SureLock for Android

User Guide

Ver 21.09.16

All the information contained in this document is the property of 42Gears and meant only for the intended recipient. The contents

of the document shall not be used, copied, altered, published, or redistributed without the prior written consent of

42Gears Mobility Systems Pvt. Ltd

Table of Contents

Introduction 5

Getting Started with SureLock 9

Add a folder 23

Edit or remove a folder 23

Allowed Websites 24

SureLock Settings 24

Wallpaper Settings 24

Display Settings 25

Single Application Mode 29

SureLock Settings 31

Peripheral Settings 38

Schedule Reboot 54

Widget Settings 54

Diagnostic Settings 64

Samsung Knox Settings 64

Disable Safe Mode 66

Disable Factory Reset 67

Disable Multi Window 67

Disable USB 67

Wipe Recent Apps 67

Disable S Voice 67

NFC Mode 68

Disable Air View Mode 68

Disable Air Command Mode 68

Disable Smart Clip Mode 68

Disable Application Installation 69

Disable Application Uninstallation 69

Disable Edge Screen Functionality 70

Hide Status Bar (Samsung Knox) 70

Hide Navigation Bar (Samsung Knox) 70

Allowed Widgets 70

Add Widget 70

Edit/Remove Widget 71

Manage Shortcuts 71

Phone Settings 73

Setup SureLock Permissions 79

Import/Export Settings 80

Export Settings 80

Schedule Automatic Import 82

Advanced Settings 83

Remotely Configure SureLock Settings 83

Exit SureLock 83

Uninstall SureLock 84

About SureLock 84

What is SureLock?

Businesses with mobile workforce require secured and locked mobile device to ensure

responsible usage, improved productivity and reduced device maintenance cost. One of the

ways to achieve above mentioned objectives is by allowing access to only required

protectedSureLock Admin Settingsand specify the applications you wish to approve.

Return to SureLock Home Screen, only the approved applications will be listed on the

screen. This confines the device users to only SureLock Home Screen with approved

applications and is restricted from accessing device home screen, device settings and

SureLock lockdown settings.

Key Features

● Lock down Android smartphones and tablets in Kiosk Mode

● Restrict users to only Allowed Applications

● Block user from playing games, browsing or installing unapproved applications

● Hide or Disable Bottom Bar

● Password protect launch of Allowed Applications

● Custom title for Allowed Applications on Home Screen

● Hide icon of an Allowed Application on Home Screen

● Peripheral Lockdown (Wi-Fi, Bluetooth, Auto-orientation, Flight Mode, Audio, GPS, Mobile

● Modify SureLock Settings using MDM solution like SureMDM

● Option to allowlist/blacklist phone numbers

● Relocate icons anywhere on the screen using drag and drop

● Import/Export SureLock Settings

● Remotely deploy SureLock configuration (http/cloud/file transfer)

● Driver Safety features

1. On the SureLock Home Screen, launch WiFi Center plug-in app.

Configure a Wi-Fi network

● Select a Security option from the following:

None

WEP

WPA/WPA2 PSK

802.1xEAP

● Hidden Network - Use this option if you want to make this specific SSID as hidden

network.

● Under Advanced options,

1. Select Use Proxy and enter the proxy details such as Proxy hostname, Proxy

Hotspot Manager - With this plug-in app, admin allows the user to create or configure a

2. On the Hotspot Manager page, configure the following settings and tap Save.

● Android version Oreo onwards

● Non-Samsung devices

2. Tap NFC Manager app and you can see the device is ready to connect with other device

for file transfer.

Note: Both the devices should support the NFC mode setting.

If you again tap on the green icon, NFC will get disconnected, and the file transfer will be

interrupted.

Volume Control - With this plug-in app, the admin can allow the user to control the volume

of the device's media, alarm, notification, ringtone, and call.

To configure volume settings of a device using the Volume Control plugin app,

1. On the SureLock Home Screen, launch Volume Control.

● Enable Notification Volume

● Change Password - Use this option to change the password (from default '0000' to the

desired password) to access volume control settings

APN Manager - With this plug-in app, the admin can allow the user to create or configure

the Access Point Name (APN).

To configure APN settings of a device using the APN Manager plugin app, follow these steps:

1. On the SureLock Home Screen, launch APN Manager.

2. On the APN Manager screen, tap the Settings icon.

the desired password) to access APN Manager settings.

