Kaspersky Secure Mobility Management

The help for this version of the solution is no longer updated, so it may contain outdated information. For up-to-date information about the solution refer to the Kaspersky Secure Mobility Management 4.1 Help.

Configuring other apps

Expand all | Collapse all

The Other apps section lets you configure apps installed on devices managed via the Kaspersky Endpoint Security for Android app in device owner mode or to apps installed in Android work profile.

When configuring some apps, the certificates installed on devices via the Kaspersky Security Center can be used. In this case, you need to specify a certificate alias in the app configuration:

• VpnCert for VPN certificates.
• MailCert for mail certificates.
• SCEP_profile_name for certificates received by using SCEP.

To configure apps via the Other apps section:

1. In the console tree, in the Managed devices folder, select the administration group to which the Android devices belong.
2. In the workspace of the group, select the Policies tab.
3. Open the policy properties window by double-clicking any column.

   Complete the following steps within 15 minutes. Otherwise, you may face an error when saving changes to the policy.

4. In the policy Properties window, select the App configuration > Other apps section.
5. In the List of apps configurations section, click the Add button.

   The Add app configuration window opens.

6. In the window that opens, specify the following parameters:
   • Activate

     Specifies whether to apply the configuration to the app on the devices that fall under the policy.

     The check box is selected by default.

   • App name (cannot be left blank)

     Name of the app to which the configuration is to be applied.

     When importing a configuration from an APK file or an installation package, the value is inserted automatically.

   • Package name (cannot be left blank)

     Name of the package to which the configuration is to be applied. How to get the package name of an app

     To get the package name of an app:

     1. Open Google Play.
     2. Find the required app and open its page.

     The app's URL ends with its package name (for example, https://play.google.com/store/apps/details?id=com.android.chrome).

     To get the package name of an app that has been added to Kaspersky Security Center:

     1. In the console tree of Kaspersky Security Center go to Advanced > Remote installation > Installation packages.
     2. Click the Additional actions button and select Manage mobile apps packages in the drop-down list.

     In the Mobile apps package management window that opens, identifiers of managed apps are displayed in the Application name column.

     If you have an app package as an .apk or .ipa file and want to know the app identifier, you can add the app package to the Mobile apps package management window by clicking the New button and following the on-screen instructions.

     When importing a configuration from an APK file or installation package, the value is inserted automatically.

     You can add only one configuration for each package name.

   • Version

     Version of the app, on which the created configuration will be based.

     When importing a configuration from an APK file or installation package, the value is inserted automatically.

   • Comment

     An optional comment.

7. In the same window, select how to add configuration:
   • Manually

     When this method is selected, click the Add button to add a new setting to the configuration. You need to specify the following parameters for each setting of the configuration:

     • Identifier

       Cannot be left blank. The value of this parameter is filled in manually.

     • Type

       Cannot be left blank. The value of this parameter is selected from a drop-down list.

       The following types are available:

       • String—A sequence of characters, digits, or symbols, always treated as text.
       • Boolean—True or false.
       • Integer—A numeric data type for numbers without fractions.
       • Choice—A data type that allows selecting one option from a predefined set of options.
       • Multiple choice—A data type that allows selecting one or multiple options from a list of possible options.
       • Bundle—A set of fields of any type, except for Bundle or BundleArray.
       • BundleArray—A set of bundles.
     • Value

       An optional parameter, whose value depends on the setting type.

       For some types of settings, additional parameters can be configured. For example, you can add macros for a String setting, add a field to a Bundle setting, or add a bundle to a BundleArray setting.

       It is also possible to edit a setting to be added to a bundle array by clicking the Edit button and configuring the setting's parameters.

       For information about configuring rules, please refer to the official documentation for the app to be configured.

   • Using installation package from Kaspersky Security Center

     When adding an app configuration using an installation package from Kaspersky Security Center, you need to select the app from a list of mobile app packages.

     After that, you can view the description for each setting of the configuration. These descriptions are part of the configuration file.

     Settings of configurations added using installation packages cannot be deleted.

   • Using APK file from your computer

     When adding an app configuration by using an APK file from your computer, you need to select the file saved on your computer.

     After that, you can view the description for each setting of the configuration. These descriptions are part of the configuration file.

     Settings of configurations added using APK files cannot be deleted.

   An example of configured basic parameters for the Microsoft Outlook app.

   Microsoft Outlook app configuration

   Configuration key	Description	Type	Value	Default value
   com.microsoft.outlook.EmailProfile.EmailAccountName	Username	String	The username that will be used to pull the username from Microsoft Active Directory. It might be different from the user's email address. You can either enter a value or select one from the Available macros drop-down list. For example, User.
   com.microsoft.outlook.EmailProfile.EmailAddress	Email address	String	The email address that will be used to pull the user's email address from Microsoft Active Directory. You can either enter a value or select one from the Available macros drop-down list. For example, user@companyname.com.
   com.microsoft.outlook.EmailProfile.EmailUPN	User Principal Name or username for the email profile that is used to authenticate the account	String	The name of the user in email address format. For example, userupn@companyname.com.
   com.microsoft.outlook.EmailProfile.ServerAuthentication	Authentication method	String	Username and Password – Prompts the device user for their password. Certificates – Certificate-based authentication.	Username and Password
   com.microsoft.outlook.EmailProfile.ServerHostName	ActiveSync FQDN	String	The Exchange ActiveSync email server URL. You don't need to use HTTP:// or HTTPS:// in front of the URL. For example, mail.companyname.com.
   com.microsoft.outlook.EmailProfile.AccountDomain	Email domain	String	The account domain of the user. You can either enter a value or select one from the Available macros drop-down list. For example, companyname.
   com.microsoft.outlook.EmailProfile.AccountType	Authentication type	String	ModernAuth – Uses a token-based identity management method. Specify ModernAuth as the Account Type for Exchange Online. BasicAuth – Prompts the device user for their password. Specify BasicAuth as the Account Type for Exchange On-Premises.	BasicAuth

8. Click OK to apply the configuration.

   The configuration appears in the List of apps configurations.

9. Click the Apply button to save the changes you have made.

The configuration is applied. Mobile device settings are changed after the next device synchronization with Kaspersky Security Center.

To change an app configuration:

1. In the Other apps section, select the app from the list, and then click the Edit button.

   The Edit app configuration window opens.

2. In the Edit app configuration window, you can edit a configuration of the selected app:
   • To upload a new APK file from your computer, click the Select button.
   • To add a new setting to the configuration, click the Add button below all the settings, and then specify the required parameters.
   • To delete a setting added manually, click the X button in the upper right corner of the setting's field.
3. Click OK to close the Edit app configuration window.
4. Click the Apply button to save the changes you have made.

The applied configuration is edited. Mobile device settings are changed after the next device synchronization with Kaspersky Security Center.

To enable or disable the app configuration:

1. In the Other apps section, select the app from the list.
2. Do either of the following:
   • Switch the toggle button to On to enable the configuration.
   • Switch the toggle button to Off to disable the configuration.
3. Click the Apply button to save the changes you have made.

The applied configuration is edited. Mobile device settings are changed after the next device synchronization with Kaspersky Security Center.

To delete an app configuration:

1. In the Other apps section, select the app from the list, and then click the Delete button.
2. Click the Apply button to save the changes you have made.

The applied configuration is deleted. Mobile device settings are changed after the next device synchronization with Kaspersky Security Center.