# Getting Started Guide

There are 3 main steps in getting started with CubiLock: 

1. Manage your applications
2. Create your profile
3. Enrol your devices

Below is the quick walkthrough of these steps. If you would like to dig deeper, please check out the relevant section of our Help Center.

## Step 1: Manage Your Applications

Once you’ve logged in to the console, one of the first steps is to define which applications you want to manage for your organization. In the **App Management** section you can manage all the applications authorized for installation on your Android Devices. You can manage three different types of applications:

* **Public Apps:** Allows you to publish and manage apps available on the public Google Play Store
* **Private Apps:** Allows you to publish and manage private apps for your enterprise
* **Web Apps:** Allows you to publish and distribute website shortcuts as apps

### 1.1. Public Applications

From the **App Management**, go to the **PlayStore Apps** if you want to add a public application. Select the app you want to approve. For example Slack. Select and click on it to add in your **Enterprise Apps**.

From your CubiLock console:

1. Head over to **PlayStore Apps** page, under **Application Management**
2. Search for the **Slack** application and click on it to open its details
3. Click on **Select** to add in your **Enterprise Apps**
4. The Slack application now appears in the **Enterprise Apps** page

![Search for the Slack application and click on it to open its details](https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MAzePNJAKsgL6R-VtV2%2F-MF015EXATumH07sFK0g%2F-MAzxnAjuioPxQxyMUsl%2FScreenshot%202020-08-18%20at%202.55.42%20PM%20copy.png?alt=media\&token=4695beed-9631-4b9e-bcbc-6bb1cd9373d1)

![](https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MAzePNJAKsgL6R-VtV2%2F-MF022b7dOTg9SxYft2O%2F-MB2MTTW79GXhD6lspbX%2FScreenshot%202020-08-18%20at%203.11.11%20PM.png?alt=media\&token=a037a9e0-59f3-4a55-b915-60d7b2fd4fdc)

{% hint style="info" %}
For more details on how to add/approve public applications head over to [**Public Apps**](https://docs.cubilock.com/application-management/public-apps) section. 
{% endhint %}

### 1.2. Private Applications

You can also add a private applications from EMM console. From the **App Management**, head over to **PlayStore Apps** page and choose **Private Apps** from the iframe. The Private apps page allows you to publish and manage private apps directly from your EMM console. Specify your app name in the **Title** field, and upload your APK file. To streamline private app publishing for you, the page:

* Silently creates a Play Console account on behalf of the enterprise and grants admin access to IT admins.
* Waives the $25 USD Play Console registration fee previously required to publish apps.
* Requires only an app’s APK and title.
* Publishes apps in as little as 10 minutes (compared to 2 hours in the Play Console).

{% hint style="info" %}
**Note:** Apps published from the Private apps page can never be made public.
{% endhint %}

### Upload Private Apps to Your Managed PlayStore:

From your CubiLock dashboard:

1. Go to the **PlayStore Apps** page, under **Application Management**
2. Select **Private Apps** from iframe
3. On the bottom right corner, click on the plus sign
4. Specify your app name in the **Title** field, and upload your **APK** file
5. Click on the button **Create**

![](https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MAzePNJAKsgL6R-VtV2%2F-MF03-P9wLuBRQQ7C9KF%2F-MAzy8Oc9IwEE2H6e7MX%2FScreenshot%202020-08-18%20at%203.31.15%20PM.png?alt=media\&token=1d5d0aaa-dc97-4ff6-8a37-1d7ca447f10c)

The first time you publishes an app in the iframe, the iframe silently creates a Play Console account on behalf of the enterprise. If you want to make advanced edits, you're prompted to sign in with a Google Account—this can be any Google Account (e.g. Gmail, Cloud Identity). This Google Account is added as an admin of the enterprise's Play Console account. Afterwards, you can use your Google Account to sign into the Play Console directly, where you can:

* Add and manage admin accounts.
* Add advanced app details, including a descriptions, screenshots, and more.
* Un-publish apps.

