[Q] No swipe to unlock after adding CA certificate - Asus Eee Pad Transformer Prime

As the title says.
Upon adding CA certificate im asked to choose PIN for credential storage, which is ok, same thing as on my DHD.
But after that, im unable to use swipe for unlocking. I really really dont want to enter PIN, password or gesture every time im unlocking TFP, its so anoying.
If i clear credentials, swipe is again able to choose. But i really need that CA certificate to connect to wifi when im at work

Yep, functioning as designed.
Sent from my Transformer Prime TF201 using Tapatalk

Yeah, that is how everything is supposed to work. I get the same thing when I install my company's security certificate when I set up my work email on my Prime. I think the company can control it (ie: require a password or not) but from their point of view company security trumps your convenience

Generally, by installing the security cert, you are agree to give access to remote wipe and enhanced security. That's how it is for my Outlook exchange. If I go to the web mail for outlook, I can wipe my device remotely.

Any way to bypass it? Or i ll have to just wait for custom roms..

Rebkos said:
Any way to bypass it? Or i ll have to just wait for custom roms..
Click to expand...
Click to collapse
Bypassing it (with or without a rom) may leave you in an awkward position employment wise - depending on your employer.

Rebkos said:
Any way to bypass it? Or i ll have to just wait for custom roms..
Click to expand...
Click to collapse
Apparently you don't work in the IT Security department at your company.

Well, on my DHD i have the same certificate installed and im still using swipe to unlock
I dont know if my employer do or do not find this disturbing. I just know, that a guy from IT dept has DHD as well and he is doing it same way
Im just to lazy to use anything else to unlock my TFP than swipe and also my gf sometimes uses it at home and i dont want here to know my "secret" password, pin or gesture so what im doing now, is adding certificate everytime i arrive to work, and deleting it when im leaving, and well, thats stupid also, but what else i can do

try then app No Lock.

Thanks man. I would still prefer to have to swipe to unlock device. But no locksreen is still 100x better than entering pin, password or gesture.

