Video Screencast Help

App Center--Rooted android devices checking criteria or exception rules

Created: 27 Feb 2014 • Updated: 27 Feb 2014 | 3 comments
cheng388's picture
1 Agree
0 Disagree
+1 1 Vote
Login to vote

For seucrity reason, most company will not allow rooted android device to enroll on App Center. That's absolutely right.  But sometime we need to do some exception for some special android devices. Those devices will be recoginzed as rooted devices by App Center and can't be enrolled to App Center. But actually the owners of those devices never do any rooting action.

How this will happen? Because the manufacturers of those special android devices will buit-in some root function into their products. "su" file can be found on those devices,but this "su" only can be utilized by the built-in app (some privilege control app), the third party app such as "Superuser" and "Rootexplorer" can't get root access via this "su". So those special manufacturer rooted android devices doesn't like that highrisk of those really rooted devices.

We want App Center can allow those specail rooted device can be enrolled.

There are two method:

1. Improve the rooted android devices checking criteria. I think the ACA should not only check if the "su" file exist on the device but try to get root access. If ACA only see "su" existing but can't really get root access, then it shouldn't simply mark the device as rooted.

2.Allow those sepcial rooted devices to be enrolled on App Center for exception.

Comments 3 CommentsJump to latest comment

Nirmal R's picture

Hi,

I would like to understand a bit more about your request. Are you expecting this as a default behavior?

If not, you can enroll a rooted Android device and even install apps. There is a checkbox on the Android Client page (Settings > Android Client > Usage Restirction), which when unchecked will allow AppCenter client to be installed on a rooted device.

Similarly, when defining app policy, there is a usage restirction policy, which when not checked will let you install apps with this policy.

You are right in that there is no furture granular control as you mentioned above. We will look into it and prioritize accordingly. Thanks for the suggestion.

Let us know if you have further questions.

Thanks!

+1
Login to vote
cheng388's picture

Hi Nirmal,

Thanks for your prompt reply.  Yes, I'm expecting it as a default behavior or let the App Center administrator to make exception for those special devcies.  Actually there are more and more such devices emerge on China market.

I know the setting and the app policy you mentioned. According to our company security policy, the really rooted devices are prohibited to be enrolled. And our company's mobile apps are also prohibited to run on the really rooted devices. So I can't simply to check out the setting you mentioned to allow all rooted devices to enroll.

 

0
Login to vote
cheng388's picture

Hi Nirmal,

Thanks for your prompt reply.  Yes, I'm expecting it as a default behavior or let the App Center administrator to make exception for those special devcies.  Actually there are more and more such devices emerge on China market.

I know the setting and the app policy you mentioned. According to our company security policy, the really rooted devices are prohibited to be enrolled. And our company's mobile apps are also prohibited to run on the really rooted devices. So I can't simply to check out the setting you mentioned to allow all rooted devices to enroll.

0
Login to vote