EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     boolean result = passwordPolicy.deleteAllRestrictions();
     if (true == result) {
         // all password restriction has been deleted
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     boolean result = passwordPolicy.deleteAllRestrictions();
     if (true == result) {
         // all password restriction has been deleted
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

Note: In order to confirm that password was succesfully changed, listen to ACTION_PASSWORD_CHANGE.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     // if Device has no password and password change timeout is 0.
     boolean result = passwordPolicy.enforcePwdChange();
     if (true == result) {
         // if successful user required to create a password with no
         // option to cancel dialog.
     }

     // if device already has a password and password change timeout is 0 .
     boolean result = passwordPolicy.enforcePwdChange();
     if (true == result) {
         // if successful user is required to change existing password with no option
         // to cancel dialog.
     }

     // if device has no password and we set password change timeout to some
     // positive value.
     passwordPolicy.setPasswordChangeTimeout(10);
     boolean result = passwordPolicy.enforcePwdChange();
     if (true == result) {
         // if successful user is required to create a password with no
         // option to cancel dialog because password change timeout is only used
         // for password changes, not new passwords.
     }

     // if device already has password and we set password change timeout to some
     // positive value.
     passwordPolicy.setPasswordChangeTimeout(10);
     boolean result = passwordPolicy.enforcePwdChange();
     if (true == result) {
         // if successful user is required to change existing password with the
         // option to cancel it for the first time. After 10 minutes the user is prompted again with no option to cancel.
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     // if Device has no password and password change timeout is 0.
     boolean result = passwordPolicy.enforcePwdChange();
     if (true == result) {
         // if successful user required to create a password with no
         // option to cancel dialog.
     }

     // if device already has a password and password change timeout is 0 .
     boolean result = passwordPolicy.enforcePwdChange();
     if (true == result) {
         // if successful user is required to change existing password with no option
         // to cancel dialog.
     }

     // if device has no password and we set password change timeout to some
     // positive value.
     passwordPolicy.setPasswordChangeTimeout(10);
     boolean result = passwordPolicy.enforcePwdChange();
     if (true == result) {
         // if successful user is required to create a password with no
         // option to cancel dialog because password change timeout is only used
         // for password changes, not new passwords.
     }

     // if device already has password and we set password change timeout to some
     // positive value.
     passwordPolicy.setPasswordChangeTimeout(10);
     boolean result = passwordPolicy.enforcePwdChange();
     if (true == result) {
         // if successful user is required to change existing password with the
         // option to cancel it for the first time. After 10 minutes the user is prompted again with no option to cancel.
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     boolean excludeExternalStorageWipe = true;
     // disable expernal storage wipe
     passwordPolicy.excludeExternalStorageForFailedPasswordsWipe(excludeExternalStorageWipe);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy mPasswordPolicy = kcm.getPasswordPolicy();
 try {
     AuthenticationConfig authConfig = mPasswordPolicy.getEnterpriseIdentityAuthentication();
     if(authConfig != null ) {
         //successfully retrieved authentication config 
     } else {
        //unable to get authentication config
     }
 }catch (SecurityException e) {
     Log.e(TAG, "SecurityException: " + e);
 }
 

Note: Since MDM 5.2 if MinPasswordComplexChars >= 4, then at least one lowercase character and one uppercase character are required.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     // get the unique integer key and the name of the supported biometric authentication methods on the device (1, "Fingerprint")
     Map<Integer,String> map = passwordPolicy.getSupportedBiometricAuthentications();
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     // get the unique integer key and the name of the supported biometric authentication methods on the device (1, "Fingerprint")
     Map<Integer,String> map = passwordPolicy.getSupportedBiometricAuthentications();
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     // check whether the fingerprint option is enabled
     passwordPolicy.isBiometricAuthenticationEnabled(BIOMETRIC_AUTHENTICATION_FINGERPRINT);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     // check whether the fingerprint option is enabled
     passwordPolicy.isBiometricAuthenticationEnabled(BIOMETRIC_AUTHENTICATION_FINGERPRINT);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     boolean status = passwordPolicy.isMultifactorAuthenticationEnabled();
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     boolean status = passwordPolicy.isMultifactorAuthenticationEnabled();
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

