How to lock Android Devices to a Single App Kiosk Mode

Single app kiosk mode is a restrictive mechanism where Android mobile devices are locked on to a single application. Device running kiosk is dedicated to serving a single purpose – run the specialized application with minimal device functionalities. The app launches itself, runs in the foreground, and relaunches even after the device is shut down or rebooted. Kiosk mode ensures proper device usage while eliminating unnecessary user-distractions.

Create a single app kiosk policy for Android

1. Login to your Hexnode portal.
2. Navigate to Policies.
3. Select an existing policy or create a new one by clicking on New Policy.
4. Go to Kiosk Lockdown > Android Kiosk Lockdown > Single App and click Configure.
5. Click on the + icon. Select either of the options:
   • Select app: To add the app you wish to set in single-app kiosk mode.
   • Select file shortcut: Add PDFs and as file shortcuts to access them from devices in kiosk mode. To add file shortcut to the Kiosk lockdown policy, first add them in Apps > File Shortcuts.
   • Go to Launcher and provide the App auto-launch delay in seconds.
   • Save the policy.

Associate Policies with Devices / Groups.

If the policy has not yet been saved.

1. Navigate to Policy Targets.
2. Click on +Add Devices.
3. Select the devices and click OK.
4. Click on Save to apply the policies to devices.

Apart from devices, you can also associate the policies with device groups, user and user groups from Policy Targets.

If the policy has been saved, you can associate it by another method.

1. From Policies, check the policies to be associated.
2. Click on Manage → Associate Targets and select the device.
3. Click on Associate to apply policy to the devices.




Notes:

• When a single app kiosk policy is created, the kiosk app will automatically become the auto-launch app with a launch delay of 0 sec. This means that the kiosk app will run in the foreground all the time. The device will not be able to exit the kiosk from the user end. However, the auto-launch delay can be changed. The device will launch the app automatically if the device sits idle for the specified time period.
• If you are adding Store apps in kiosk mode, ensure that the application is already installed on the device.
• Enterprise app will be installed silently on Samsung Knox, LG GATE, Kyocera business phones, devices with Hexnode MDM app as system app, devices with platform signed Hexnode MDM System Agent app, and on devices enrolled in the Android Enterprise program as device owner.
• To lock down the device to a single website, create a web app and add it to the single-app kiosk mode.
• For devices running Android 10+, disable ‘Gesture Navigation’ by moving to Settings > System > Gestures and enable ‘three-key navigation’ instead.
• For devices supporting silent app installation – Installation/updation of apps running in single app kiosk requires the user to exit from the app to the launcher to start the download. However, on other devices, click on the wrench icon to install/update the app.



Exception:

For all devices running MIUI versions that have MIUI optimization turned on, Write System Permissions cannot be enabled. This leads to several issues including kiosk exiting unexpectedly, apps not getting installed silently, and so on. MIUI optimization must be disabled to fix such issues. To disable MIUI optimization:

• Go to Settings > Build Number.
• Tap on the build number 6 to 8 times to enable Developer options.
• Select Developer Options from Settings > Additional Settings.
• Disable MIUI optimization from the list of available options.

Notes:


In Device Admin enrolled Android 10 or later devices, Hexnode MDM cannot be set as the default home app (launcher). You have to manually grant Hexnode MDM home app permissions, whenever kiosk is activated on the device.

Follow this procedure to activate kiosk in an Android 10 device enrolled as Hexnode MDM Device Admin,

• In devices which do not permit silent kiosk activation:
  1. Once the policy gets associated with the device, the Hexnode MDM app opens up automatically.
  2. Activate kiosk mode by clicking on Activate.
  3. Now a pop-up tab opens up stating that the kiosk activation is incomplete and asks you to set Hexnode MDM as the Home app.
  4. Click on Set Default, this will take you to the Default home app pane.
  5. Click on Hexnode MDM, now the kiosk activation is complete.

  You have to repeat the whole procedure while enabling kiosk again.

• In Samsung Knox devices, kiosk mode will get automatically activated upon policy association.

Troubleshooting Tips

• Device got stuck in Single App mode while the app is open.
• Blocked Package Error.