Back to top
Home / Knox Manage / Configure / Profile / Configure profile policies /

Wear OS policies

Last updated September 25th, 2024

This page describes the policies you can configure for Wear OS devices.

Knox Manage supports a multi-profile structure only for Android Enterprise, iOS, Windows and macOS. If you assign multiple profiles to Wear OS, only the highest-priority profile gets applied.

System

Policy Description Supported system
Screen Capture

Allows device users to take a screenshot of the device's screen.

Values

  • Allow
  • Disallow

Wear OS 3.5 and higher
OTA Upgrade

Allows the application of over-the-air (OTA) system updates to the devices.

Values

  • Allow
  • Disallow

Wear OS 3.5 and higher
> System Update

Specify how to keep your Wear OS devices up-to-date.

Values

  • Automatic: Firmware is automatically downloaded and updated.
  • Postponed: Firmware is automatically downloaded and updated after 30 days.
  • Windowed: Firmware is automatically downloaded and updated at specified time.

Wear OS 3.5 and higher
>> Freeze Period

Specify a freeze period for system updates. All incoming system updates and installations, including security patches, are blocked during a freeze period.

You can define a maximum of 90 days as a freeze period. Two consecutive freeze periods must be 60 days apart. Freeze periods must not be duplicates or overlap with another freeze period.

Wear OS 3.5 and higher
Factory Reset

Allows device users to factory reset their device from the Settings menu.

Values

  • Allow
  • Disallow

Wear OS 3.5 and higher
> Factory Reset via Firmware Recovery Mode

Allows device users to factory reset their device in the firmware recovery mode.

Values

  • Allow
  • Disallow

If enabled, users can reset the device by pressing physical buttons on the device.

If the Kiosk policy is also set in the same profile, the value of this policy is automatically changed to N/A.

Wear OS 4.0 and higher
Developer Mode

Allows the use of developer mode.

Values

  • Allow
  • Disallow

Wear OS 3.5 and higher
Key Remapping Settings

Allows remapping of the device's home key to launch a specific action.

Values

  • Apply — Disables the key remapping settings on the smartwatch to prevent the device user from changing them.

Wear OS 3.5 and higher
> Key Remapping

Specify how the user interacts with the remapped home key, and the app for the key to launch.

Values

  • Key and Press Type — Select Home key — long press only or Home key — double press only.
  • Package Name — Select the app to launch using the remapped keys.
> Long Press Duration

Enter the key-press duration to trigger the remapped action. Values start from 500 ms.
Power Saving Mode

Allows the use of the power saving mode on the device.

Values

  • Turn On
  • Turn Off
  • Force On
  • Force Off
  • If set to Turn On or Turn Off, device users can modify the power saving mode on the device.
  • If set to Force On or Force Off, device users cannot modify the power saving mode on the device.
  • If set to Turn On or Force On, device users cannot modify the Wi-Fi settings on their device.

Wear OS 3.5 and higher
Sound Mode Settings

Allows device users to change the sound settings on the device.

Values

  • Allow
  • Disallow

Wear OS 4.0 and higher
Sound Mode

Set the device's sound mode.

Values

  • Sound
  • Vibrate
  • Mute

Wear OS 3.5 and higher
> Vibrate with Sound

Sets the device on vibrate mode when the Sound Mode is set as Sound.

Values

  • N/A — Device users can change the setting.
  • Force on — Device users cannot change the setting.
  • Force off — Device users cannot change the setting.
 Wear OS 4.0 and higher
> Volume Adjustment

Allows device users to set the volume level on the device.

Values

  • User Choice — Allows users to set the volume level. If you define volume levels, device users can change them.
  • Enforced — Limits volume adjustment to within the levels you define.
>> Ringtone Volume Level

Select the adjustable volume level for ringtones:

  • 1—15 for sound
  • 0 for vibrate or mute
>> Media Volume Level

Select the adjustable volume level for media. You can set the volume level for all sound modes.
>> Notification Volume Level

Select the adjustable volume level for notifications:

  • 1—15 for sound
  • 0 for vibrate or mute
>> System Volume Level

Select the adjustable volume level for system:

  • 1—15 for sound
  • 0 for vibrate or mute
Microphone

Allows the device user to adjust the microphone volume and mute it.

Values

  • Allow
  • Disallow
 Wear OS 3.5 and higher
Language Settings

Specify a language for the devices.