Note: This API can be called only by Device owner or Profile owner.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     boolean status = passwordPolicy.lock();
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     boolean status = passwordPolicy.lock();
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     passwordPolicy.reboot("admin");
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     passwordPolicy.reboot("admin");
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     // enable the fingerprint option
     passwordPolicy.setBiometricAuthenticationEnabled(BIOMETRIC_AUTHENTICATION_FINGERPRINT |
             BIOMETRIC_AUTHENTICATION_IRIS | BIOMETRIC_AUTHENTICATION_FACE, true);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     // enable the fingerprint option
     passwordPolicy.setBiometricAuthenticationEnabled(BIOMETRIC_AUTHENTICATION_FINGERPRINT |
             BIOMETRIC_AUTHENTICATION_IRIS | BIOMETRIC_AUTHENTICATION_FACE, true);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

NOTE: From MDM 5.2, in case of MDFPP(Mobile Device Fundamentals Protection Profile) SDP enabled container, fingerprint will be disabled.

Note: Currently Enterprise Identity is not supported for MDFPP SDP enabled container.

 // Assume container already created and lock type set as PIN/Password and Admin wants to migrate to Enterprise Identity lock. 
 // The Following steps MUST followed for successful Enterprise Identity migration.
 
 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy mPasswordPolicy = kcm.getPasswordPolicy();
 BasePasswordPolicy mBasePasswordPolicy = kcm.getBasePasswordPolicy();
 String AUTHENTICATOR_PKGNAME = AuthenticationConfig.SAMSUNG_KERBEROS_AUTHENTICATOR;
 String AUTHENTICATOR_PKGPATH = "/mnt/sdcard/authenticator.apk";
 
 //Step 1: Install authenticator application inside the container
 ApplicationPolicy appPolicy = kcm.getApplicationPolicy();
 boolean result = appPolicy.installApplication(AUTHENTICATOR_PKGPATH, false);
 //make sure user should not able to uninstall this authenticator apk
 appPolicy.setApplicationUninstallationDisabled (AUTHENTICATOR_PKGNAME);
 //make sure user should not able to clear data of this authenticator apk
 List list = new ArrayList();
 list.add(AUTHENTICATOR_PKGNAME);
 appPolicy.addPackagesToClearDataBlackList(list);
 
 //Step 2: Set up proper password quality and complexity rules. It should reflect current password quality and complexity rules 
 //set on Enterprise Identity server(e.g Active directory) otherwise error will be reported.
 mBasePasswordPolicy.setPasswordQuality( DevicePolicManager.PASSWORD_QUALITY_ALPHABETIC);
 mBasePasswordPolicy.setPasswordMinimumLength(8);
 mBasePasswordPolicy.setPasswordMinimumUpperCase(1);
 mBasePasswordPolicy.setPasswordMinimumLowerCase(1);
 mBasePasswordPolicy.setPasswordMinimumSymbols(0);
 mBasePasswordPolicy.setPasswordMinimumNumeric (1);    
  
 //Step 3: Set Enterprise Identity config 
 AuthenticationConfig  authConfig = new AuthenticationConfig();

 //Set the authenticator package name .Make sure given package already installed on the device
 authConfig.setAuthenticatorPkgName (AUTHENTICATOR_PKGNAME);

 //Set authenticator signature (optional);
 authConfig.setAuthenticatorPkgSignature(null);
 
 //Show Enterprise Identity option on available lock types.
 authConfig.setHideEnterpriseIdentityLock(true);

 //Enforce Enterprise Identity
 authConfig.setForceEnterpriseIdentityLock(true);

 //configure authenticator params
 Bundle authBundle  = new Bundle();
 authBundle.putString ("LIBDEFAULTS_DEFAULT_REALM", "SISOIDP.IN");
 authBundle.putString ("FEDERATION_SERVER_URL", "idpsrv.sisoidp.in");
 authConfig.setAuthenticatorConfig(authBundle);
 int ret = mPasswordPolicy.setEnterpriseIdentityAuthentication(authConfig);
 //success 
 // Step 4: Trigger password change flow 
 if ( ret == 0 ){
     mPasswordPolicy.enforcePwdChange();
 } else {
     // fail cases
     switch (ret) {
        case AuthenticationConfig.ERROR_INTERNAL_FAIL:
            Log.d ( TAG, " Error:unable to configure due to some internal error");
            break;
        case AuthenticationConfig.ERROR_USER_NOT_AUTHORIZED:
            Log.d ( TAG, " Error:Not authorized to do this operation");
            break;
        case AuthenticationConfig.ERROR_INVALID_INPUT:
            Log.d ( TAG, " Error:Invalid input");
            break;
        case AuthenticationConfig.ERROR_AUTHENTICATOR_PACKAGE_NOT_INSTALLED:
            Log.d ( TAG, " Authenticator package not installed");
            break;
        case AuthenticationConfig.ERROR_AUTHENTICATOR_SIGNATURE_MISMATCH:
            Log.d ( TAG, " Authenticator signature not matching");
            break;
     }     
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     List<String> forbiddenStrings = new ArrayList<String>();
     forbiddenStrings.add("user123");
     forbiddenStrings.add("12345");
     forbiddenStrings.add("user123@company.com");
     boolean result = passwordPolicy.setForbiddenStrings(forbiddenStrings);
     if (true == result) {
         // policy successfully set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }

