Configure an Android Device into Lock Task Mode

Lock Task Mode allows you to lock a mobile device into running only one application even if the device is rebooted. Lock Task Mode locks the device from any unauthorized access, and the device will remain locked until Lock Task Mode is explicitly disabled.

You can control how users interact with the locked device by enabling or disabling any of the following features:

Requirements

You'll need 2 Android devices to set up the most secure mode for Android devices, Lock Task Mode. If you only have a single Android device, then you can only set up the less secure Screen Pinning Mode.

Enable Kiosk Mode for Android

There are two kiosk modes available in the Android Mobile Client:

Note: While this procedure explains how to manually set up a device using SAFR Beam, you can also use the Android Debug Bridge (ADB) command line tool.

To set up and enable Lock Task mode:

  1. Go to the SAFR download portal and from the menu, select Android.
  2. Install SAFR Beam on your primary device.
  3. Set your target device in factory reset prior to use.
  4. Follow the instructions on the primary device for installing the Mobile Client on a target device.
  5. Once the Mobile Client is installed on the target machine, click the lock icon next to the settings gear icon. Follow the instructions for setting the device up for Lock Task mode.
    Note: In this mode, the client has full control over the device and only the client can request exiting the mode.
  6. Exiting can be done by tapping the screen three times (3-taps gesture) which displays the system's security dialog. (assuming that one has been configured) In the dialog, you are prompted to confirm your identity by entering the device's credentials (PIN, gesture, or fingerprint). If the device does not have security settings in place or your identity is confirmed, the Mobile Client restarts in an unlocked state.

Important: You should configure device security either with a PIN, a gesture, or a fingerprint. That way, if a device is turned off while the Mobile Client is locked (either by the power button or as the result of drained battery), only a credible user is able to start the device and re-run the Mobile Client. When re-run, the Mobile Client enters the mode it was in prior to turning off the device.

Note: If you install the Mobile Client apart from SAFR Beam, you can still set up security by clicking the lock icon. However, because the Mobile Client has not been registered as a device administrator, its security is not as strong as the Lock Task mode.

The following scenarios occur when using the kiosk modes when the Mobile Client is or is not registered as a device manager:

Scenario Action
No device security configured (not registered); you confirm to enter SPM on the security dialog Exits via 3-taps gesture, or by holding the Recents and Back keys at the same time; the Mobile Client is restarted in unlocked state (Screen Pinning mode)
No device security configured (not registered); you deny entering SPM on the security dialog The Mobile Client is in locked state but is restarted in unlocked state after approximately ten (10) seconds; a timer is triggered that queries for locked state and corrects it if needed
PIN device security configured (registered); you confirm to enter SPM on the security dialog Exit by 3-taps gesture or by holding the Recents and Back keys at the same time; SAFR prompts you to confirm your identity by entering PIN and if successful, it is restarted in unlocked state

Note: On some devices, SPM can be explicitly enabled in system's setting with an option to ask for a PIN upon unlocking/PIN device security configured. If you confirm to enter SPM on the system dialog by exiting by holding the Recents and Back keys at the same time, you are prompted to confirm your identity by entering PIN. If successful, the device home screen is displayed. The next time, SAFR restarts in an unlocked state.

See Also