Getting Started Guide

There are 3 main steps in getting started with CubiLock:

Manage your applications
Create your profile
Enrol your devices

Below is the quick walkthrough of these steps. If you would like to dig deeper, please check out the relevant section of our Help Center.

Step 1: Manage Your Applications

Once you’ve logged in to the console, one of the first steps is to define which applications you want to manage for your organization. In the App Management section you can manage all the applications authorized for installation on your Android Devices. You can manage three different types of applications:

Public Apps: Allows you to publish and manage apps available on the public Google Play Store
Private Apps: Allows you to publish and manage private apps for your enterprise
Web Apps: Allows you to publish and distribute website shortcuts as apps

1.1. Public Applications

From the App Management, go to the PlayStore Apps if you want to add a public application. Select the app you want to approve. For example Slack. Select and click on it to add in your Enterprise Apps.

From your CubiLock console:

Head over to PlayStore Apps page, under Application Management
Search for the Slack application and click on it to open its details
Click on Select to add in your Enterprise Apps
The Slack application now appears in the Enterprise Apps page

For more details on how to add/approve public applications head over to Public Apps section.

1.2. Private Applications

You can also add a private applications from EMM console. From the App Management, head over to PlayStore Apps page and choose Private Apps from the iframe. The Private apps page allows you to publish and manage private apps directly from your EMM console. Specify your app name in the Title field, and upload your APK file. To streamline private app publishing for you, the page:

Silently creates a Play Console account on behalf of the enterprise and grants admin access to IT admins.
Waives the $25 USD Play Console registration fee previously required to publish apps.
Requires only an app’s APK and title.
Publishes apps in as little as 10 minutes (compared to 2 hours in the Play Console).

Note: Apps published from the Private apps page can never be made public.

Upload Private Apps to Your Managed PlayStore:

From your CubiLock dashboard:

Go to the PlayStore Apps page, under Application Management
Select Private Apps from iframe
On the bottom right corner, click on the plus sign
Specify your app name in the Title field, and upload your APK file
Click on the button Create

The first time you publishes an app in the iframe, the iframe silently creates a Play Console account on behalf of the enterprise. If you want to make advanced edits, you're prompted to sign in with a Google Account—this can be any Google Account (e.g. Gmail, Cloud Identity). This Google Account is added as an admin of the enterprise's Play Console account. Afterwards, you can use your Google Account to sign into the Play Console directly, where you can:

Add and manage admin accounts.
Add advanced app details, including a descriptions, screenshots, and more.
Un-publish apps.

For more details on how to add/approve public applications head over to Private Apps section.

1.3. Web Applications

You can also add web applications from EMM console. From the App Management, head over to PlayStore Apps page and choose Private Apps from the iframe. The Web apps page lets you publish website shortcuts as private apps to managed Google Play. Web apps are identifiable by their package name (productId) and typically take 10 minutes to publish. After publishing, they’re automatically approved for your enterprise and can be distributed to users just like any other approved app. Web apps are compatible with other managed Play iframe features: they’re searchable in the Play Search page and can be added to collections.

The web app creation form requires a title, HTTPS or HTTP URL, and icon image (512 x 512 JPG or 32-bit PNG). Additionally, you can choose from the three display options:

Full screen: The app opens in full screen mode, hiding the device's status bar and navigation bar.
Standalone (default): The app shows the device's status bar and navigation bar.
Minimal UI: The app shows the device's status bar and navigation bar, the app's URL, and a refresh option. For HTTP URLs, this is the only available option.

Publish Web Apps From Google PlayStore:

From your CubiLock dashboard:

From the App Management, head over to PlayStore Apps page and choose Web Apps
On the bottom right corner, click on the plus button
Specify your web app Title, URL, Display and Icon
Click on the button Create
Your web app appears in the Enterprise Apps tab

You can see all your managed applications - public, private and web applications in the Enterprise Apps menu.

For more details on how to add/approve public applications head over to Web Apps section.

Step 2: Create a Profile

Policies (also called a policy) are the core resource of the Android Management API. You use them to create and save groups of device and app management settings for your customers to apply to devices. Usually companies create a specific profile per business use case.

A policy can be applied to one or more devices. However, a device can only have a single policy at any given time. Devices enroled without a policy are blocked from all functions until a policy is applied. If a policy isn't applied within five minutes, then enrolment will fail and the device will be factory reset.

2.1. Create a Profile

In order to create a new Profile, head over to Device Profiles page and click + New Profile button and specify a unique Profile Name, Pass Code and toggle on the Kiosk Mode switch. The Pass Code will be used to exit from KIOSK mode and the KIOSK Mode toggle specifies if we want to use our KIOSK app as a launcher. A new profile will be created an added into your list, which then you can configure and add apps into.

2.2. Configure Profile

In order to configure a profile, head over to the device profiles page. From the context menu choose Update Profile, you will be navigated to Edit Device Profile page.

Edit device profile section includes a list of 80+ policies you can configure on the devices. You can use CubiLock's default policies settings or apply restrictions according to your needs. Move the toggle to the right to enforce a policy.

2.3. Push and Configure Applications

The Applications section of your Profile offers a complete set of options to determine which applications are installed onto your devices, how they are installed, and with which configurations.

You can manage all the permissions of a single app from the Default Permission drop down or a specific permission by clicking on Permissions button against each app. You can also set app configurations by simply tapping on Configurations button available for the apps that offers managed configurations. This will open an iframe where you can set all the available configurations for any particular app.

2.3.1: Configure your managed configurations and permissions of your applications

Access the application managed configurations, as made available by the application vendor, by clicking on the Configuration button next to the application name. These app configurations apply to all devices of this profile. To see an example of a use case for these app configurations, see how to blacklist URLs in Chrome.
Access the applications permissions settings, as made available by the application vendor, by clicking on the Permissions button next to the application name. These permissions apply to all devices of this profile.

2.3.2: Set install type of your applications

There are 6 install types available for your applications:

Force installed: The app is automatically installed and can't be removed by the user.
Available: To list the app in the Managed Google Play accessible from the device. The user can install and uninstall the app anytime.
Preinstalled: The app is automatically installed and can be removed by the user.
Blocked: The app is blocked and can't be installed. If the app was installed under a previous policy, it will be uninstalled.
KIOSK: The app is automatically installed in kiosk mode: it's set as the preferred home intent and whitelisted for lock task mode. Device setup won't complete until the app is installed. After installation, users won't be able to remove the app. You can only set this installType for one app per policy. When this is present in the policy, status bar will be automatically disabled.
Required for setup: The app is automatically installed and can't be removed by the user and will prevent setup from completion until installation is complete.

Step 3: Enrol the Device

CubiLock offers 5 enrolment methods:

QR Code
NFC
EMM Token
Sign-in URL
DPC Identifier

For a quick enrolment method, head over to the Device Profiles page. Click on the Profile Name to open its details, use the QR Code provided on the bottom right of the Device Enrolment page of the profile.

To enrol a device in a fully-managed mode:

Factory reset your device
On the Android factory-reset home screen, tap 6 times anytime on the screen. If that does not work, set up your device as a new device, and when prompted to input your email address, input this code: afw#setup. This will launch the Android Enterprise setup.
Follow the instructions on screen and scan the QR code provided in the profile