Values

  • Allow
  • Disallow

Wear OS 4.0 and higher
Brightness Settings

Specify if users can set the brightness on the devices.

Values

  • Allow
  • Disallow

Wear OS 4.0 and higher
Brightness Level

Set the maximum allowed brightness on the devices.

Values

  • Apply

Wear OS 4.0 and higher
> Level

Specify a value for the brightness level using the slider.

Wear OS 4.0 and higher
Adaptive Brightness

Allow automatic adjustment of screen brightness based on surrounding light conditions.

Device users can change this setting anytime.

Wear OS 4.0 and higher
Always On Display

Specify if the smartwatch screen remains active at all times.

Values

  • Turn on
  • Turn off

Wear OS 4.0 and higher

Android 13 and higher
Automatic Date and Time

Controls date and time syncing on the smartwatch.

In the App Delegation Scope Management policy, if Delegation Scope is set to Managed configurations management, third-party apps are allowed to control the automatic date and time setting.

Values

  • Turn on — The date and time are synced automatically, and the device user can change them.
  • Turn off — The date and time can only be set manually by the device user.
  • Force on — The date and time are synced automatically, and the device user can't change them.
  • Force off — The date and time can't be changed.

Wear OS 4.0 and higher

Android 13 and higher
Sleep Mode

Schedules the smartwatch for sleep mode at a specific time on one or more days of the week. Notifications and alerts are hidden in sleep mode.

Values

  • Apply

Wear OS 4.0 and higher

Android 13 and higher
> Days

Specifies the days of the week when sleep mode must be activated on a device.

Values

Select one or more days.
> Schedule (Start — End Time)

Specifies the time period for sleep mode.

Values

Enter the start and end times, in 24-hour format.
Show Emergency Call Button

Toggles the visibility of the Emergency call button on the power off screen.

Values

  • Allow
  • Disallow

Wear OS 4.0 and higher

Android 13 and higher
Automatic Fall Detection

Specifies whether to monitor and detect if the device user falls.

Values

  • Allow
  • Disallow

Wear OS 4.0 and higher

Android 13 and higher
> Sensitivity

Specifies the parameters that define a fall. Only available when the Automatic Fall Detection policy is set to Allow.

Values

  • Always
  • During physical activity — The smartwatch begins monitoring for fall detection after 3 minutes of physical activity with a bipedal gait, such as walking or running.
  • Only during workouts — The smartwatch begins monitoring for fall detection during non-bipedal activity, such as swimming or biking.
Show Charging Info

Controls the display of charging information on the smartwatch.

Values

  • Turn on — Charging information is shown, and the device user can change this setting.
  • Turn off — Charging information is hidden, and the device user can change this setting.
  • Force on — Charging information is shown, and the device user can't change this setting.
  • Force off — Charging information is hidden, and the device user can't change this setting.

Wear OS 4.0 and higher

Android 13 and higher

Connectivity

Policy Description Supported system
Mobile Network Setting

Allows device users to set the mobile network on the device.

Values

  • Allow
  • Disallow

Wear OS 3.5 and higher
Mobile Networks

Specifies whether or not to use the mobile network on the devices.

Values

  • Turn on
  • Turn off

When set to On, you can also set mobile data usage.

Wear OS 3.5 and higher
> Mobile Plans

Specify whether to allow device users to use mobile plans. This setting displays when Mobile Networks is set to On.

Values

  • Turn on — Allow device users to use mobile plans. Users can change this setting anytime.
  • Turn off — Restricts device users from using mobile plans. Users can change this setting anytime.
  • Force on — Enable use of mobile plans on devices. Device users can't change this setting.
  • Force off — Disable all mobile plans on devices. Device users can't change this setting.

When set to Turn on or Force on, you can also set mobile data usage.

Wear OS 3.5 and higher
> Mobile Data

Specifies whether or not to allow device users to use mobile data. This policy displays when Mobile Plans is set to Turn on or Force on.

Values

  • Turn on: Allow device users to use mobile data. Users can change this setting anytime.
  • Turn off: Restricts device users from using mobile data. Users can change this setting anytime.
  • Force on: Enable mobile data on devices. Device users can't change this setting.
  • Force off: Disable mobile data on devices. Device users can't change this setting.

Wear OS 3.5 and higher
Wi-Fi

Allows device users to modify the Wi-Fi settings.

