Wear OS policies

Allows device users to take a screenshot of the device's screen.

Values

• Allow
• Disallow

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Allows the application of over-the-air (OTA) system updates to the devices.

Values

• Allow
• Disallow

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specify how to keep your Wear OS devices up-to-date.

Values

• Automatic: Firmware is automatically downloaded and updated.
• Postponed: Firmware is automatically downloaded and updated after 30 days.
• Windowed: Firmware is automatically downloaded and updated at specified time.

Wear OS 3.5 and higher

Specify a freeze period for system updates. All incoming system updates and installations, including security patches, are blocked during a freeze period.

You can define a maximum of 90 days as a freeze period. Two consecutive freeze periods must be 60 days apart. Freeze periods must not be duplicates or overlap with another freeze period.

Wear OS 3.5 and higher

Allows device users to factory reset their device from the Settings menu.

Values

• Allow
• Disallow

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Allows device users to factory reset their device in the firmware recovery mode.

Values

• Allow
• Disallow

If enabled, users can reset the device by pressing physical buttons on the device.

Wear OS 4.0 and higher

Allows the use of developer mode.

Values

• Allow
• Disallow

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Allows remapping the device's home key to launch a specific application.

Values

• Apply — Disables the key remapping settings on the smartwatch to prevent the device user from changing them.

Wear OS 3.5 and higher

Android 11 and higher

Enterprise Wear OS Framework version 1.0 and higher

Configure key remapping behavior for the home key.

Values

• Key and Press Type — Allows you to specify the key press type (long press or double press).
• Application Type (for long press only) — Lets you specify what kind of apps the remapping will apply to.
  • For general apps — Supports general apps, including pre-loaded apps such as Calculator. If this option is set, long-pressing the home key launches the general app specified by Package Name. Any pre-loaded or newly loaded apps can be assigned to use the remapping.
  • For custom apps — An "intent" is sent to the app specified by Package Name. Developers can programmatically implement the intent according to the intended business logic for the custom app (such as trigger an emergency call). Please contact Support to request a developer guide for this feature.
• Long Press Duration (for long press) — Allows setting the minimum long press duration (allowed range is from 500 ms to 10,000 ms).
• Package Name — Lets you specify one or more apps the key remapping will apply to. You can use Add System application to add one app at a type, or Bulk Add apps using the linked template for Wear OS (addSystemAppTemplate_WearOS.xlsx). For either approach, you will need to specify the Package Name and Application Name.

Wear OS 3.5 and higher

Android 11 and higher

Allows the use of the power saving mode on the device.

Values

• Turn On
• Turn Off
• Force On
• Force Off

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Allows device users to change the sound settings on the device.

Values

• Allow
• Disallow

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Set the device's sound mode.

Values

• Sound
• Vibrate
• Mute

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Sets the device on vibrate mode when the Sound Mode is set as Sound.

Values

• N/A — Device users can change the setting.
• Force on — Device users cannot change the setting.
• Force off — Device users cannot change the setting.

Allows device users to set the volume level on the device.

Values

• User Choice — Allows users to set the volume level. If you define volume levels, device users can change them.
• Enforced — Limits volume adjustment to within the levels you define.

Select the adjustable volume level for ringtones:

• 1—15 for sound
• 0 for vibrate or mute

Select the adjustable volume level for media. You can set the volume level for all sound modes.

Select the adjustable volume level for notifications:

• 1—15 for sound
• 0 for vibrate or mute

Select the adjustable volume level for system:

• 1—15 for sound
• 0 for vibrate or mute

Allows the device user to adjust the microphone volume and mute it.

Values

• Allow
• Disallow

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specify a language for the devices.

Values

• Allow
• Disallow

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specify if users can set the brightness on the devices.

Values

• Allow
• Disallow

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Set the maximum allowed brightness on the devices.

Values

• Apply

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specify a value for the brightness level using the slider.

Wear OS 4.0 and higher

Allow automatic adjustment of screen brightness based on surrounding light conditions.

Device users can change this setting anytime.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Enables or restricts the Always On Display feature, which keeps the device screen active ("awake") at all times.

Values

• Turn On — Turns on Always On Display
• Turn Off — Turns off Always On Display

Wear OS 4.0 and higher

Android 14 and higher

Enterprise Wear OS Framework version 2.0 and higher

Controls date and time syncing on the smartwatch.

In the App Delegation Scope Management policy, if Delegation Scope is set to Managed configurations management, third-party apps are allowed to control the automatic date and time setting.

Values

• Turn on — The date and time are synced automatically, and the device user can change them.
• Turn off — The date and time can only be set manually by the device user.
• Force on — The date and time are synced automatically, and the device user can't change them.
• Force off — The date and time can't be changed.

