Configuring the MDM Security Profile

The MDM Security Profile configures policies related to the creation of device-level PINs (also called a passcode or access code). PINs are used by users to unlock their mobile devices.

Note: Android only supports the following settings: allow simple, force pin, minimum length, require alpha, max inactivity and max failed attempts.

• Allow Simple - If checked, permits users to use sequential or repeated characters in their PINs (passcodes). For example, this would allow the passcodes 3333 or DEFG.
• Force Password - For Android devices, if checked, a password is required. If not checked, either a PIN or a password is required. PINs support only digits. Passwords can be alphanumeric. For iOS devices, entering a password is always required.

  Note: BYOD Profiles may enforce an app-level PIN as well. The two PINs are independent of each other.

• Maximum Failed Attempts - Determines how many failed PIN attempts can be made before the device is wiped. The default behavior is device manufacturer dependent.
• Maximum Inactivity - The number of seconds to wait while a user does not use the device before locking the device.
• Maximum Pin Age (In Days) - The maximum number of days to use the same PIN.
• Minimum Complex Characters - The minimum number of complex characters required in a PIN.
• Minimum Length - The minimum length required for a PIN.
• Require Alphanumeric - If check, requires both alphabetic and numeric characters.
• Pin History - If checked, maintains a PIN history.
• Maximum Grace Period - Specifies how soon the device can be unlocked again after use, without prompting again for the PIN.