Values

  • Turn on
  • Turn off
  • Force on
  • Force off
  • If set to Turn On or Turn Off, device users can modify the Wi-Fi settings on the device.
  • If set to Force On or Force Off, device users cannot modify the Wi-Fi settings on the device.
  • If the Power Saving Mode policy us set to Turn On or Force On, device users cannot modify the Wi-Fi settings on their device.
  • If the Airplane Mode policy is set to Turn On, the Wi-Fi is turned off on the device.
 Wear OS 3.5 and higher
NFC

Allows device users to use Near Field Communication (NFC) on the device.

Values

  • Turn on
  • Turn off
  • Force on
  • Force off
  • If set to Turn On or Turn Off, device users can modify the NFC settings on the device.
  • If set to Force On or Force Off, device users cannot modify the NFC settings on the device.
 Wear OS 3.5 and higher
Bluetooth

Allows device users to use the Bluetooth feature on the device.

Values

  • Turn on
  • Turn off
  • Force on
  • Force off
  • If set to Turn On or Turn Off, device users can modify the Wi-Fi settings on the device.
  • If set to Force On or Force Off, device users cannot modify the Wi-Fi settings on the device.
  • If the Airplane Mode policy is set to Turn On, the Bluetooth feature is turned off on the device.
 Wear OS 3.5 and higher

Kiosk

Policy Description Supported system
Kiosk Settings

Enables the Kiosk mode on the device.

Values

  • Apply

Wear OS 3.5 and higher
> Allowlisted App

Specify the apps that are allowed to run on the kiosk.

Wear OS 3.5 and higher
> Power

Allows users to use the power button in the Kiosk mode.

Values

  • Allow
  • Disallow

Wear OS 4.0 and higher
> System Error Warnings

Enables the Kiosk mode on the device.

Values

  • Enable
  • Mute

Wear OS 3.5 and higher
> Quick Panel & Notifications

Allows display of system information and notifications on the Kiosk device.

Values

  • Allow
  • Disallow
  • Quick Panel only
  • Notification only (for Wear OS 4.0 and higher)

Wear OS 3.5 and higher
> Widget Tile

Allows users to control the widget tiles in the Kiosk mode.

Values

  • Allow
  • Disallow

Wear OS 4.0 and higher
>> Widget Tile Settings

Allow users to add or delete widget tiles on the kiosk.

Values

  • Allow
Recent Apps

Allows access to information about the recent apps used on the kiosk.

Values

  • Enabled
  • Disabled

Wear OS 3.5 and higher
> Device Settings

Allows or blocks access to the device's Settings app, when the device is being used as a kiosk.

Values

  • Allow
  • Block

Wear OS 3.5 and higher

App Restrictions

Policy Description Supported system
App Permission

Controls how apps can request permissions during runtime.

Values

  • Grant
  • Deny
  • Prompt

The App Permission policy is relevant to all apps. It is only applied when an app requests it, regardless of when an IT admin sets device permissions. It does not require any interaction from the device user.

Wear OS 3.5 and higher
> App Permission Exception Policy List

Lets you add policy exceptions for specific applications. Only supported for internal apps.

This policy takes priority over the App Permission policy when both are applied, and takes effect as soon as you set it.

Wear OS 3.5 and higher
App Installation Blocklist

Allows or blocks specific apps from being installed. When this policy is applied, the apps installed under a previous policy are uninstalled.

Wear OS 3.5 and higher
System App Activation

Allows activation of pre-installed system apps that are excluded from the default apps. Apps included in the app installation blocklist are not activated.

Wear OS 3.5 and higher
App Execution Blocklist

Allows or blocks specific apps from running on the device.

Wear OS 3.5 and higher
Hide Apps

Allows hiding of apps on the display screens of a device.

Wear OS 4.0 and higher
> Apps List

Specify the apps to hide on the display screen of a device.

Wear OS 4.0 and higher
App Uninstallation Prevention List

Blocks the deletion of specified apps from the device.

Wear OS 3.5 and higher
App Delegation Scope Management

Specifies additional delegation scopes for certain apps.

Values

  • Package Name
  • Delegation Scope

Wear OS 3.5 and higher
Watch Face Customization

Specifies the app to be used as the Watch Face.

When this policy is applied, you can specify the package name and allow or disallow watch face change.

Wear OS 3.5 and higher
> Watch Face Change

Allows device users to change the Watch face.

