Create an Android Hardware Security Policy

The Android Hardware Security Policy prevents hardware and software from accessing data on managed Android devices. Enforcing this type of security can prevent data loss. This policy works for devices running Android 5.1 and later.

Prerequisites

• JumpCloud’s Android EMM is configured for your organization. See Set Up Android EMM.
• Your Android devices are enrolled in EMM. See Add and Manage Android Devices and Users: Enroll Your Personal Android Device.

To create an Android Hardware Security policy:

1. Log in to the JumpCloud Admin Portal: https://console.jumpcloud.com/login.
2. Go to DEVICE MANAGEMENT > Policy Management.
3. In the All tab, click (+).
4. On the New Policy panel, select the Android tab.
5. Select the Hardware Security policy from the list, then click configure.
6. On the New Policy panel, optionally enter a new name for the policy, or keep the default. Policy names must be unique.
7. For Policy Notes, enter details like when you created the policy, where you tested it, and where you deployed it.
8. Under Settings, select Disable External Media to block users from mounting any physical external media, such as a storage device.
9. Select Disable Data Sharing to prevent users from sharing data between Android devices with Near Field Communication (NFC) Beam.

10. Select Disable File Transfer to prevent users from transferring files over USB.
    
11. (Optional) Select the Device Groups tab. Select one or more device groups where you will apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.
12. (Optional) Select the Devices tab. Select one or more devices where you will apply this policy.

13. Click save.