The calling device administrator must have requested USES_POLICY_RESET_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 BasePasswordPolicy passwordPolicy = edm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     // clear reset password token
     passwordPolicy.clearResetPasswordToken(enterpriseDeviceAdmin);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     // clear reset password token
     passwordPolicy.clearResetPasswordToken(enterpriseDeviceAdmin);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_WATCH_LOGIN to be able to call this method; if it has not, a security exception will be thrown.

The calling device administrator must have requested USES_POLICY_LIMIT_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

The calling device administrator must have requested USES_POLICY_RESET_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

NOTE 1: From MDM 5.2, this API is not supported for MDFPP (Mobile Device Fundamentals Protection Profile) SDP and will return false.

NOTE 2: This API will clear the credential storage when it receives an empty password as parameter or when the credential storage is in locked state. In order to check the current credential storage state, please use API.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     String newPassword = "test123";
     // set new password
     passwordPolicy.resetPassword(newPassword, 0);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_RESET_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 BasePasswordPolicy passwordPolicy = edm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     byte[] token = createToken();
     String newPassword = "test123";
     // set token before reset password
     passwordPolicy.setResetPasswordToken(enterpriseDeviceAdmin, token);
     // set new password
     passwordPolicy.resetPasswordWithToken(enterpriseDeviceAdmin, newPassword, token, 0);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     byte[] token = createToken();
     String newPassword = "test123";
     // set token before reset password
     passwordPolicy.setResetPasswordToken(enterpriseDeviceAdmin, token);
     // set new password
     passwordPolicy.resetPasswordWithToken(enterpriseDeviceAdmin, newPassword, token, 0);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API..
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int which = DevicePolicyManager.KEYGUARD_DISABLE_TRUST_AGENTS;
     passwordPolicy.setKeyguardDisabledFeatures(enterpriseDeviceAdmin, which);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

To implement any other policy (e.g. wiping data for a particular application only, erasing or revoking credentials, or reporting the failure to a server), you should implement onPasswordFailed(Context, android.content.Intent) instead. Do not use this API, because if the maximum count is reached, the device will be wiped immediately, and your callback will not be invoked. Since Knox 2.7.1 the device will not be wiped if com.samsung.android.knox.restriction.RestrictionPolicy#allowFactoryReset(Boolean) is set to false.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int num = 5;
     // set failed password attempts before wipe
     passwordPolicy.setMaximumFailedPasswordsForWipe(enterpriseDeviceAdmin, num);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_FORCE_LOCK to be able to call this method; if it has not, a security exception will be thrown.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API..
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int timeMs = 500;
     // set maximum time to lock
     passwordPolicy.setMaximumTimeToLock(enterpriseDeviceAdmin, timeMs);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The provided timeout is the time delta in ms and will be added to the current time. For example, to have the password expire 5 days from now, timeout would be 5 * 86400 * 1000 = 432000000 ms for timeout.

To disable password expiration, a value of 0 may be used for timeout.

The calling device administrator must have requested USES_POLICY_EXPIRE_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     long timeout = 432000000;
     // set Password expiration timeout
     passwordPolicy.setPasswordExpirationTimeout(enterpriseDeviceAdmin, timeout);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_LIMIT_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int length = 5;
     // set Password history length
     passwordPolicy.setPasswordHistoryLength(enterpriseDeviceAdmin, length);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_LIMIT_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int length = 5;
     // set Password minimum length
     passwordPolicy.setPasswordMinimumLength(enterpriseDeviceAdmin, length);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_LIMIT_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int length = 5;
     // set Password minimum letters
     passwordPolicy.setPasswordMinimumLetters(enterpriseDeviceAdmin, length);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_LIMIT_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int length = 5;
     // set Password minimum lower case
     passwordPolicy.setPasswordMinimumLowerCase(enterpriseDeviceAdmin, length);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_LIMIT_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int length = 5;
     // set Password minimum letter
     passwordPolicy.setPasswordMinimumNonLetter(enterpriseDeviceAdmin, length);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_LIMIT_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int length = 5;
     // set Password minimum numeric
     passwordPolicy.setPasswordMinimumNumeric(enterpriseDeviceAdmin, length);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_LIMIT_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int length = 5;
     // set Password minimum symbols
     passwordPolicy.setPasswordMinimumSymbols(enterpriseDeviceAdmin, length);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_LIMIT_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int length = 5;
     // set Password minimum upper case
     passwordPolicy.setPasswordMinimumUpperCase(enterpriseDeviceAdmin, length);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_LIMIT_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int quality = 5;
     // set Password Quality
     passwordPolicy.setPasswordQuality(enterpriseDeviceAdmin, quality);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_RESET_PASSWORD to be able to call this method; if it has not, a security exception will be thrown.

NOTE : This token is highly sensitive and should be treated at the same level as user credentials. In particular, NEVER store this token on device in plaintext. Do not store the plaintext token in device-encrypted storage if it will be needed to reset password on file-based encryption devices before user unlocks. Consider carefully how any password token will be stored on your server and who will need access to them. Tokens may be the subject of legal access requests.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 BasePasswordPolicy passwordPolicy = edm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     byte[] token = createToken();
     // set token before reset password
     passwordPolicy.setResetPasswordToken(enterpriseDeviceAdmin, token);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     byte[] token = createToken();
     // set token before reset password
     passwordPolicy.setResetPasswordToken(enterpriseDeviceAdmin, token);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

The calling device administrator must have requested USES_POLICY_DISABLE_KEYGUARD_FEATURES to be able to call this method; if it has not, a security exception will be thrown.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 BasePasswordPolicy passwordPolicy = edm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     ComponentName targetPkg = new ComponentName(pkg, class);
     PersistableBundle configuration = new PersistableBundle(); // need to set details
     passwordPolicy.setTrustAgentConfiguration(enterpriseDeviceAdmin, targetPkg, configuration);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 BasePasswordPolicy passwordPolicy = kcm.getBasePasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     ComponentName targetPkg = new ComponentName(pkg, class);
     PersistableBundle configuration = new PersistableBundle(); // need to set details
     passwordPolicy.setTrustAgentConfiguration(enterpriseDeviceAdmin, targetPkg, configuration);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }