Prerequisite
Description
- Users select the default Secure Start-up Yes when creating a PIN.
- The device will not boot the OS until after the PIN is entered.
How To Disable the Secure Boot option from the User Interface
- Using StageNow create a profile with a DevAdmin setting.
- From the DevAdmin setting select Secure Start-up Dialog.
- Disable the Yes button.
- Leave Screen Lock Type: Do not change.
On the Device
- When the setting is enabled on the device the Secure Start-up screen Yes button will be disabled.
- Only No can be selected.
Will Secure Boot be disabled?
- Secure Boot is not disabled if it is already enabled.
- Only the User Interface option to select Yes is disabled.
- If the setting is enabled on the device when Secure Boot is already enabled the Yes option will be disabled when the user changes the PIN.
Forcing a PIN change
- When the DevAdmin setting Screen Lock Type is set to PIN the user will be prompted for the PIN or to create a new PIN immediately after StageNow processes the setting.
Android 13
There is no method to disable the Secure Start-up.
Google deprecated the ability to disable Secure Start when File Based Encryption was made mandatory.
An MDM application would have to be written to support direct boot mode.
For more information refer to Zebra Developers: Android™ 13 Security Overview: Direct Boot, FBE, and more.
Helpful Information:
