# Kiosk

With POS devices finding an exponential level of usage, the need to convert mobile devices to single-purpose devices is on the rise. But locking the devices to a single app is an arduous task for admins, as they need to configure these devices to ensure no other apps are installed and users do not navigate away from the locked app. Furthermore, it is difficult to manually manage and restrict the settings on each of these devices. POS devices are usually at critical points in an organization and any user modifications to the settings may lead to device downtime and loss of productivity.

With MDM's Kiosk, locking down the devices to a **single app** and **pre-configuring the settings** over-the-air becomes a breeze. Another advantage is that ManageEngine MDM Kiosk Mode allows you to provision **multiple apps under Kiosk**. Once configured, you can ensure these settings cannot be modified by the users. Additionally, you can let the users configure basic settings through Custom Settings app.

Kiosk is supported for all devices. However, **Non-Samsung devices running 5.0 or above, should be provisioned as [Device Owner](https://www.manageengine.com/mobile-device-management/help/android_for_work/mdm_android_for_work_introduction.html#Device_Owner).**

The advantage of Kiosk is that all types of notification services such as the edge notification window, available in Samsung devices, get restricted by default, ensuring users cannot navigate away from the app(s) provisioned under Kiosk.

**NOTE:** It is better to have only one Kiosk profile associated per device/group. When you associate two Kiosk profiles to the same device/group, the profile that is applied at last gets associated. To avoid confusion, it is recommended not to associate a new Kiosk profile when there is a Kiosk profile already associated. If you want to make modifications, remove the existing profile and associate a new profile or modify the existing profile. Similarly do not combine other profiles with Kiosk since every time the other profiles are modified and updated, Kiosk profile will be re-applied to the devices. You need to enable Usage Access Permission when prompted on the device to enable or disable some of the Kiosk features like status bar, task manager or custom settings app.

## Provisioning app(s) under Kiosk

- You can provision apps already present in any one of the managed devices or [added to the App Repository](https://www.manageengine.com/mobile-device-management/help/app_management/mdm_creating_app_repository.html). This can include pre-installed apps, store apps and enterprise apps.
- In case the app provisioned under Kiosk is not available on the device, **the app gets automatically distributed and installed on the device**. The app distribution status is shown when viewing the device individually or in a group, in the **Device Mgmt** view.
- In case of Store apps, these apps can be manually updated by the device user in case App Store is provisioned as an app in Kiosk. Otherwise you need to [update the app via MDM](https://www.manageengine.com/mobile-device-management/help/app_management/mdm_app_management.html#Automating_App_Updates).
- In case of enterprise apps, you need to [update the latest version of the source file (.apk) to the App Repository](https://www.manageengine.com/mobile-device-management/help/app_management/mdm_multi_app_version_management.html#updating_android_enterprise_apps) and then update the app on the devices.
- If silent installation isn't supported, the apps get distributed to the App Catalog, from where the user needs to install it.
- If a [profile is updated and then re-distributed](https://www.manageengine.com/mobile-device-management/help/profile_management/mdm_creating_profiles.html#modify_profile), the version of the enterprise app initially used during profile creation is the one that gets distributed even if there's an updated version available in the App Repository. In case of Store apps, the latest version is distributed. The updated enterprise app needs to be separately distributed as [explained here](https://www.manageengine.com/mobile-device-management/help/app_management/mdm_app_management.html#app_update_dist).

## Choosing the Launcher

For devices in Multi-app Kiosk, the launcher to be used on the devices can be configured. Choosing **MDM launcher**, permits the **Custom Settings app** and **Device restrictions** to be configured. Along with that, the **Default app** can be configured under **Advanced settings**. The Default app will be automatically launched on the device, if inactive for the specified time duration. Configuring these settings ensures **granular control** over the device which cannot be achieved using Device launcher. The Device launcher does not support advanced Kiosk settings.

## Custom Settings App

In case of Kiosk provisioned devices, users in general cannot view/modify basic settings such as Brightness, Wi-Fi etc., as the screen gets locked to provisioned apps. Custom Settings app, as the name suggests, if configured allows the users to modify these basic settings on Multi-app as well as on Single-app Kiosk. **The advantage of this app is that you can configure basic settings irrespective of the status bar restriction.** You can also configure [Custom Settings for Single-app Kiosk](https://www.manageengine.com/mobile-device-management/how-to/mdm-configure-basic-settings-kiosk-enterprise-app.html).

## Home Screen Layout Customization

Home Screen Layout Customization lets you organize apps on the Home screen in multi-app Kiosk provisioned devices. You can add frequently used apps to the Dock and pin these apps to the Home screen even when user swipes across various pages. Apps pinned to the Home screen cannot be uninstalled by the users ensuring that the business requisite apps are always present on the device.

You can add pages and folders to the Home screen, set custom wallpaper and modify font color of texts displayed on the Home screen, thus improving user experience on the device.

**Note:** Only web shortcuts added in the Kiosk profile can be customized to desired position. Web shortcuts added from other profiles will be listed after the ones configured in Kiosk profile.

Watch this [short video](https://www.youtube.com/watch?v=675QflMIC_E) to learn how you can customize your Android Kiosk device's home screen.

