SOTI Clear Passcode

Created: Documentation

NOTE: Applies to Android devices only.

To support clearing passcodes in SOTI, before initiating a password reset, ensure the caller’s identity through the script add_allowed_apps.

It must be granted the access to the agent’s content provider. This is done by sending the add_allowed_apps script from the SOTI console.

Prerequisites
Step 1: Determine the Imprivata Locker App Signature

To determine the Imprivata Locker app signature:

  1. In the SOTI console, navigate to Device Details.
  2. From the Device Actions menu, select Send Script.
  3. In the Script Type, select Legacy.
  4. In the Script Editor pane, run the following command to get the signature of the Imprivata Locker app: 
    identify_package_certificate com.imprivata.locker


    The command returns the com.imprivata.locker app signature.

  5. Take note of the signature for use in a later step.
Signatures for com.imprivata.locker App
Step 2: Send the add_allowed_apps Script

To send the add_allowed_apps script to the MobiControl agent on the selected devices:

  1. In the Script Editor pane, type the following command and then click Send Script. 
    add_allowed_app com.imprivata.locker <signature> AllowedAll

    where
    <signature> is the signature of the com.imprivata.locker app you saved earlier.

Step 3: Enable Password Enforcement

MAM uses the enrollAndroidPIN AppConfig flag to enable password enforcement in SOTI.

NOTE: MAM does not use the Password Policy Type in the SOTI console to enable password enforcement.

To configure the enrollAndroidPIN AppConfig flag:

  1. In the SOTI console, click the gear icon for the Imprivata Locker app.
  2. In the Managed App Config section, add a new key for the AppConfig: 
    ConfigFlags       enrollAndroidPIN
  3. Click Save.