MobiVisor blog series: KIOSK mode
Although you may not necessarily be aware of it, you too have seen a device running in KIOSK mode. You can usually see these at information terminals, e.g. in museums or tourist information centers. But the KIOSK mode is also used in supermarkets or train stations: namely whenever a device is only used for a limited number of actions. In our article we explain the properties of the KIOSK mode and its areas of application in more detail.
Implementing KIOSK mode
KIOSK mode is an Android-specific setting that can only be set using an MDM. There are two variants of KIOSK mode: the Device-Owner KIOSK and the SAMSUNG KIOSK.
Device Owner KIOSK
As the name suggests, this can only be used on Android devices that have been set up in “Device Owner Mode”. Setup determines whether it should be possible to leave the KIOSK using a password, whether the status bar should be displayed, and which apps should be displayed in KIOSK mode. You can also decide whether you want the device to still receive notifications. The possible apps are taken from the app list and simply activated for KIOSK mode with a tick.
SAMSUNG KIOSK
This KIOSK mode can only be applied on Samsung Device Owner devices. There are even more setting options here, such as whether the navigation bar is allowed, whether the task manager is allowed and much more. The Samsung KIOSK mode is visually different from the Device Owner KIOSK mode. After you have set up a KIOSK mode, you still have to assign it to the relevant devices, which is again done via a policy.
Implement KIOSK mode on Apple devices
As briefly mentioned above, there is no specific KIOSK mode for Apple devices. However, a similar effect can be achieved by limiting the number of apps on the device and blacklisting everything that is not needed. For Apple devices, there is also the option to configure a screen. This can be used to set the apps to appear in the same order on the home screen for each device.
If you want to use a KIOSK mode on your devices, it is good to know beforehand what this function entails. Since the KIOSK mode is intended to reduce the user interface of the device, this naturally also reduces the usable range of functions. Basically, users only see the apps previously specified by the admin on their devices. You are not able to download additional apps or change settings on your own.
On the one hand, this is of course an advantage because thus no unwanted changes can be made; on the other hand, in the event of a problem, the user’s options to help themselves or to actively help are also limited. When using KIOSK mode, it is always important to consider whether this strict device setup is necessary or whether the desired security level can also be achieved with other guidelines. However, if the devices are actually only used to work with one or two apps, the KIOSK mode can very well support their use as a pure work device.
What is the difference between KIOSK mode and single app mode?
Companies whose employees only need one app for work or who want to operate displays and terminals with just one app sometimes use the single app mode. This restricts the device even further and everything except the app to be used is hidden and partially deactivated. The disadvantage is that the devices constantly need a good internet connection because the system settings are also deactivated. This means that if the Internet fails, the device can no longer be manually connected to the Internet. If it cannot be ensured that the device is constantly connected to the Internet, single-app mode is not recommended.
Where is KIOSK mode used?
As already mentioned, KIOSK mode limits the range of usable functions of the device. By additionally equipping the devices with guidelines via MDM, the area of application becomes even narrower and more specific. This primarily benefits three types of companies:
Type 1: The mobile devices are used purely for work and fulfill a specific purpose
Companies that belong to this type usually have a few specific apps that employees need for work: be it care apps, apps that were specifically developed for trades or construction, or something similar. Although the devices have limited functionality and are usually not allowed to be used privately, each employee receives their own device so that they can work efficiently. With the MDM, employees are divided into different groups, e.g. foremen or construction equipment operators. Each of these groups has its own set of apps to choose from, which are installed on the devices. These apps are also added in the corresponding KIOSK modes. This means that each employee is equipped individually.
Type 2: There are specific security policies for the company
One main function of an MDM is the equipment of the devices with security guidelines that exceed the setting options of the device itself. Public sector companies in particular, such as city administrations or Diakonien and Caritas, must observe particularly strict data protection rules. Although you can block certain apps, specify secure WiFi connections or specify web filters using an MDM policy, it is sometimes advisable to also put the devices in KIOSK mode. For example, it can be advantageous to equip the devices with a KIOSK mode if they are to be used by several people, such as on a ward. This ensures that the user doesn’t change anything and that the next person can work just as well and safely.
Type 3: Mobile devices are not tied to users and only have one purpose
The KIOSK mode is also particularly suitable for use on mobile devices that are intended to serve only one purpose, for example as mobile cash register systems (point of sales), digital signposts, interactive exhibition displays, booking terminals and much more. The devices are designed to be used by many different users over the course of a day. Their functionality is therefore so limited that only very few or even just one app runs on them. This means that no settings can be changed and the apps run largely smoothly.
Conclusion
KIOSK mode is so ubiquitous in our everyday lives that we often overlook the configuration behind each device that enables surveys, mobile payments or directions. These examples illustrate its usefulness, and it’s no wonder that companies are using it too. The limited functionality simplifies operation considerably – it is clear to both admins and users what is allowed and what is not. This reduces errors and incidents. Equipped with the right apps, mobile devices are transformed into professional work devices in KIOSK mode.