 // Reset forbidden strings
 // Option 1:
 try {
     List<String> forbiddenStrings = null;
     boolean result = passwordPolicy.setForbiddenStrings(forbiddenStrings)
 } catch (SecurityException e) {
     Log.w(TAG, SecurityException: + e);
 }

 // Option 2:
 try {
     List<String> forbiddenStrings = new ArrayList<String>();
     forbiddenStrings.add("");
     boolean result = passwordPolicy.setForbiddenStrings(forbiddenStrings)
 } catch (SecurityException e) {
     Log.w(TAG, SecurityException: + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     List<String> forbiddenStrings = new ArrayList<String>();
     forbiddenStrings.add("user123");
     forbiddenStrings.add("12345");
     forbiddenStrings.add("user123@company.com");
     boolean result = passwordPolicy.setForbiddenStrings(forbiddenStrings);
     if (true == result) {
         // policy successfully set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }

 // Reset forbidden strings
 // Option 1:
 try {
     List<String> forbiddenStrings = null;
     boolean result = passwordPolicy.setForbiddenStrings(forbiddenStrings)
 } catch (SecurityException e) {
     Log.w(TAG, SecurityException: + e);
 }

 // Option 2:
 try {
     List<String> forbiddenStrings = new ArrayList<String>();
     forbiddenStrings.add("");
     boolean result = passwordPolicy.setForbiddenStrings(forbiddenStrings)
 } catch (SecurityException e) {
     Log.w(TAG, SecurityException: + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     int maxCharOccur = 3;
     boolean result = passwordPolicy.setMaximumCharacterOccurrences(maxCharOccur);
     if (true == result) {
         // policy successfully set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     int maxCharOccur = 3;
     boolean result = passwordPolicy.setMaximumCharacterOccurrences(maxCharOccur);
     if (true == result) {
         // policy successfully set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     int maxAlphabeticSequenceLength = 3;
     boolean result = passwordPolicy.setMaximumCharacterSequenceLength(maxAlphabeticSequenceLength);
     if (true == result) {
         // policy successfully set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     int maxAlphabeticSequenceLength = 3;
     boolean result = passwordPolicy.setMaximumCharacterSequenceLength(maxAlphabeticSequenceLength);
     if (true == result) {
         // policy successfully set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     // setting 10 as max number of attempts.
     int numberofFailedAttempts = 10;
     boolean result = passwordPolicy
             .setMaximumFailedPasswordsForDeviceDisable(numberofFailedAttempts);
     if (true == result) {
         // device will be disabled after 10 wrong attempts of
         // password
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     // setting 10 as max number of attempts.
     int numberofFailedAttempts = 10;
     boolean result = passwordPolicy
             .setMaximumFailedPasswordsForDeviceDisable(numberofFailedAttempts);
     if (true == result) {
         // device will be disabled after 10 wrong attempts of
         // password
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     int maxNumericSequenceLength = 3;
     boolean result = passwordPolicy.setMaximumNumericSequenceLength(maxNumericSequenceLength);
     if (true == result) {
         // policy successfully set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     int maxNumericSequenceLength = 3;
     boolean result = passwordPolicy.setMaximumNumericSequenceLength(maxNumericSequenceLength);
     if (true == result) {
         // policy successfully set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 DevicePolicyManager dpm = (DevicePolicyManager) getSystemService(Context.DEVICE_POLICY_SERVICE);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     // enforcing complex character as 2, i.e., user needs to enter
     // at least one digit and one symbol in new password.
     int complexChar = 2;

     dpm.setPasswordQuality(enterpriseDeviceAdmin, DevicePolicyManager.PASSWORD_QUALITY_COMPLEX);// For HC