Wear OS 4.0 and higher

Android 13 and higher

Enterprise Wear OS Framework version 1.0 and higher

Schedules the smartwatch for sleep mode at a specific time on one or more days of the week. Notifications and alerts are hidden in sleep mode.

Values

• Apply

Wear OS 4.0 and higher

Android 13 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the days of the week when sleep mode must be activated on a device.

Values

Select one or more days.

Specifies the time period for sleep mode.

Values

Enter the start and end times, in 24-hour format.

Toggles the visibility of the Emergency call button on the power off screen.

Values

• Allow
• Disallow

Wear OS 4.0 and higher

Android 13 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies whether to monitor and detect if the device user falls.

Values

• Allow
• Disallow

Wear OS 4.0 and higher

Android 13 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the parameters that define a fall. Only available when the Automatic Fall Detection policy is set to Allow.

Values

• Always
• During physical activity — The smartwatch begins monitoring for fall detection after 3 minutes of physical activity with a bipedal gait, such as walking or running.
• Only during workouts — The smartwatch begins monitoring for fall detection during non-bipedal activity, such as swimming or biking.

Controls the display of charging information on the smartwatch.

Values

• Turn on — Charging information is shown, and the device user can change this setting.
• Turn off — Charging information is hidden, and the device user can change this setting.
• Force on — Charging information is shown, and the device user can't change this setting.
• Force off — Charging information is hidden, and the device user can't change this setting.

Wear OS 4.0 and higher

Android 13 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies whether to use touch sensitivity on the device. Touch sensitivity allows end users to be able to interact with their devices while wearing gloves.

Values

• Turn on — Turns on touch sensitivity if it's been turned off; the device user can change this setting.
• Turn off — Turns off touch sensitivity if it's been turned on; the device user can change this setting.
• Force on — Enables touch sensitivity on the device; the device user can't change this setting.
• Force off — Disables touch sensitivity on the device; the device user can't change this setting.

Wear OS 5.0 and higher

Android 14 and higher

Enterprise Wear OS Framework version 2.0 and higher

Allows you to enforce or restrict the Raise Wrist To Wake feature, which lets the device user wake up the device by raising their wrist.

Values

• Force On — Raise Wrist To Wake is always enabled
• Force Off — Raise Wrist To Wake is always disabled

Wear OS 7 and higher: Always set to Force On if Always On Display is enabled

Lower than Wear OS 7: Can be set to Force On or Force Off regardless of Always On Display setting

Enterprise Wear OS Framework version 3.0 and higher

Allows you to enforce or restrict the Touch Screen To Wake feature, which lets the device user wake up the device by touching the screen.

Values

• Force On — Touch Screen To Wake is always enabled
• Force Off — Touch Screen To Wake is always disabled

Wear OS 7 and higher: Always set to Force On if Always On Display is enabled

Lower than Wear OS 7: Can be set to Force On or Force Off regardless of Always On Display setting

Enterprise Wear OS Framework version 3.0 and higher

Allows device users to set the mobile network on the device.

Values

• Allow
• Disallow

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies whether or not to use the mobile network on the devices.

Values

• Turn on
• Turn off

When set to On, you can also set mobile data usage.

Wear OS 3.5 and higher

Specify whether to allow device users to use mobile plans. This setting displays when Mobile Networks is set to On.

Values

• Turn on — Allow device users to use mobile plans. Users can change this setting anytime.
• Turn off — Restricts device users from using mobile plans. Users can change this setting anytime.
• Force on — Enable use of mobile plans on devices. Device users can't change this setting.
• Force off — Disable all mobile plans on devices. Device users can't change this setting.

When set to Turn on or Force on, you can also set mobile data usage.

Wear OS 3.5 and higher

Specifies whether or not to allow device users to use mobile data. This policy displays when Mobile Plans is set to Turn on or Force on.

Values

• Turn on: Allow device users to use mobile data. Users can change this setting anytime.
• Turn off: Restricts device users from using mobile data. Users can change this setting anytime.
• Force on: Enable mobile data on devices. Device users can't change this setting.
• Force off: Disable mobile data on devices. Device users can't change this setting.

Wear OS 3.5 and higher

Allows device users to modify the Wi-Fi settings.

Values

• Turn on
• Turn off
• Force on
• Force off

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Allows device users to use Near Field Communication (NFC) on the device.

Values

• Turn on
• Turn off
• Force on
• Force off

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Allows device users to use the Bluetooth feature on the device.

Values

• Turn on
• Turn off
• Force on
• Force off

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Enables the Kiosk mode on the device.