## Profile Description

**Only devices running Android 5.0 or above can be provisioned as [Device Owner](https://www.manageengine.com/mobile-device-management/help/android_for_work/mdm_android_for_work_introduction.html#Device_Owner).**

### Feature Support Matrix

| FEATURE | DESCRIPTION | KNOX-ENABLED SAMSUNG | CORE ANDROID | PROFILE OWNER | DEVICE OWNER |
|---|---|---|---|---|---|
| Configure | Single-app Kiosk type locks down the device to display only a single app. Multi-app Kiosk type locks down the device to display only a specific set of apps displayed on the Home screen. | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![failured](https://www.manageengine.com/mobile-device-management/help/images/failured.gif) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) |
| Launcher type (Multi-app only) | Choose the launcher for Kiosk. MDM launcher allows granular control over devices. | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![failured](https://www.manageengine.com/mobile-device-management/help/images/failured.gif) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) |
| Allowed app(s)/web shortcut(s) | Choose allowed Store/enterprise apps or web shortcuts. | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![failured](https://www.manageengine.com/mobile-device-management/help/images/failured.gif) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) |
| Add app(s)/web shortcut(s) | Add existing apps by name and Bundle ID or add web shortcuts with URL and icon. | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![failured](https://www.manageengine.com/mobile-device-management/help/images/failured.gif) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) |
| Refresh browser if idle (Single Web App only) | Auto-refresh web shortcut after inactivity and return to main URL. | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![failured](https://www.manageengine.com/mobile-device-management/help/images/failured.gif) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) |
| Hidden app(s) | Run apps in background without displaying icons. | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![failured](https://www.manageengine.com/mobile-device-management/help/images/failured.gif) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) |
| Automatically install apps (Multi-app only) | Auto-install apps if silent install supported; distribute web shortcuts automatically. | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![failured](https://www.manageengine.com/mobile-device-management/help/images/failured.gif) | ![failured](https://www.manageengine.com/mobile-device-management/help/images/failured.gif) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) |
| Pause Kiosk Password | Specify password to temporarily disable Kiosk. | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![failured](https://www.manageengine.com/mobile-device-management/help/images/failured.gif) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) |
| Show ME MDM app (Multi-app only) | Show [ManageEngine MDM app](https://www.manageengine.com/mobile-device-management/mdm-benefits-of-installing-me-mdm-app.html) to install distributed apps. | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) | ![failured](https://www.manageengine.com/mobile-device-management/help/images/failured.gif) | ![success](https://www.manageengine.com/mobile-device-management/help/images/success.png) |

## Pausing Kiosk on devices

![An Android device deployed using MDM under Kiosk mode](https://www.manageengine.com/mobile-device-management/help/images/top_screen.png)
![Using password to pause or temporarily exit out of MDM Kiosk mode on Android](https://www.manageengine.com/mobile-device-management/help/images/revoke_admin_passwordprompt.jpg)

While managing devices under Kiosk, there might be a pertinent need to pause Kiosk for certain purposes. Assume there is an enterprise app provisioned under Kiosk and it has stopped working. MDM lets you pause Kiosk in three different ways:

- Using Security commands
- Using Pause Kiosk passcode
- Using Remote Chat commands

### Security Commands

Pause Kiosk is available as a conventional security command.

To execute the security command:

- Click on the **Inventory** tab on the top menu and select the device.
- Click on **Actions** and select **Pause Kiosk** from the dropdown. You can choose to automatically resume Kiosk after some time.
- Once troubleshooting is complete, execute **Resume Kiosk**.
- If the device does not have Internet connectivity, you can pause Kiosk using **Time bound passcode** displayed on the server.
- For field devices, use the Pause Kiosk passcode.

If Kiosk mode is remotely paused for a set time and the device is **restarted during this time**, the timer is **reset after the device restarts**.

### Pause Kiosk passcode

Pause Kiosk passcode is a **one-time** and **time-bound** passcode displayed when you click **Pause Kiosk** in the **Inventory** tab. It expires after 90 minutes and is generated as a random alphanumeric sequence.

To pause Kiosk:

- Press the **Back button four times** and provide the passcode.
- In Multi-app Kiosk, tap the **top of the Home screen four times** and provide the passcode.
- If **Custom Settings app** is configured, click **Exit** in the Custom Settings app.

### Remote Chat commands

Using [Remote Troubleshoot](https://www.manageengine.com/mobile-device-management/help/asset_management/mdm_remote_troubleshoot.html), you can pause and resume Kiosk from the device view screen chat.

- Use `/EXIT-KIOSK` to pause.
- Use `/ENTER-KIOSK` to resume.
- Learn more about [chat commands here](https://www.manageengine.com/mobile-device-management/help/asset_management/mdm_remote_troubleshoot.html#remote_commands).

MDM supports pausing and resuming Kiosk using different methods interchangeably.

### Points to Note

1. In SIM card locked devices, on restart, enter SIM unlock password to resume Kiosk.
2. Once a paused device is restarted, you can resume Kiosk from the notification shown on the device.

## Troubleshooting tips

1. **What if a Kiosk provisioned device loses internet connectivity?**  
   Once the Kiosk profile is associated, ensure devices don't lose network connectivity. Otherwise, devices remain locked under Kiosk. If disconnected, recover the device as [explained here](https://www.manageengine.com/mobile-device-management/how-to/mdm-recover-device-from-kiosk-mode.html).

2. **Why can't I pause Kiosk using Time bound passcode?**  
   Ensure device time matches server time. If mismatched, passcode won't work. Prevent users from modifying time by configuring **Date/Time Settings** under **Restrictions**.

3. **How should I configure physical keyboard in kiosk mode?**  
   When a physical keyboard is connected, the device disables on-screen keyboard. To enable it, go to **Custom settings app > Keyboard Settings** and toggle **Show on-screen keyboard**.

4. **Why is the on-screen keyboard not working when external input device is connected?**  
   The device detects it as a physical keyboard and disables the on-screen keyboard. Enable it via **Custom settings app > Keyboard Settings > Show on-screen keyboard**.