.
- Search for Lenovo OEMConfig and select the app.
- Click on Approve.
- A pop-up specifying the permissions required by the app will be displayed. Go through it and click Approve.
- This will take you to the Approval Settings page. Select a method by which you would handle new app permission requests. You can choose from:
- Keep approved when app requests new permissions: Select this to ensure that the app is kept approved in the portal even if new permissions are requested. The users will be able to install the updated app.
- Revoke app approval when this app requests new permissions: Select this option to remove the app from the app repository until it is reapproved when it requests new permissions.
- On the same pop-up wizard, navigate to the Notifications tab. To subscribe to email notifications when the approved apps request new permissions, enter the email address and click on Add. You can add as many subscribers as you need.
- Click on Done.
This will add the app to the Hexnode app repository. Before deploying the OEM configurations to the devices, you have to make sure that Lenovo OEMConfig is installed on the devices. You can use the Install Application action or the Mandatory App policy to remotely roll out the app to the devices.
Set up Lenovo specific configurations
- On your Hexnode MDM console, navigate to the Policies tab.
- Click on New Policy to create a new policy or edit an existing policy. Provide a policy name and description (Optional) if you are creating a new policy.
- Go to Android > App Management > App Configurations.
- Click on Configure > + Add new configuration.
- Search and select Lenovo OEMConfig from the list of apps.
- Configure the available settings before saving.
You’ll have the following features to configure,
|Disable System Upgrade(OTA)||Enable/disable Lenovo system updates over-the-air.|
|Disable Power Key||Toggle on this option to disable power key on your devices.|
|Disable Volume_up Key||When disabled, the hardware key used to increase the device volume will not work.|
|Disable Volume_down Key||When disabled, the hardware key used to decrease the device volume will not work.|
|Disable Camera||Disable this option to block users from accessing the camera app on the devices.|
|Disable SD Upgrade||Disable this option to block the system update with the help of the SD Card.|
|Disable Fastboot||Use this option to allow or block devices to enter the fastboot mode from reboot to bootloader. Fastboot is a protocol used to write data into the flash memory of the device.|
|Disable Hard Reset Items||Enable or disable the hard reset of the device. Apply update from ADB, Wipe data/factory reset.|
|Disable Recovery Hotkey||If enabled, recovery hotkeys can be enabled on the device keyboard.|
|Enable Boot on Charger||Enable this option to allow the device to auto turn on when the USB charger is plugged.|
|The Component Intflag||Use this option to kill the application that contains a specified component. Input 0 to kill the app that contains the component, else use 1.|
|The Component State||Use this option to enable or disable a specified component. Input 0 to enable the component, else use 2.|
|The Component Class||Input the component of an app you want to disable/enable.|
|The Component Package name||Input the package name of the app that contains the specified component that you want to disable/enable.|
|Disable Application Uninstallation||Toggle on this option to block uninstallation of applications on the devices. If disabled, all app uninstallations including the silent app uninstallations will be blocked.|
|Set Uninstallation Whitelist||Enter the package name of applications that can be uninstalled from the device.
Click on the Add Group to add more applications to the list. Enable “Disable Application Uninstallation” for this action to take effect.
|Set Installation Blacklist||Enter the package name of applications that is to be blacklisted. The blacklisted applications will be blocked to run/install on the device.
Click on the Add Group to add more applications to the blacklist. Enable “Disable Application Installation” for this action to take effect.
|Set Installation Whitelist||Enter the package name of applications that you wish to whitelist. Any applications that are not whitelisted will not be able to run/install on the device.