Wear OS 3.5 and higher

Location

Policy Description Supported system
Location Mode Sets the degree of location detection enabled on company owned devices.

Wear OS 3.5 and higher

Phone

Policy Description Supported system
Data Roaming Allows roaming data services.

Values

  • Allow
  • disallow

Wear OS 3.5 and higher
Airplane Mode Allows airplane mode on devices.

Values

  • Turn On
  • Turn Off

Wear OS 3.5 and higher
Auto Call Answer

Allows devices to automatically receive calls from specific phone numbers.

Values

  • Apply

Wear OS 4.0 and higher
> Mobile Number

Specify the phone numbers from which to automatically received calls.
> Answer Delay (sec)

Specify a time delay of 0 to 20 seconds, after which to automatically receive the calls. For example, a value of 0 secs means to answer the call immediately.
Contact Management

Allows update of contacts on devices by uploading XSLX file.

For more information, see Add or delete contacts on Wear OS devices.

Wear OS 3.5 and higher

Wi-Fi

Policy Description Supported system
Configuration ID

Assign a unique name for each Wi-Fi setting.

Wear OS 4.0 and higher
Description

Enter a description for each Wi-Fi setting.

Wear OS 4.0 and higher
Network Name (SSID)

Enter an identifier of a wireless router to connect to.

You can also click Lookup to open the reference items list and select an item from it. The reference value is automatically entered.

Wear OS 4.0 and higher
Hidden Network (SSID)

Allows to hide the network from the list of available networks on the device. The SSID does not broadcast.

Values

  • Allow
  • Disallow

Wear OS 4.0 and higher
Attempt Automatic Connection

Controls whether the device automatically connects to this network.

Values

  • Use — Forces the device to set this network as default and connect to it when Wi-Fi is turned on.
  • Do Not Use — This network configuration is pushed to the device, but the device user chooses which networks to connect to.

Wear OS 4.0 and higher
Randomized MAC Address

Controls whether to generate a random MAC address for the device when connecting to a Wi-Fi network.

Values

  • Use
  • Do Not Use

Wear OS 4.0 and higher
Security Type

Specifies the Wi-Fi security protocol and authentication scheme of the access point.

Values

  • None
  • WPA-PSK
  • WPA-EAP

Wear OS 4.0 and higher
> Password

Enter the password of the target Wi-Fi access point. You can enter up to 100 characters for the password.

Wear OS 4.0 and higher
> EAP Outer

Specifies the outer EAP authentication method. Only available if the Security Type configuration setting is set to WPA-EAP.

Values

  • PEAP
  • EAP-TTLS

Wear OS 4.0 and higher
> EAP Inner

Specifies the inner, tunneled EAP authentication method. Only available if the Security Type configuration setting is set to WPA-EAP.

Values

  • PAP
  • MSCHAP
  • MSCHAPv2

Wear OS 4.0 and higher
> ID

Enter the user name to submit during authentication. Only available if the Security Type configuration setting is set to WPA-EAP and the User Information Input Method configuration setting is set to Manual Input.

Values

Enter a user name. Click Lookup to browse and select available lookup items to add to the name.

Wear OS 4.0 and higher
> Anonymous Identity

Enter an anonymous ID for the user. Only available if the Security Type configuration setting is set to WPA-EAP.

Values

Enter a name

Wear OS 4.0 and higher
> User Certificate Input Method

Specifies the confirmation method for the user certificate. Register an external certificate for each network configuration, and then verify each network configuration using that certificate. All users share this one certificate for each network configuration. Go to Advanced > Certificate > External Certificate to register network settings for each purpose. Only available if the Security Type configuration setting is set to WPA-EAP.

Values

  • EMM Management Certificate (default)

Wear OS 4.0 and higher
> User Certificate (Alias)

Specifies the certificate to apply for the user. The user certificate (P12 or PFX file) corresponding to the obtained user information is applied along with a profile to verify the user. Only available if the Security Type configuration setting is set to WPA-EAP.

Values

Select a certificate from the list.

Wear OS 4.0 and higher
> CA Certificate (Alias)

Select a root certificate to apply. The available certificates are those registered in Advanced > Certificate > External Certificate with the Purpose set to Wi-Fi and the Type set to Root. Only available if the Security Type configuration setting is set to WPA-EAP.

This setting is required.

Wear OS 4.0 and higher
> Domain

Specify the domain addresses that can be accessed via Wi-Fi.

