How to Configure Android Management Features Using Custom SDK Settings

Custom SDK Settings provides a way to enable functionality that Workspace ONE UEM does not natively support. If you want to use the new features, you can use the Custom SDK Settings and XML code to enable or disable certain settings manually.

Enable Custom SDK Settings

1. Navigate to Groups & Settings > All Settings > Apps > Settings & Policies > Settings > Custom Settings

2. Paste the following custom XML into the Custom Settings field replacing the values with the information outlined in the below sections.

3. Save the Custom XML.

You can use the Summary tab to verify the settings have been enabled correctly.

Enable SafetyNet Attestation Using Custom SDK Profile

SafetyNet Attestation is a Google API used to validate the integrity of the device ensuring the device is not compromised.

SafetyNet validates software and hardware information on the device and creates a profile of that device. This attestation helps determine if a particular device has been tampered or modified. When the Workspace ONE UEM console runs the SafetyNet Attestation API and reports the device has been compromised, the UEM console Device Details page reports the device as compromised. If SafetyNet Attestation detects the device as compromised, the only way to revert a device compromised state is to re-enroll the affected device.

It is important to note that SafetyNet Attestation does not re-evaluate compromised status after it is initially reported.

SafetyNet Attestation is only supported with Workspace ONE Intelligent Hub.

Enable the SafetyNet Attestation API in the UEM console to validate the integrity of a device and determine if a device has been compromised.

{ "SafetyNetEnabled":true }

Verify SafetyNet from the Summary tab in the Device Details page in the UEM console. If you do not see the status of the SafetyNet Attestation, you can send a remote command to restart the device.

Configure Certificate Delegation Using Custom SDK Profile

By default, certificates are managed through the Workspace ONE Intelligent Hub for Android. You can specify a package name through custom settings that allow you to manage your certificates on Android devices with an app of your choice.

Enable the certificate delegation SDK and replace the placeholder package name with the actual package name of the app (usually in format: com.company.appname).

{ "AuthorizedCertInstaller" : "packagename" }