The user can edit different aspects of allowed applications such as Label, Icon, Password,

Hide Icon in Home Screen.

To edit an Allowed Application, follow these steps:

1. AccessSureLock Admin Settings.

2. OnAdmin Settingsscreen, tap Allowed Applications.

Note: To enable Clear Data on Launch requires device rooting/platform permission.

Note: To configure App Idle Timeout, enable Idle Timeout option under Admin Settings > SureLock

5. Tap Doneto complete

To remove an allowed application from SureLock Home Screen, follow these steps:

1. AccessSureLock Admin Settings.

2. OnAdmin Settingsscreen, tap Allowed Applications.

3. OnAllowed Applicationsscreen, tap the application to remove.

Add Folderoption allows the admins to create folders onSureLock Home Screen. The

admins can assign and organize approved applications in these folders.

The folder created will reflect on SureLock Home Screen with approved applications.

Note: To move an existing approved application to a folder, editCurrent Pathof the application

to that of the desired folder.

To edit or remove an existing folder, follow these steps:

1. AccessSureLock Admin Settings.

2. OnAdmin Settingsscreen, tap Allowed Applications.

3. OnAllowed Applicationsscreen, long tap on the folder.

4. OnFolder Settingsscreen, edit the following options:

5. Tap Okto edit the folder.

6. Tap Remove to delete the folder.

SureLock Settings

SureLock Settingsoffers features to customizeSureLock Home Screen such as advance

lockdown of a device, peripherals settings, timeout settings and more.

SureLock Home Screencan be personalized with a wallpaper. The admins can set two

different wallpapers for SureLock Home Screen: Landscape and Portrait.

Wallpaper Settingshas following options:

3. On Admin Settings screen, tap SureLock Settings > Single Application Mode.

4. Disable Single Application Mode option to complete.

Application Launch Delay

SureLockallows the user to delay the launch ofSingle Application Mode after the specified

time.

Run Only Once

Once this option is enabled will allow running of Single Application Mode only once. On

reboot of the device, Single Application Mode will automatically get disabled.

Create Single App Mode Exit File

Mode.

SureLock Settingsallows the admins to edit and set general settings inSureLock.

Change Password

Password to access SureLock Admin Settings can be changed using Change Password.

To change the Password, follow these steps:

1. AccessSureLock Admin Settings.

2. OnSureLock Settings screen > SureLock Settings > Change Password.

3. Enter the existing Old Password.

4. Enter the New Password.

valid password.

To set a password to access the SureLock Home Screen, follow these steps:

1. AccessSureLock Admin Settings.

2. OnSureLock Settings screen, select User Security.

3. On User Security prompt, select Enable and tap Done.

4. Enter desired Password and type same password in Confirm Password field and tap

5. Select desired questions from the drop-down list and enter the relevant answers.

6. Select Set Idle Timeout and enter the value in seconds / minutes and tap Ok.

underSureLock Admin Settings:

● Exit SureLock

● Uninstall SureLock

● Change Password

● Admin Users

● System Settings

Add an Admin User

To add Admin users, follow these steps:

1. On SureLock Settings, tap Admin Users.

2. On Admin User Settings screen, tap Add User.

3. On Admin Users screen, tap on the specific admin user.

Delete an Admin User

To delete Admin Users, follow these steps:

1. On SureLock Settings, tap Admin Users.

2. On Admin Users screen, tap on the specific admin user.

3. Tap Remove to complete.

Multi-User Mode

Multi-User Mode option is helpful to maintain applications separately for different users. A

single device can be shared among multiple users with the option to switch between

different work profiles.

4. Tap SureLock Settings.

5. On SureLock Settings screen, enable Multi-User Mode.

6. Tap Done to go back to Admin Settings screen.

7. Tap Allowed Applications.

11. Tap Done to complete.

Add Allowed Applications to a specific user

To add an Allowed Application to a specific user, follow these steps:

1. Access SureLock Admin Settings.

2. On Admin Settings screen, tap Allowed Application.

3. Tap User Name.

4. To add Allowed Applications to the user, see Add Allowed Applications.

Note: The default password for any user profile will be four zeros '0000'. To set a different

To delete a user, follow these steps:

1. AccessSureLock Admin Settings.

2. On Allowed Applications screen, long tap on a specific user.

3. Tap Remove to complete.

to navigateback,home, takescreenshotsand seerecently used applications. SelectDisable

Bottom Baroption to disable this bar. This option will only disable the bottom bar and not

hide it.

