Prerequisites
Required permissions: Device Owner access with Trio Connect
Supported devices: Android 7.0+ with the Trio agent installed
Time estimate: 10-15 minutes
Hardware requirements: Android device
Before You Start
When to use the kiosk mode: Configure devices for single-purpose use in retail displays, information centers, point-of-sale systems, or shared workstations where you need to restrict user access to specific applications.
Security considerations: Kiosk mode transforms the entire device experience. Users cannot access device settings, install apps, or exit kiosk mode without administrative credentials.
Network requirements: Devices must maintain internet connectivity for policy application and remote management.
Step 1: Create New Kiosk Configuration
Navigate to Devices > Kiosk in the left sidebar
Click + Create
Expected result: Create KIOSK setting modal appears
If you see existing kiosk configurations: Your organization already has kiosk policies. You can create additional configurations or modify existing ones.
Step 2: Name Your Kiosk Policy
Enter descriptive name in KIOSK name field (e.g., "Retail Display Kiosk")
Add optional description explaining the kiosk purpose
Click Confirm
Expected result: Kiosk configuration interface opens with platform tabs
Naming best practices:
Include location or purpose: "Store Front Display" or "Reception Check-in"
Avoid generic names like "Kiosk 1" for easier management
Step 3: Select Platform and Kiosk Type
Verify Android tab is selected (active by default)
Choose your kiosk type from the left panel:
Single app: Lock device to one application
Multi app: Allow access to multiple pre-selected apps
Website Kiosk: Restrict to specific web browser experience
Expected result: Right panel shows kiosk type description and requirements
Choosing kiosk types:
Single app: Point-of-sale systems, digital signage, dedicated terminals
Multi app: Shared tablets with controlled app access
Website Kiosk: Web-based applications or information portals
Step 4: Configure Applications (Single App Mode)
Click + Add configuration in the right panel
Search applications: Use the search bar to find your target app
Select application: Click the app icon from the Android library
Expected result: The Selected app appears in the device preview mockup
If your app isn't listed:
Click + Add application to library
Upload your custom APK file
Wait for processing before selection
Application requirements:
App must be installed on target devices before kiosk activation
Ensure the app supports full-screen operation for the best kiosk experience
Step 5: Adjust Display Settings
Icon size: Select Small, Medium, or Large based on device screen size
Preview verification: Check device mockup shows desired appearance
Expected result: Icon sizing reflects your selection in the preview panel
Step 6: Configure Exit Controls (Critical Security Step)
Scroll to Exit setting section
Toggle "Allow manually exiting kiosk mode" based on your security needs
Set kiosk exit password: Enter secure administrative password
Configure tap count: Set number of taps to display exit prompt (default: 10)
Expected result: Exit controls configured according to your security requirements
Exit control best practices:
Secure environments: Disable manual exit, require administrative intervention
Semi-public spaces: Enable exit with complex password
Tap count: Higher numbers (15-20) prevent accidental exit attempts
Troubleshooting exit controls:
If the password field shows dots: This is normal security behavior
Remember exit credentials: Store securely for emergency device access
Step 7: Apply Peripheral Settings (Advanced Security)
Click Peripheral Settings in the left panel
Configure hardware restrictions:
Wi-Fi controls: Disable hotspot, network switching
Hardware buttons: Lock power, volume, home buttons as needed
Display options: Control system bars, notifications
Review each toggle: Ensure settings match your security requirements
Expected result: Comprehensive device lockdown according to your specifications
Common peripheral configurations:
High security: Disable all hardware buttons, Wi-Fi controls, and system access
Moderate security: Allow volume control, disable network changes
Basic lockdown: Restrict app switching while maintaining basic device functions
Step 8: Validate Configuration
Click Create in the top-right corner
Wait for validation: System checks configuration across all selected platforms
Review validation results:
Green checkmarks: Platform configuration valid
Red "Invalid input": Configuration errors require attention
Expected result: Either successful creation or specific error guidance
If validation fails:
Check app availability on target platform
Verify peripheral settings compatibility
Ensure all required fields completed
Common validation errors:
App not found: Selected app unavailable for target Android version
Conflicting settings: Peripheral restrictions incompatible with kiosk type
Missing configuration: Required settings not completed
Step 9: Assign to Devices
Creation success: Modal displays "Kiosk setting has been created!"
Choose assignment method:
Assign: Immediate device assignment
Done: Save for later assignment
If selecting Assign: Choose from assignment options:
Assign to autopilot: Bulk deployment to managed groups
Assign to device group: Target specific device collections
Assign to devices: Individual device selection
Assignment strategies:
Pilot deployment: Start with a small device group for testing
Staged rollout: Deploy to autopilot groups in phases
Emergency deployment: Individual device assignment for urgent needs
Step 10: Monitor Deployment Status
Navigate back: Return to the main Kiosk management page
Verify creation: New kiosk appears in policy list
Check assignment status: "Assigned to" column shows deployment progress
Expected result: Policy visible with current assignment status
Advanced Options
Multi-app kiosk configuration: Select multiple applications and configure app switching permissions
Platform-specific deployment: Create separate kiosk policies for iOS, Windows, or macOS devices
Automated assignment: Use device groups and autopilot for hands-off deployment
Troubleshooting
Kiosk not activating on device:
Verify the device has the Trio agent and Trio Connect installed and active
Check network connectivity for policy download
Confirm the device supports device owner mode
Apps not appearing in kiosk:
Ensure apps are installed before kiosk activation
Verify app compatibility with kiosk restrictions
Check app permissions allow full-screen operation
Exit password not working:
Verify correct password entry (case-sensitive)
Check if the peripheral settings disabled password input
Device conflicts during assignment:
Review conflict status in the assignment panel
Remove conflicting policies before assignment
Consider device group reorganization