Click on the Add Group to add more applications to the whitelist. Enable “Disable Application Installation” for this action to take effect.
|Disable Application Installation||Toggle on this option to allow installation of applications on the devices. If disabled, all app installations including the silent app installations will be blocked.|
|Enable SIMcard||Toggle on this option to enable the use of SIM cards on the devices.|
|Disable SIMcard||Toggle off this option to disable the use of SIM cards on the devices.|
|Set Default APN||Enter the name of the default APN that should be used on the devices. For example: CMNET or CMWAP.|
|Disallow to Configure the Settings of APN||Allow or block users from changing the APN settings of the devices.|
|Enable Mobile Data||Uncheck this option to prevent the device from connecting to the mobile data.|
|Disallow to Configure Settings of Mobile Data||When toggled on, the users will be able to the edit the mobile data connection configurations.|
|Is WiFi connected||Enable or disable Wi-Fi connection on the device. Check this option to enable the device to connect to the Wi-Fi network that you can configure through this policy.|
|WiFi Type||Select the type of the Wi-Fi network that you wish to connect to. For example: enter 0 for None, 1 for WEP, 2 for PSK and so on.|
|WiFi Password||Enter the password of the Wi-Fi network whose SSID and Type is configured in this policy.|
|WiFi SSID||Enter the SSID of the Wi-Fi network that you wish the connect the device to.|
|Disable WiFi Connection||If disabled, the device will be restricted from connecting to a Wi-Fi network.|
|Disallow to Configure Settings of WiFi||Disable this feature to allow users to manually change the Wi-Fi configuration of devices.|
|Disallow to Configure Settings of WIFI Access Point||Allow or block users to connect to available Wi-Fi access point.|
|Enable Wi-Fi Hotspot||Disable this option block the access to Wi-Fi hotspot settings on the devices.|
|Disallow to Configure Settings of WiFi Hotspot||Disable this feature to allow users to manually change the Wi-Fi hotspot configuration of devices.|
|Disallow to Configure Settings of WiFi Direct Connection||Enable or disable the device from connecting to the nearby devices via Wi-Fi direct.|
|Disable WIFI captive portal||Allow or block accessing captive portal for Wi-Fi connection on the device.|
|Http Proxy Port||Enter the port address of the HTTP proxy server that you want to set up on the device. For example: 8080 or 8888.|
|Http Proxy Host||Enter the address of the HTTP proxy server. For example: proxy.example.com.|
|Http Proxy Bypasslist Item||Enter the list of addresses that can bypass an active proxy. Click on Add Group to add more to the list.|
|Set current USB mode||Set any of the following as the current USB connection mode: charging, mtp, ptp, midi.|
|Disallow to Change USB Mode||Disable this feature to block users from changing the USB mode on the devices.|
|Enable USB Tethering||Toggle off this option to block the USB tethering on the device.|
|Disallow to Configure Settings of USB Tethering||If disabled, users will be able to configure USB tethering on the devices.|
|Enable Bluetooth connection||Enable this option to allow devices to make Bluetooth connections.|
|Disallow to Configure Settings of Bluetooth||Disable this option to allow users to change the Bluetooth configuration of the devices.|
|Enable Bluetooth Tethering||Toggle off this option to block the Bluetooth tethering on the device.|
|Disallow to Configure Settings of Bluetooth Tethering||If enabled, Bluetooth tethering option cannot be modified by the end-user.|
|Set Location Mode||Set any of the following as the device’s location mode: close, sensor_only, battery_saving, high_accuracy.|
|Enable Location||Enable or disable the device location.|
|Disallow to Configure Settings of Location||If toggled on, the location services will remain un-configurable on the device.|
|Disable SD Card||Enable or disable the usage of SD card on the devices.|
|Enable Flight Mode||Enable or disable flight mode on the devices.|
|Disallow to Configure Settings of Flight Mode||If toggled on, users will be blocked from configuring the Flight Mode settings on the devices.|
|Set System Time||Enter the time in this field in the format yyyy-MM-dd HH:mm:ss to configure the time settings on the device.|
|Disallow to Set System Time||Disable this option to allow users to change the system time manually.|
|Set System Date||Enter the date in the format yyyy-MM-dd that you want to set in the device in this field.|
|Disallow to Change System Date||Disable this option to allow users to change the system date manually.|