Hide Bottom Bar

Most of the Android devices have an on-screen bar at the bottom of the screen with options

to navigateback,home, takescreenshotsand seerecently used applications. SelectHide

Hardware Keys includes Power Button, Home Button, Recent Apps Button and Volume keys

of devices (smartphone or tablet). Select Disable Hardware Keys option to disable these

hardware keys of the device.

platform signed.

Disable Soft Navigation Keys

Soft Navigation keys are Home Button, Recent Apps Button and Back button on the devices

Assign SureLock System Permission

Use Assign SureLock System Permission option to copy SureLock.apk (setup file) to the

system folder.

peripherals such ascamera,WiFi,MobileDataetc.

Camera Settings

To disable camera from functioning, selectAlways Disablefrom the following options:

● Don't Care

● Always Disable

Wi-Fi Settings

To disable Wi-Fi from functioning, selectAlways Offfrom the following options:

● Don't Care

● Always On

● Always Off

To disable GPS from functioning, selectAlways Offfrom the following options:

Select SuppressNotification Panel to suppressthe notification panel. Once enabled, the

users will be restricted from viewing the Notification Panel.

Hide Quick Settings Tile

This option will hide the Quick settings tiles from the Notification panel on Signed and

Rooted devices.

Block Notifications

Admin can block all applications’ notifications from Notification Panel on SureLock Home

Screen.

● Legacy Mode - Status Bar will be disabled. This setting will be applicable for all devices

● Advanced Mode - Status Bar will be disabled. This setting will be applicable for only

platform signed devices.

devices.

Disable USB

Enable this option to disable USB storage and USB debugging.

USB Connectivity Preference

This option helps the admin to set the connectivity preference when USB is plugged-in with

This option disables the usage of OTG/ External SD card.

Suppress Power Button/Keyboard

Use this option Suppress Power Button/Keyboard to prevent shut down of the device and

also disable keyboard of the device.

Keyboard Settings

Some Android devices allow the use of USB port to attach external keyboards. When an

Enable SureKeyboard

While using the device keyboard, the users will have the option to long-press Settings key

(from the device) and can alter the device settings or exit from the lockdown state. SureLock

allows the admin to set SureKeyboard as a default keyboard instead of the device keyboard

that prevents the users exiting from lockdown state. On enabling SureKeyboard, Settings key

option will not be available for the user.

the user to set a speed threshold for the vehicle to auto lock and restrict all device

functionalities.



GPSshould beONand set toHigh Accuracy.

Enable Driver Safety

Enable Driver Safety option helps the admin to set Driver Safety settings.

Following are the options available in Driver Safety feature:

Enable Driver Safety Overlay

Select this option to display an overlay on the screen when the vehicle speed exceeds the set

overlay threshold.

Enable Driver Safety Overlay option enables the following settings:

Allow Transparent Overlay

Select Allow Transparent Overlay option to show a transparent overlay on the screen

when the driver exceeds the speed threshold set by admin. If driver tries to tap on the

screen, driver safety overlay will be visible for only few seconds.

Enable Email Alert

Select Enable Email Alert option to enable email alert service to the admins.

Enable Email Alert option enables the following settings:

● Set Email Alert Threshold -Enter the value for Set Email Alert Threshold in

Miles/Km. When the vehicle speed exceeds the Set Email Alert Threshold then an

email alert is sent to the admin.

Driver Profile has to be configured before selecting Enable Driver Safety Profile option.

● Set Driver Safety Profile Threshold - Enter the value for Set Driver Safety Profile

applications allowed to the user.

● Set Driver Safety Profile Delay (secs) - Enter the value in secs. Admin can set the

Bootup Delay

all approved applications.

Timeout Settings

Timeout Settingsoffers a range of features which can be used for configuring time-based

lockdown and device behavior like preventing the device from suspending or redirection

activity on idle timeout.

Prevent Suspend Mode

Android device screen goes into sleep mode when the device is idle for a specific period of

Mode and disables Keep CPU On option.

