
This document provides a step-by-step process for configuring a Linux Kiosk mode using Hexnode UEM, allowing you to lock a device into a single application. This setup ensures a secure environment where only the selected application is accessible.
Begin by signing into your Hexnode UEM console with your administrative credentials. Click on the "Policies" tab, then select "New Policy" to create a new policy.

Select the Linux platform and proceed to create a new kiosk policy.

Assign a name to the policy and, if desired, provide a description to help identify it later.

Navigate to "Kiosk Lockdown" on the left panel.

Select "Linux Kiosk Lockdown" and choose "Single App." Click "Configure" to open the setup options for Single App Kiosk mode. Under "Kiosk Account Name," specify the username for the account that will operate in Kiosk mode.

This account will automatically launch the selected application and maintain an active session with it.

Click the plus icon to add your desired application. From the list of available apps, select the one to which you wish to lock the device. You can now fine-tune your setup using advanced Kiosk settings.

Enable "Auto login" if you want the device to log in automatically to the Kiosk account without requesting credentials. If multiple desktop sessions exist for the user, the device will log in to the default session. Once your configuration is complete, click on "Policy Targets." Here, associate the policy with your target device or devices.

After association, the policy will automatically push to the devices.

The system will now operate in Kiosk mode, restricting access to only the selected application. All other applications and system features will be restricted, creating a secure and focused environment. You have successfully configured Linux Kiosk mode with a single app using Hexnode UEM.