Values

• Apply

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specify the apps that are allowed to run on the kiosk.

Wear OS 3.5 and higher

Allows users to use the power button in the Kiosk mode.

Values

• Allow
• Disallow

Wear OS 4.0 and higher

Enables the Kiosk mode on the device.

Values

• Enable
• Mute

Wear OS 3.5 and higher

Allows displaying system information and notifications on the Kiosk device.

Values

• Allow — No restrictions on showing system information and notifications.
• Disallow — Prevents showing any system information or notifications.
• Quick Panel only — Only allows showing the Quick Panel.
• Notification only — Only allows showing notifications (supported for Wear OS 4.0 and higher).
• Indicator only — Only allows showing indicators, such as the Bluetooth connectivity icon. Function components on the watch face are hidden.

Wear OS 3.5 and higher

Allows users to control the widget tiles in the Kiosk mode.

Values

• Allow
• Disallow

Wear OS 4.0 and higher

Allow users to add or delete widget tiles on the kiosk.

Values

• Allow

Allows access to information about the recent apps used on the kiosk.

Values

• Enabled
• Disabled

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Allows or blocks access to the device's Settings app, when the device is being used as a kiosk.

Values

• Allow
• Block

Wear OS 3.5 and higher

Allows setting a screen lock.

Values

• Apply

Wear OS 4.0 and higher

Android 13 and higher

Lets you specify a minimum complexity level for the screen lock.

Values

• Medium — The device user can set an alphanumeric pattern or PIN consisting of at least four characters or digits. Repeating patterns (such as 4444) and ordered sequences (such as 1234, 4321, and 2468) are not allowed.
• High — The device user can set an alphanumeric pattern consisting of a minimum of six characters and digits, or an alphabetic pattern with a minimum of eight characters. Repeating patterns and ordered sequences are not allowed.

Wear OS 4.0 and higher

Android 13 and higher

Configure whether to restrict access to URLs. The restriction list is defined by the URLs policy. Only available if the Knox Browser App policy is set to Use.

Values

• Allowlist — Knox Browser uses an allowlist to restrict access to specified sites.
• Blocklist — Knox Browser uses a blocklist to restrict access to specified sites.

Unless this policy is set to Allowlist or Blocklist, URLs aren't restricted.

Enter the URLs to allow or block, as determined by the Add URLs to Allowlist or Blocklist policy. Only available if the Knox Browser App policy is set to Use, and Add URLs to Allowlist or Blocklist is set to Allowlist or Blocklist.

To add URLs, enter them one at a time using the and icons. Alternatively, use Bulk Add to add up to 100 URLs at a time by uploading a bulk template, or Delete All to delete all URLs in your current list.

Controls how apps can request permissions during runtime.

Values

• Grant
• Deny
• Prompt

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Lets you add policy exceptions for specific applications. Only supported for internal apps.

Wear OS 3.5 and higher

Allows or blocks specific apps from being installed. When this policy is applied, the apps installed under a previous policy are uninstalled.

Wear OS 3.5 and higher

Allows activation of pre-installed system apps that are excluded from the default apps. Apps included in the app installation blocklist are not activated.

Wear OS 3.5 and higher

Allows or blocks specific apps from running on the device.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Allows hiding of apps on the display screens of a device.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specify the apps to hide on the display screen of a device.

Wear OS 4.0 and higher

Blocks the deletion of specified apps from the device.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies additional delegation scopes for certain apps.

Values

• Package Name
• Delegation Scope

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the app to be used as the Watch Face.

When this policy is applied, you can specify the package name and allow or disallow watch face change.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Allows device users to change the Watch face.

Wear OS 3.5 and higher

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Values

• Allow
• disallow

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Values

• Turn On
• Turn Off

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Allows devices to automatically receive calls from specific phone numbers.

Values

• Apply

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specify the phone numbers from which to automatically received calls.

Specify a time delay of 0 to 20 seconds, after which to automatically receive the calls. For example, a value of 0 secs means to answer the call immediately.

Allows update of contacts on devices by uploading XSLX file.

For more information, see Add or delete contacts on Wear OS devices.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Assign a unique name for each Wi-Fi setting.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Enter a description for each Wi-Fi setting.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Enter an identifier of a wireless router to connect to.

You can also click Lookup to open the reference items list and select an item from it. The reference value is automatically entered.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Allows to hide the network from the list of available networks on the device. The SSID does not broadcast.

Values

• Allow
• Disallow

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Controls whether the device automatically connects to this network.

Values

• Use — Forces the device to set this network as default and connect to it when Wi-Fi is turned on.
• Do Not Use — This network configuration is pushed to the device, but the device user chooses which networks to connect to.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Controls whether to generate a random MAC address for the device when connecting to a Wi-Fi network.