Keep CPU On

UseKeep CPU Onoption to keep CPU ON whenSureLockis running.

runningSureLockto get into Prevent Suspend Mode on a specific time and days of the

week. This feature gives the option to specify following details:

● Start At

● End At

● Days of the week

Pause Prevent Suspend on Low Battery

Select this option and set the required battery threshold. When the battery percentage of

the device reaches the specified threshold, then the Prevent Suspend Mode option will be

paused automatically.

Prevent Suspend Only for Selected Apps

Admin can enablePrevent Suspend Modeon specific apps using this option. There are two

Except for the selected apps– Select this option to enablePrevent Suspend Modeon all

whichSureLockredirects the device screen toSureLock Home Screen.

● Chrome – Redirects to the Chrome browser

● Logout – Logout from SureLock

Enable Sleep Mode After Idle Timeout Action

With this setting, admin can allow an application that can run as a screensaver in SureLock.

To configure an application that will run as a screensaver, follow these steps:

1. Add an allowed application (that can run as a screensaver).

2. Configure screensaver timeout for the application.

3. Access SureLock Admin Settings.

4. Tap Timeout Settings and enable Idle Timeout.

5. Go to Idle Timeout Application and select None.

6. Select Enable Sleep Mode Idle Timeout Action.

Use this feature to reboot the device on specified days and time. Select Enable schedule

platform signed.

● Font Color - Select the desired Font Color from options displayed

● Size - Enter the Title Bar Size (in numeric)

● Preview - The user can view the settings applied to the Title Bar

Use Screensaver Settingsoption on device inactivity. This option allows only an image or

● Select Screensaver Media or Webpage- allows the user to browse and select an image

● Screensaver Timeout- allows user to set a time of inactivity for the screensaver to

including the ones that are allowed inSureLock.

Samsung KNOX devices, rooted devices or devices which are platform signed.

Disable Wi-Fi /Mobile Data Access

Admin can activate or deactivate the connectivity preference (WiFi / Mobile Data) for the

specific apps.

Unrestricted Data Usage

When Data Saver is ON, device will restrict the data access for all apps in the device. Enable

this setting to allow unrestricted data access for the specific apps.

Default Runtime Permissions for Allowed Apps

● Deny All

i. This feature is supported only on Marshmallow & above devices and it should be either Knox/

Platform Signed devices.

ii. In Platform signed devices, Deny All option is not available.

Diagnostic Logrefers to the log that has the list of all events whenSureLockblocks

unallowed applications.

EnablingDiagnostic Logalso enables, following options:

● Enable Diagnostic Log- Diagnostic log once enabled will log all activities of

● Clear Diagnostic Log- UseClear Diagnostic Logoption to clear the log entries.

Samsung KNOXfeature inSureLockis available only forSamsung Androiddevices

withAndroid4.2.2and above. Once enabled this feature inSureLock will provide advance

lockdown functionalities for the device without rooting.

There is no rooting required to enable advanced lockdown features in Samsung Knox

enabled devices. Select Enable Samsung Knox options to enable the following features:

Set Custom Boot Animation

Disable Other Home Screens

Disable Safe Mode

Disable Factory Reset

Disable Multi Window

Disable USB

Allow Multiple Users

Disable OTA Upgrade

Disable SD card

Disable Hardware Keys

Disable Application Uninstallation

Samsung devices display an animation of Samsung logo when the device is booting.

Select Set Custom Boot Animation option to play the desired animation file while booting

the device.

custom KNOX license key file is placed in the root folder of the SD Card.

Android devices can have more than one home screens; inbuilt and downloaded. When

Home button is pressed, the user gets an option to select home screen from the available

options. Once Disable Other Home Screen option is enabled, it disables all other installed

Safe Modeis a diagnostic mode and lets the user boot the Android device with disabled

third-party applicants. An user can manually enterSafeModeby using

thePowerandVolumebuttons. Once the user entersSafeMode, third-party applications

can be disabled and uninstalled.

UseDisable Safe Modeoption to prevent users from enteringSafe Modeusing device

hardware keys by password protecting the access.

multi-window view.

Once Disable Multi Window option is enabled, the multi-window accessing option on the

devices will be disabled.