|Set System Timezone||Enter the time zone of your device in this field for remote configuration on the device. For example: Africa/Windhoek.|
|Disallow to Change System Timezone||Disable this option to allow users to change the time zone manually.|
|Set Screen Brightness||Enter the numeric value corresponding to the screen brightness that you require. The value to be entered can be between 0 to 255.|
|Disallow to Change Screen Brightness||Enabling this option blocks users from manually setting the screen brightness.|
|Set Media Volume||Enter the numeric value corresponding to the media volume that you require. The value can be between 0 to 15.|
|Disallow to Change Media Volume||Enable this control to block users from manually changing the volume of the media.|
|Set Notification Volume||Set the volume for notifications on the device. The value can be between 0 to 15.|
|Disallow to Change Notification Volume||Enable this option to prevent users from changing the notifications volume on the device.|
|Set Alarm Volume||Set the device alarm volume using these controls. The value can be between 0 to 15.|
|Disallow to Change Alarm Volume||Enable this option to prevent users from changing the alarm volume on the device.|
|Set Sleep Timeout||Set the idle time after which the device will automatically power off. It can be a value between 0 and 2147483647.|
|Disallow to Change Sleep Timeout||Enable this option to block users from manually changing the sleep timeout configuration.|
|Set Boot Time||Set the device boot time in the 24h format: HH:MM.|
|Disallow to Change Boot Time||Set to allow, to block users from manually changing this configuration.|
|Set Shutdown Time||Set the time at which device has to be powered off in the 24h format: HH:MM.|
|Disallow to Change Shutdown Time||Enable this option to block users from changing the shutdown time configurations manually.|
|Disallow to Configure the Settings of Lockscreen Notification||Enable this option to block users from manually turning on lock screen notifications.|
|Disable Lockscreen Notification||Enable this option to show notifications on the device lock screen.|
|Disable Status Bar Notification||Disable this option to prevent apps from displaying notifications on the status bar of the device.|
|Disallow to Change Launcher||Enable this option to block users from manually changing the default launcher on the device.|
|Disable Safe Mode||If enabled, the device can be booted to Safe Mode.|
|Disable Entrance of Android Game||Enable to block users from accessing games on Android devices.|
|Enable Developer Mode||Disable to block the developer mode settings on the device.|
|Disallow to Enter Developer Mode||If disabled, users can enter developer mode on the device.|
|Enable USB Debugging||Allow or disallow USB debugging feature on the device.|
|Disallow to Configure the Settings of USB Debugging||Enable this to prevent users from changing the USB debugging settings on the device.|
|Set Lockscreen Mode||Enter a numeric value corresponding to the lockscreen mode that you wish to set on the device. Use –1 for Invalid, 0 for None and 1 for Swipe.|
|Disallow to Switch LockScreen Mode||If enabled, users will not be able to edit the LockScreen mode settings on the device.|
|Enable Permissions for All Applications||If enabled, the permissions required for the applications to run will be granted.|
|Enable Runtime Permission for All Applications||Toggle on to enable runtime permissions for all apps.|
|Enable Unkown Sources for All Applications||Toggle on to enable app installations from unknown sources on the device.|
|The package name of the application||Use this option to enable unknown sources for an individual application rather than for the whole device.
Enter the package name of the application for which ‘install from unknown sources’ has to be enabled.
|Is Enable||Enable this toggle to permit installation from unknown sources for the specified application. If this is not enabled, unknown sources will stay disabled for the application.|
Once you have saved these configurations, click on the pencil icon corresponding to the app name in the “App Configurations” tab to edit any of the configured settings.
Associate target devices
If the policy has not been saved,
- Navigate to Policy Targets.
- Click on Devices/ Device Groups/ Users/ User Groups/ Domains.
- Choose the targets and click OK and then Save.
If you have the policy saved already,
- Go to Policies tab and choose the desired policy.
- Click on the Manage drop-down and select Associate Targets.
- Choose the target entities and click Associate.
You can choose devices, users, device groups, user groups, and domains as the policy targets.