{% hint style="info" %}
For more details on how to add/approve public applications head over to [**Private Apps**](https://docs.cubilock.com/application-management/private-apps) section. 
{% endhint %}

### 1.3. Web Applications

You can also add web applications from EMM console. From the **App Management**, head over to **PlayStore Apps** page and choose **Private Apps** from the iframe. The Web apps page lets you publish website shortcuts as private apps to managed Google Play. Web apps are identifiable by their package name (productId) and typically take 10 minutes to publish. After publishing, they’re automatically approved for your enterprise and can be distributed to users just like any other approved app. Web apps are compatible with other managed Play iframe features: they’re searchable in the Play Search page and can be added to collections.

The web app creation form requires a **title**, HTTPS or HTTP **URL**, and **icon** image (512 x 512 JPG or 32-bit PNG). Additionally, you can choose from the three display options:

* **Full screen:** The app opens in full screen mode, hiding the device's status bar and navigation bar.
* **Standalone (default):** The app shows the device's status bar and navigation bar.
* **Minimal UI:** The app shows the device's status bar and navigation bar, the app's URL, and a refresh option. For HTTP URLs, this is the only available option.

### Publish Web Apps From Google PlayStore:

From your CubiLock dashboard:

1. From the **App Management**, head over to **PlayStore Apps** page and choose **Web Apps**
2. On the bottom right corner, click on the plus button
3. Specify your web app **Title**, **URL**, Display and **Icon**
4. Click on the button **Create**
5. Your web app appears in the **Enterprise Apps** tab

![](https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MAzePNJAKsgL6R-VtV2%2F-MF07GQ5EpEYOBWwQuFD%2F-MAzyPyBV8RLGg13QqEj%2FScreenshot%202020-08-18%20at%203.33.31%20PM.png?alt=media\&token=6f41a15c-e5e6-4080-91a2-ba2feef3b89a)

You can see all your managed applications - public, private and web applications in the **Enterprise Apps** menu.

{% hint style="info" %}
For more details on how to add/approve public applications head over to [**Web Apps**](https://docs.cubilock.com/application-management/web-apps) section. 
{% endhint %}

## Step 2: Create a Profile

Policies (also called a policy) are the core resource of the Android Management API. You use them to create and save groups of device and app management settings for your customers to apply to devices. Usually companies create a specific profile per business use case. 

A policy can be applied to one or more devices. However, a device can only have a single policy at any given time. Devices enroled without a policy are blocked from all functions until a policy is applied. If a policy isn't applied within five minutes, then enrolment will fail and the device will be factory reset.

### 2.1. Create a Profile

In order to create a new Profile, head over to **Device Profiles** page and click **+ New Profile** button and specify a unique **Profile Name**, **Pass Code** and toggle on the **Kiosk Mode** switch. The **Pass Code** will be used to exit from KIOSK mode and the **KIOSK Mode** toggle specifies if we want to use our KIOSK app as a launcher. A new profile will be created an added into your  list, which then you can configure and add apps into.

![](https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MAzePNJAKsgL6R-VtV2%2F-MF07Zrq4bLkzEGUf4Nl%2F-MB-1QB6tVN1WXMZaTw2%2FScreenshot%202020-08-18%20at%203.42.20%20PM.png?alt=media\&token=da18e68c-c748-40d8-a572-acf18a72c1c1)

### 2.2. Configure Profile

In order to configure a profile, head over to the device profiles page. From the context menu choose **Update Profile**, you will be navigated to **Edit Device Profile** page.

![](https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MAzePNJAKsgL6R-VtV2%2F-MF09bjuVDCP67d4eQ5Z%2F-MB-2-JLIJ8kBzgZ2-3d%2FScreenshot%202020-08-18%20at%203.43.57%20PM.png?alt=media\&token=ff9fe323-cc14-4c75-8b09-1440a286e3a2)

Edit device profile section includes a list of **80+ policies** you can configure on the devices. You can use CubiLock's default policies settings or apply restrictions according to your needs. Move the toggle to the right to enforce a policy.

![](https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MAzePNJAKsgL6R-VtV2%2F-MF0Azi7RB6m_8KkODiJ%2F-MB-286u4AF4g0ODr4wC%2FScreenshot%202020-08-18%20at%203.50.03%20PM.png?alt=media\&token=5ca4a325-d434-4b26-90d9-742bfea54330)

### 2.3. Push and Configure Applications

The **Applications** section of your **Profile** offers a complete set of options to determine which applications are installed onto your devices, how they are installed, and with which configurations. 