This option disables following two ways of USB usages:

● Mass Storage - restricts access to the stored files on the device

Once Wipe Recent Apps option is enabled, on the launch of SureLock, the recent

applications accessed by the user on the device gets auto wiped.

S Voice feature is a virtual mobile personal assistant which is capable of running a large

number of tasks through voice command.

This option disables the Air View which allows the user to get a preview of certain types of

content without having to actually touch the display.

This option disables Air Command gestures which gives access to S Pen featureslike Smart

select, Screen write, and Samsung Notes.

The user has the option to block Smart Clip feature on the device. If it set to false, the user

Use this option to disable Multiple users functionality which allows multiple user spaces on

shareable devices such as tablets.

Use this option to disable Over the air upgrades in Samsung devices.

This option disables SD card if present in the Samsung devices.

SureLockallows the user to create a similar setting onSureLock Home Screen. The user

The user can add the widgets to the SureLock Home Screen.

To add a Widget, follow these steps:

1. AccessSureLock Admin Settings.

System Settings

The user can make changes in thesystem settingswithout exitingSureLock using System

Settings option underSureLock Admin Settings.

Setup SureLock Permissions

The admins can activate certain permissions anytime in SureLock. The following options are

available under Setup SureLock Permissions:

● Set SureLock as Default Launcher - This option will set SureLock as default Home

● Activate Device Admin - SureLock needs Android administrator permission for the

- Encrypt device

- Lock Device

- Set Password Restrictions

- Reset Device Password

● Enable Usage Access - Select this option and then enable Usage Access for SureLock.

● Disable Automatic Update From Play Store - Select this option to stop auto-updating

SureLock's feature of Import/ Export Settings helps in making the gruesome task of

multiple devices at a time with cloud option is achieved by just typing unique Cloud ID and

Admins can configure SureLock settings on multiple devices and export it to a File or Cloud.

Export to File

If the admins want to configure multiple devices with identicalSureLock Settings,

useExport to Fileoption to export the settings to a file which can be imported into other

devices for configuration using external storage device.

Export to Cloud

SelectExport to Cloudoption to export the settings to the Cloud, if admins don't want to

save the exported settings to an external storage device.

To export the settings to cloud, follow these steps:

Admins can import the SureLock settings from File or Cloud.

Import from File

UseImport from Fileoption to importSureLock Settingsfrom a file.

Import from Cloud

To import settings from the cloud for multiple devices, follow these steps:

1. AccessSureLock Admin Settings.

2. OnSureLock Admin Settingsscreen, tap Import/Export Settings.

3. OnImport/Export Settingsscreen, tap Import from Cloud

Home Screen.

Reset Settingsoption will reset all settings inSureLockincludingAllowed Applicationslist.

Automatic Import option will import SureLock Settings automatically from a specified File

or Cloud ID.

Automatic Import Cloud has the following options:

● Enable Automatic Import - Enables Automatic Import option from File or Cloud

● Periodically Check- This option is to specify a time period forSureLockto check for

Admins can use Schedule Automatic Import to import new settings automatically within a

specified period of time.

Start At - Set time to start scheduled import

● Export Auto-Import Settings - The settings file will have all the settings of SureLock

● Export Permissions Check List Status - On selecting this option, while importing

Admins can remotely manage the SureLock applications through SureMDM Console. If

SureMDM is not installed in the device, it will enable Integrated Nix Agent on tapping

Exit SureLock

This option will logout from SureLock.

To exit from SureLock, follow these steps:

1. Access SureLock Admin Settings.

2. On SureLock Admin Settings screen, tap Exit SureLock.

3. Tap Exit to complete.

device.

About SureLock

About SureLock provides General, Device, License and Diagnostics information of the

● IMEI 1 /IMEI 2- Unique preferred activation IDs of the device

● IMSI- Unique number to identify user of a cellular network

● MAC (WiFi)- a unique identifier assigned to network interfaces for communications on

● MAC (Bluetooth)- a unique identifier assigned to network interfaces for

● GUID- Unique reference number used as an identifier in computer software

● Android ID - a unique alphanumeric code, specifically used for identification purpose.

● Serial Number – a unique alphanumeric code that is given by manufacturer

● Preferred Activation ID- Option to specify ID used for activation

● Deactivate- Option to deactivate SureLock