You must provide either Domain or Alternate Subject in the Wi-Fi settings.

Wear OS 4.0 and higher
> Alternate Subject

Specify the alternate subject names.

You must provide either Domain or Alternate Subject in the Wi-Fi settings.

Wear OS 4.0 and higher

APN

Policy Description Supported system
Configuration ID

Specifies the name of the APN configuration. Each configuration name must be unique.

Values

Enter a name.

Wear OS 3.5 and higher
Description

Specifies the description of the APN configuration.

Values

Enter a description.

Wear OS 3.5 and higher
Access Point Name (APN)

Specifies the name of the APN, which is comprised of the network identifier and optional operator identifier.

Values

Enter a name.

Wear OS 3.5 and higher
Access Point Type

Specifies which connection services to allow for this APN.

Values

  • Default — Allows all services. Also known as unspecified.
  • MMS — Allows only the Multimedia Messaging Service (MMS).
  • Supl — Allows only the Secure User Plane Location (SUPL) service, which is an IP-based protocol that uses GPS for device geolocation.

Wear OS 3.5 and higher
Mobile Country Code (MCC)

Specifies the MCC of the APN.

Values

Enter a 3-digit MCC.

Click Lookup to browse and select available lookup items to include in the MCC.

Wear OS 3.5 and higher
Mobile Network Code (MNC)

Specifies the carrier's MNC for the APN.

Values

Enter a 2- or 3-digit MNC.

Click Lookup to browse and select available lookup items to include in the MNC.

Wear OS 3.5 and higher
MMS Server (MMSC)

Specifies the address of the carrier's MMS server.

Values

Enter a URL.

Wear OS 3.5 and higher
MMS Proxy Server

Specifies the address of the carrier's MMS proxy server.

Values

Enter an IP or domain.

Wear OS 3.5 and higher
MMS Proxy Server Port

Specifies the port of the carrier's MMS proxy server.

Values

Enter a port.

Wear OS 3.5 and higher
Proxy Server

Specifies the address of the carrier's WAN proxy server.

Values

Enter a URL.

Wear OS 3.5 and higher
Proxy Server Port

Specifies the port of the carrier's WAN proxy server.

Values

Enter a port.

Wear OS 3.5 and higher
Access Point Username

Specifies the account username to use when connecting to the APN.

Values

Enter a username. By default, the field contains the ${UserName} lookup item, which substitutes for the username associated with the device in KM.

Wear OS 3.5 and higher
Access Point Password

Specifies the account password to use when connecting to the APN.

Values

Enter a password.

Wear OS 3.5 and higher
Authentication Method

Specifies the protocol to use when authenticating with the APN.

Values

  • None — Disables authentication.
  • PAP — Uses the Password Authentication Protocol (PAP), which requires a username and password.
  • CHAP — Uses the Challenge-Handshake Authentication Protocol (CHAP), which implements challenge messages to validate identities.
  • PAP or CHAP — Uses either the PAP or CHAP method, depending on which is available.

Wear OS 3.5 and higher
APN Protocol

Specifies the communications protocol to use when connecting to the APN.

Values

  • IPV4
  • IPV6
  • IPV4/IPV6
  • PPP

Wear OS 3.5 and higher
APN Roaming Protocol

Specifies the communications protocol to use when connecting to the APN while the device is roaming.

Values

  • IPV4
  • IPV6
  • IPV4/IPV6
  • PPP

Wear OS 3.5 and higher
Mobile virtual network operator Type

Specifies the type of identifier used by the APN's mobile virtual network operator (MVNO).

Values

  • SPN
  • IMSI
  • GID
  • ICCID

Wear OS 3.5 and higher
Bearer Enables specifying which wireless broadcast standards can be used when connecting to the APN.

Wear OS 3.5 and higher
Bearer List

Specifies which bearer types can be used when connecting with the APN. Only available if the Bearer policy is set to Apply.

Values

  • LTE
  • HSPAP
  • HSPA
  • HSUPA
  • HSDPA
  • UMTS
  • EDGE
  • GPRS
  • eHRPD
  • NR
  • EVDO_B
  • EVDO_A
  • EVDO_0
  • 1xRTT
  • CDMA
  • TD_SCDMA
  • IDEN
  • GSM
  • IWLAN

Wear OS 3.5 and higher

On this page

Is this page helpful?