You can manage all the permissions of a single app from the **Default Permission** drop down or a specific permission by clicking on **Permissions** button against each app. You can also set app configurations by simply tapping on **Configurations** button available for the apps that offers managed configurations. This will open an iframe where you can set all the available configurations for any particular app.

![](https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MAzePNJAKsgL6R-VtV2%2F-MF0BNSxeGRg_c3zq8rz%2F-MB-MMPiWwXOIBgNA_F0%2FScreenshot%202020-08-18%20at%203.51.38%20PM.png?alt=media\&token=4e26c9a9-7ec1-4d62-ab11-268465434d6e)

**2.3.1: Configure your managed configurations and permissions of your applications**

1. Access the application **managed configurations**, as made available by the application vendor, by clicking on the **Configuration** button next to the application name. These app configurations apply to all devices of this profile. To see an example of a use case for these app configurations, see [how to blacklist URLs in Chrome](https://docs.cubilock.com/application-management/public-apps/support-managed-configurations).
2. Access the applications **permissions** **settings**, as made available by the application vendor, by clicking on the **Permissions** button next to the application name. These permissions apply to all devices of this profile.

![](https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MAzePNJAKsgL6R-VtV2%2F-MB-MIENLsAozo44l0Zj%2F-MB-NrPm1lXV4AE6AVk-%2Fpermission-configuration.png?alt=media\&token=efb9fa39-779e-4b9f-b635-2da0bdd869cf)

**2.3.2: Set install type of your applications**

There are 6 install types available for your applications:

![](https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MAzePNJAKsgL6R-VtV2%2F-MGMl1z69XbUeqbzGzbn%2F-MGMsAepIqTv18IJxu0b%2FScreenshot%202020-09-04%20at%2011.49.18%20AM.png?alt=media\&token=a6e8980d-99ee-416d-a367-552125fb20ac)

1. **Force installed**: The app is automatically installed and can't be removed by the user.
2. **Available**: To list the app in the Managed Google Play accessible from the device. The user can install and uninstall the app anytime.
3. **Preinstalled:** The app is automatically installed and can be removed by the user.
4. **Blocked:** The app is blocked and can't be installed. If the app was installed under a previous policy, it will be uninstalled.
5. **KIOSK:** The app is automatically installed in kiosk mode: it's set as the preferred home intent and whitelisted for lock task mode. Device setup won't complete until the app is installed. After installation, users won't be able to remove the app. You can only set this `installType` for one app per policy. When this is present in the policy, status bar will be automatically disabled.
6. **Required for setup**: The app is automatically installed and can't be removed by the user and will prevent setup from completion until installation is complete.

## Step 3: Enrol the Device

CubiLock offers 5 enrolment methods: 

1. QR Code
2. NFC
3. EMM Token
4. Sign-in URL
5. DPC Identifier 

For a quick enrolment method, head over to the **Device Profiles** page. Click on the **Profile Name** to open its details, use the **QR Code** provided on the bottom right of the **Device Enrolment** page of the profile. 

![](https://1920795617-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-MAzePNJAKsgL6R-VtV2%2F-MF0BjZ--gNYGJu6JLHP%2F-MB-PRVLfWSgH2JU9H_C%2FScreenshot%202020-08-18%20at%203.53.14%20PM.png?alt=media\&token=3dd1d801-0137-4a15-a662-be7913206005)

To enrol a device in a fully-managed mode:

* Factory reset your device
* On the Android factory-reset home screen, tap 6 times anytime on the screen. If that does not work, set up your device as a new device, and when prompted to input your email address, input this code: **afw#setup**. This will launch the Android Enterprise setup.
* Follow the instructions on screen and scan the QR code provided in the profile

Have a look at our Help Center article on [Enrolling a Device with QR Code](https://docs.cubilock.com/device-management/device-enrolment/device-enrolment-qr-code) for more information.

Check out our video of a Device Owner enrolment below:

{% embed url="<https://www.youtube.com/watch?v=I4D2r2ro89Q>" %}
Fully Managed Device Enrolment Using QR Code
{% endembed %}