DEC Secure App Device Admin Policy

This app uses the Device Administrator permission. DEC Secure is a VPN and security system, and the permission is required to enforce the security policy of the organization that issues the device and VPN access. This includes password policy (minimum length of password, complexity), remotely resetting the password, remotely locking and wiping and factory resetting the device. The permission may be activated when importing a configuration in the app UI.

A list of the security policies used follows, along with the reasons for using each policy. A technical description of the security policies is available at the Android Developers Guide.

Password Policy

The following Android Device Administrator security policies are used to enforce the password policy of the organization that issues the device or allows VPN access. For instance, the organization may require a certain policy be followed before access to sensitive information can be granted.

• Password enabled
• Minimum password length
• Alphanumeric password required
• Complex password required
• Minimum letters required in password
• Minimum lowercase letters required in password
• Minimum non-letter characters required in password
• Minimum numerical digits required in password
• Minimum symbols required in password
• Minimum uppercase letters required in password
• Password expiration timeout
• Password history restriction
• Maximum failed password attempts

Security Policy

The following Android Device Administrator security policies are used to enforce the security policy of the organization that issues the device or allows VPN access. For instance, the organization may require a certain policy be followed before access to sensitive information can be granted.

• Maximum inactivity time lock
• Require storage encryption
• Disable camera

Administrator Actions

• The following actions are used to support the security policy settings in the preceding sections.
• Reset password
• Lock the device immediately
• Wipe the device’s data, i.e., restore to factory settings.