Keyguard
Allow trust agents
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if trust agents can be used. Trust agents are user configured trusted devices which allow the lock screen to be bypassed when they are in the vicinity of the device (e.g. a smart watch, or a vehicle bluetooth device).
Options:
Equivalent Android Settings:
DevicePolicyManager.KEYGUARD_DISABLE_TRUST_AGENTS
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Disallow |
GOOG-12-007200 |
NCSC |
Allow |
Trust agents |
Xewli |
Disallow |
Allow fingerprint unlock
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if fingerprint authentication can be used on lock screens. Only available on devices that have a fingerprint reader.
Options:
Equivalent Android Settings:
DevicePolicyManager.KEYGUARD_DISABLE_FINGERPRINT
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Allow |
(not specified - use system default) |
NCSC |
Allow |
Fingerprint unlock |
Xewli |
Disallow |
Allow face unlock
Availability
- Added in
TDM v1
- Available in
Standard, Professional
- Supported in
Android 9+
Specifies if face authentication can be used on lock screens. Only available on devices that support face unlock.
Options:
Equivalent Android Settings:
DevicePolicyManager.KEYGUARD_DISABLE_FACE
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Allow |
(not specified - use system default) |
NCSC |
Allow |
(not specified - use system default) |
Xewli |
Disallow |
Allow iris unlock
Availability
- Added in
TDM v1
- Available in
Standard, Professional
- Supported in
Android 9+
Specifies if iris authentication can be used on lock screens. Only available on devices that support iris unlock.
Options:
Equivalent Android Settings:
DevicePolicyManager.KEYGUARD_DISABLE_IRIS
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Allow |
(not specified - use system default) |
NCSC |
Allow |
(not specified - use system default) |
Xewli |
Disallow |
Sensitive notification content
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if notification content should be redacted on the lock screen.
Options:
Equivalent Android Settings:
DevicePolicyManager.KEYGUARD_DISABLE_UNREDACTED_NOTIFICATIONS
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Allow |
(not specified - use system default) |
NCSC |
Disallow |
Notification details |
Xewli |
Allow |
Camera shortcut at lock screen
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if the camera can be launched from a locked device. Only available on devices that have at least one camera.
Options:
Equivalent Android Settings:
DevicePolicyManager.KEYGUARD_DISABLE_SECURE_CAMERA
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Allow |
(not specified - use system default) |
NCSC |
Disallow |
Camera |
Xewli |
Disallow |
Allow all notifications on lock screen
Availability
- Added in
TDM v1
- Available in
Standard, Professional
Specifies if any notifications should be displayed on the lock screen.
Options:
Equivalent Android Settings:
DevicePolicyManager.KEYGUARD_DISABLE_SECURE_NOTIFICATIONS
Presets:
Preset |
Value |
Reference |
|---|---|---|
DISA STIG |
Disallow |
GOOG-12-006800 |
NCSC |
Allow |
Notifications |
Xewli |
Disallow |