Universal Credential Manager policy (Premium)
A group of policies to manage credentials in both external and internal device storage, for example, a smartcard, micro SD card, or embedded Secure Element. A KPE Premium license is required for all policies in this group.
  • Enable UCM policy controls
    Use this control to enable or disable UCM policies. Enable this option before using any of the UCM policies. If this option is disabled, any UCM settings and policies are ignored.
  • UCM plugin for device lock
    A group of policies to specify how to use a UCM plugin for device unlock.
    • Enable UCM plugin for device lock
      Use this control to enable or disable device unlock through a UCM plugin. Enable this option to allow the specified plugin app to use stored credentials to unlock a device. Once enabled, device users cannot change the lock type. Disable to let device users control the lock type.
    • Name of UCM plugin configuration to use
      Enter the name of a UCM plugin configuration, which specifies how credential storage is used. Ensure that the name used here matches at least one name in the UCM Plugin Configurations > Name field.
    • Show lock type settings directly
      Enable this control to display a screen showing the screen lock setting when UCM plugin for device lock is turned on. Disable if device users must go to device Settings to view or change the lock type.
  • General purpose UCM plugin
    A group of policies to control a credential storage and UCM plugin that manages the credential storage.
    • Enable a general purpose UCM plugin
      Use this control to enable or disable a general purpose UCM plugin. Enable this option to manage a credential storage and the UCM Plugin used to access the storage. Disable to prohibit general access to the storage space.
    • Name of UCM plugin configuration to use
      Enter the name of a UCM plugin configuration, which specifies how credential storage is used. Ensure that the name used here matches at least one name in the UCM Plugin Configurations > Name field.