     passwordPolicy.setMinPasswordComplexChars(enterpriseDeviceAdmin, complexChar);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 DevicePolicyManager dpm = (DevicePolicyManager) getSystemService(Context.DEVICE_POLICY_SERVICE);
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     // enforcing complex character as 2, i.e., user needs to enter
     // at least one digit and one symbol in new password.
     int complexChar = 2;

     dpm.setPasswordQuality(enterpriseDeviceAdmin, DevicePolicyManager.PASSWORD_QUALITY_COMPLEX);// For HC

     passwordPolicy.setMinPasswordComplexChars(enterpriseDeviceAdmin, complexChar);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     int minChangedChars = 3;
     boolean result = passwordPolicy.setMinimumCharacterChangeLength(minChangedChars);
     if (true == result) {
         // policy successfully set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     int minChangedChars = 3;
     boolean result = passwordPolicy.setMinimumCharacterChangeLength(minChangedChars);
     if (true == result) {
         // policy successfully set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

Note: This API can be called only by Device owner or Profile owner.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     passwordPolicy.setMultifactorAuthenticationEnabled(true);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     passwordPolicy.setMultifactorAuthenticationEnabled(true);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 int timeout = 10;
 try {
     boolean result = passwordPolicy.setPasswordChangeTimeout(timeout);
     if (true == result) {
         // password change timeout value set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 int timeout = 10;
 try {
     boolean result = passwordPolicy.setPasswordChangeTimeout(timeout);
     if (true == result) {
         // password change timeout value set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int passwordExpiryDays = 10;
     passwordPolicy.setPasswordExpires(enterpriseDeviceAdmin, passwordExpiryDays);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);
     int passwordExpiryDays = 10;
     passwordPolicy.setPasswordExpires(enterpriseDeviceAdmin, passwordExpiryDays);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);

     passwordPolicy.setPasswordHistory(enterpriseDeviceAdmin, 5);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     ComponentName enterpriseDeviceAdmin = new ComponentName(context, EDMTestsAdmin.class);

     passwordPolicy.setPasswordHistory(enterpriseDeviceAdmin, 5);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     // enforcing 10 second timeout
     int time = 10;
     boolean result = passwordPolicy.setPasswordLockDelay(time);
     if (true == result) {
         // screen gets locked after 10 seconds of idle time
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

Note: Since Knox 3.0, this API will also disable the eye icon during password configuration and lockscreen.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     boolean enableMakePwdVisible = true;
     // disable visible pattern
     passwordPolicy.setPasswordVisibilityEnabled(enableMakePwdVisible);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

Note : This API is not applicable for container. Container will follow owner's behavior.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 String regex = "[a-zA-Z]{4}[0-9]{4}";
 try {
     // forced to enter 8 characters containing 4 alphabetic characters and 4 digits.
     boolean result = passwordPolicy.setRequiredPasswordPattern(regex);
     if (true == result) {
         // password pattern set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 String regex = "[a-zA-Z]{4}[0-9]{4}";
 try {
     // forced to enter 8 characters containing 4 alphabetic characters and 4 digits.
     boolean result = passwordPolicy.setRequiredPasswordPattern(regex);
     if (true == result) {
         // password pattern set
     }
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     boolean disableVisiblePattern = true;
     // disable visible pattern
     passwordPolicy.setScreenLockPatternVisibilityEnabled(disableVisiblePattern);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     boolean disableVisiblePattern = true;
     // disable visible pattern
     passwordPolicy.setScreenLockPatternVisibilityEnabled(disableVisiblePattern);
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

Note: This API can be called only by Device owner or Profile owner.

 EnterpriseDeviceManager edm = EnterpriseDeviceManager.getInstance(context);
 PasswordPolicy passwordPolicy = edm.getPasswordPolicy();
 try {
     boolean status = passwordPolicy.unlock();
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }
 

 // When you create container successfully, containerID will be returned via intent.
 // Use this containerID in below API.
 EnterpriseKnoxManager ekm = EnterpriseKnoxManager.getInstance(context);
 KnoxContainerManager kcm = ekm.getKnoxContainerManager(containerID);
 PasswordPolicy passwordPolicy = kcm.getPasswordPolicy();
 try {
     boolean status = passwordPolicy.unlock();
 } catch (SecurityException e) {
     Log.w(TAG, "SecurityException: " + e);
 }