Values

• Use
• Do Not Use

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the Wi-Fi security protocol and authentication scheme of the access point.

Values

• None
• WPA-PSK
• WPA-EAP

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Enter the password of the target Wi-Fi access point. You can enter up to 100 characters for the password.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the outer EAP authentication method. Only available if the Security Type configuration setting is set to WPA-EAP.

Values

• PEAP
• EAP-TTLS

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the inner, tunneled EAP authentication method. Only available if the Security Type configuration setting is set to WPA-EAP.

Values

• PAP
• MSCHAP
• MSCHAPv2

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Enter the user name to submit during authentication. Only available if the Security Type configuration setting is set to WPA-EAP and the User Information Input Method configuration setting is set to Manual Input.

Values

Enter a user name. Click Lookup to browse and select available lookup items to add to the name.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Enter an anonymous ID for the user. Only available if the Security Type configuration setting is set to WPA-EAP.

Values

Enter a name

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the confirmation method for the user certificate. Register an external certificate for each network configuration, and then verify each network configuration using that certificate. All users share this one certificate for each network configuration. Go to Advanced > Certificate > External Certificate to register network settings for each purpose. Only available if the Security Type configuration setting is set to WPA-EAP.

Values

• EMM Management Certificate (default)

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the certificate to apply for the user. The user certificate (P12 or PFX file) corresponding to the obtained user information is applied along with a profile to verify the user. Only available if the Security Type configuration setting is set to WPA-EAP.

Values

Select a certificate from the list.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Select a root certificate to apply. The available certificates are those registered in Advanced > Certificate > External Certificate with the Purpose set to Wi-Fi and the Type set to Root. Only available if the Security Type configuration setting is set to WPA-EAP.

This setting is required.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specify the domain addresses that can be accessed via Wi-Fi.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specify the alternate subject names.

Wear OS 4.0 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the name of the APN configuration. Each configuration name must be unique.

Values

Enter a name.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the description of the APN configuration.

Values

Enter a description.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the name of the APN, which is comprised of the network identifier and optional operator identifier.

Values

Enter a name.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies which connection services to allow for this APN.

Values

• Default — Allows all services. Also known as unspecified.
• MMS — Allows only the Multimedia Messaging Service (MMS).
• Supl — Allows only the Secure User Plane Location (SUPL) service, which is an IP-based protocol that uses GPS for device geolocation.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the MCC of the APN.

Values

Enter a 3-digit MCC.

Click Lookup to browse and select available lookup items to include in the MCC.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the carrier's MNC for the APN.

Values

Enter a 2- or 3-digit MNC.

Click Lookup to browse and select available lookup items to include in the MNC.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the address of the carrier's MMS server.

Values

Enter a URL.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the address of the carrier's MMS proxy server.

Values

Enter an IP or domain.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the port of the carrier's MMS proxy server.

Values

Enter a port.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the address of the carrier's WAN proxy server.

Values

Enter a URL.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the port of the carrier's WAN proxy server.

Values

Enter a port.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the account username to use when connecting to the APN.

Values

Enter a username. By default, the field contains the ${UserName} lookup item, which substitutes for the username associated with the device in KM.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the account password to use when connecting to the APN.

Values

Enter a password.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the protocol to use when authenticating with the APN.

Values

• None — Disables authentication.
• PAP — Uses the Password Authentication Protocol (PAP), which requires a username and password.
• CHAP — Uses the Challenge-Handshake Authentication Protocol (CHAP), which implements challenge messages to validate identities.
• PAP or CHAP — Uses either the PAP or CHAP method, depending on which is available.

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the communications protocol to use when connecting to the APN.

Values

• IPV4
• IPV6
• IPV4/IPV6
• PPP

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the communications protocol to use when connecting to the APN while the device is roaming.

Values

• IPV4
• IPV6
• IPV4/IPV6
• PPP

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies the type of identifier used by the APN's mobile virtual network operator (MVNO).

Values

• SPN
• IMSI
• GID
• ICCID

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher

Specifies which bearer types can be used when connecting with the APN. Only available if the Bearer policy is set to Apply.

Values

• LTE
• HSPAP
• HSPA
• HSUPA
• HSDPA
• UMTS
• EDGE
• GPRS
• eHRPD
• NR
• EVDO_B
• EVDO_A
• EVDO_0
• 1xRTT
• CDMA
• TD_SCDMA
• IDEN
• GSM
• IWLAN

Wear OS 3.5 and higher

Enterprise Wear OS Framework version 1.0 and higher