Custom Profile Support for Android: Samsung Restrictions for AirWatch Agent 8.1 for Android

AirWatch uses Custom Profiles to allow admins to push features and other settings to Android devices that are not supported through the AirWatch Console.  The functions discussed in this article include the below settings added with Android Agent 8.1 for Android and the Samsung ELM Service 4.1.

Using Custom Profiles

The Custom Settings payload allows admins to enter their own XML into a profile and apply the profile to devices. Follow the steps below using the custom XML code found in this article.

1. Configure the Generalprofile and deployment options as desired.

2. Navigate to the Custom Settings profile and select Configure.

3. Add the associated XML below to the Custom Settings text box. 

  • This XML should contain the complete block of code as listed below, from <characteristic> to </characteristic>. 
  • Administrators should configure each setting from <true /> to <false /> as desired. 
  • If certificates are required, then configure a Certificate payload within the profile and reference the PayloadUUID in the Custom Settings payload.

4. Select Save & Publish.

Custom XML

Allow Iris Scanner, Allow Face Unlock - Device Passcode

This setting prevents Face and Iris Unlock from being set as the screen lock type for the device.  This only affects the “personal” side of the device on Knox dual persona devices.

<characteristic type="" uuid="9b9g84d9-689c-4e34-9b91-bd6dc7946423"> <parm

name="enableIrisScannerAuthentication" value="False" /> <parm name="enableFaceUnlockAuthentication"

value="False" /> </characteristic>


Allow Iris Scanner - Knox Container Passcode

This setting prevents Iris Unlock from being set as the authentication method for the Knox Container.  Face Unlock currently is not available for the Knox Container.

<characteristic type=""

uuid="8e7e6641-d5e2-47a8-842a-31e3780e9547"> <parm name="enableIrisScannerAuthentication"

value="False" /> </characteristic>


Allow Lockscreen Shortcuts

This setting prevents shortcuts, such as Camera or Phone, from being displayed on the lock screen.  The user cannot modify or add shortcuts to the lock screen. 

<characteristic type=""

uuid="80edc0ae-abed-4efa-89e5-fdc1834f4dbf"> <parm name="allowLockScreenShortcut" value="False" />



Customer Impact

Take advantage of these updates by meeting the minimum requirements and deploying the AirWatch Custom Profile. 

Minimum Requirements

  • AirWatch Agent 8.1 for Android
  • Samsung ELM Service v4.1
  • For Allow Face Unlock: Samsung device running Knox 2.9+
  • For Allow Iris Scanner: Samsung device running Knox 2.2+
  • For Allow Lockscreen Shortcuts: Samsung device running MDM (SAFE) 4.0+


Support Contact Information

To open a Support Request, please call your local support line or submit a Support Request via My Workspace ONE.


Best Regards,

The VMware Workspace ONE Team

Have more questions? Submit a request


Article is closed for comments.