Related

[REQ] for developers - Finger Print lock Apps

Occasionally I leave my phone laying around or let other people play with it, but it's getting very tedious having to lock it all the time. Anyone up for creating a app that will let me lock certain portions/apps on the phone (ie. SMS, gallery, etc.) using the built in finger print scanner?
I will second this. I recall reading that Moto was going to release the APIs for the print scanner. That should make it considerably easier.
just a bump, I know all you great minds out there are capable of this and want this too =)
+1
+1 yes, yes, yes a needed app
Yes, yes, YES! I've been thinking about requesting something like this for a while now!
I emailed the developer of Widget Locker since he seems to be fiddling with the Finger Print Scanner on the Atrix to see if he's interested in making a separate app for this. I wouldn't mind paying something like $1 for it.
How can we get this thread more attention from developers on XDA?
Keep the thread bumped, add some other keywords such a biometric scanner, fingerprints, fingerprint scanner, etc. (I myself didn't find this when searching), post the same on other forums, that's all you can do really!
PiTT said:
I emailed the developer of Widget Locker since he seems to be fiddling with the Finger Print Scanner on the Atrix to see if he's interested in making a separate app for this.
Click to expand...
Click to collapse
And here I am! (Sorry for taking some time to get back to this)
What I'm doing from WidgetLocker is piggy backing on the system security, so I don't interface with the fingerprint scanner directly. However I have looked into this as it could be interesting for WidgetLocker to be able to use in more ways, and potentially another separate app like discussed here.
I've seen the other thread about the password keeper and this one about an app-lock type thing. The issue with a password keeper is that the passwords should be stored encrypted, otherwise if someone stole your phone they'd just need to root if (if it's not already) and they'd be able to get all your password. But encrypting the passwords with a key that's stored somewhere is really just adding a few extra steps, they're not truly protected. Normally they'd be encrypted with your password, and only decryptable with you typing the password again. But I don't think this could be done for the fingerprint scanner due to what information is available (And how the fingerprint information is stored on disk). I could be wrong however.
As for the app-locker thing, there are also security issues here, but I think app-lockers are more used as a deterrent than as real security. To lock out your friend rather than a thief. But there's a fair amount of non-fingerprint related work to be done for this kind of app as well.
If I do end up doing anything with it I'll post back.
I said this in the development section when it was released lol. So....+1 and good idea!
Atrix4G Rooted!
[email protected] said:
And here I am! (Sorry for taking some time to get back to this)
What I'm doing from WidgetLocker is piggy backing on the system security, so I don't interface with the fingerprint scanner directly. However I have looked into this as it could be interesting for WidgetLocker to be able to use in more ways, and potentially another separate app like discussed here.
I've seen the other thread about the password keeper and this one about an app-lock type thing. The issue with a password keeper is that the passwords should be stored encrypted, otherwise if someone stole your phone they'd just need to root if (if it's not already) and they'd be able to get all your password. But encrypting the passwords with a key that's stored somewhere is really just adding a few extra steps, they're not truly protected. Normally they'd be encrypted with your password, and only decryptable with you typing the password again. But I don't think this could be done for the fingerprint scanner due to what information is available (And how the fingerprint information is stored on disk). I could be wrong however.
As for the app-locker thing, there are also security issues here, but I think app-lockers are more used as a deterrent than as real security. To lock out your friend rather than a thief. But there's a fair amount of non-fingerprint related work to be done for this kind of app as well.
If I do end up doing anything with it I'll post back.
Click to expand...
Click to collapse
my reasoning behind this type of app as you said isn't for REAL security from a thief, more of a deterrent from people around me....such as a nosy friend or girlfriend =)
"such as a nosy"
Well, of course cell phones have had a way to prevent that for what, 20+ years now? You leave it locked, except for "emergency and speed dial" or other restricted calling. No reason that someone has to borrow my cell phone (and deprive me of my phone!) while they're doing whatever with it.
I don't have any guilt about saying "Sure, you can make a call. But I need my phone with me."
PiTT said:
my reasoning behind this type of app as you said isn't for REAL security from a thief, more of a deterrent from people around me....such as a nosy friend or girlfriend =)
Click to expand...
Click to collapse
Well, if you have a friend that would invade your privacy then they are not your friend. And if you have a girlfriend that doesn't trust you enough to respect your privacy then dump her. You can't have a relationship without trust.
There are already apps that let you lock particular applications. I hand my phone over to my 4-year-old all the time so she can play Fruit Ninja, so I keep my work email locked down. I guess it would be kind of cool if the app locking software took advantage of the Atrix's fingerprint scanner.
live4nyy said:
Well, if you have a friend that would invade your privacy then they are not your friend. And if you have a girlfriend that doesn't trust you enough to respect your privacy then dump her. You can't have a relationship without trust.
Click to expand...
Click to collapse
lol, I second this... She's obviously insecure.
And why are we assuming that it's the girlfriend that's untrustworthy? PiTT (no offense, all due respect) is the one with dirty little secrets on his phone.
aquariumdrinker said:
And why are we assuming that it's the girlfriend that's untrustworthy? PiTT (no offense, all due respect) is the one with dirty little secrets on his phone.
Click to expand...
Click to collapse
Thanks =)
you guys are missing the point, it was just an example. Now back to the topic at hand.
I would love to be able to lock my phone using the finger print swype. This can't be to hard, could it?
jange said:
I would love to be able to lock my phone using the finger print swype. This can't be to hard, could it?
Click to expand...
Click to collapse
I don't understand what you are asking here. If you're going to be swiping your finger over the sensor to lock it, wouldn't it be just as simple to just press the button? If you have the sensor lock enabled, it will be locked with access only being granted to your finger swipe.
GEESH!
Clearly some people on this thread don't understand what's going on here. So let me break it down....
It's not about "it's not a real friend if they invade your privacy".
It's not about "why not just lock the phone itself".
Maybe you have a family member, girlfriend, wife, or CHILD you want to be allowed to use your phone. This requires unlocking the phone itself.
Buuuut, you don't want them snooping in your email or for the dense folks who don't get it, you don't want a CHILD deleting your messages accidentally, replying inadvertently to a co-worker via email etc.
Or let's be real, you don't want your GF or wife to see the chic you've been bangin's nude photo in your phone.
So you want to FINGERPRINT LOCK specific apps, like TEXT, EMAIL, SKYPE, TANGO, FRING, ETC! That way your "guest" can use your phone, but can't use any other apps without your finger!
GEESH!
I'd really like to see phones with Windows-like login profiles. So I can have my profile, ADMIN, and my wife can have hers GUEST.
Anyway...I second/triple/quadruple the idea of a fingerprint reader app lock. Right now I use AppProtector, and I'm looking into a new app called simply LOCK or (App) Lock.
"Clearly some people on this thread don't understand what's going on here. So let me break it down....
........you don't want your GF or wife to see the chic you've been bangin's nude photo in your phone."
*grin* The premise of your post made me laugh hard.
On a real note, I think this kind of application would be awesome. I too use appprotector, and I used to use the fingerprint scanner, but it just became bothersome to use everytime I locked my phone and had to unlock it. I don't have anything to hide on my phone, but I do lock my "SU" folder that contains all of my root tools. I have a 12 yo at home, and she could very easily mess something up without knowing it. I think the idea of locking certains apps with the fingerprint scanner is a fantastic idea, and I'd be willing to pay a few bucks for it for sure.
Actually, a whole utility for the fingerprint scanner on the Atrix that allowed you to do multiple things with it would be great.
Like was posted previously, it would be nice to have guest accounts (for wife and child etc), and with a fingerprint swipe, they wouldn't even have to login..swipe and go.

Security password or no?

A lot of people always question why I don't have any security measures in place after swiping my screen. I personally just don't see the benefit of typing in a password every single time I unlock, versus the risk of actually losing my phone.
I also feel that if the worst did happen, I could change my Gmail and Facebook passwords and that would basically cover all bases. In fact, all I'd have to do is revoke two-step authorization for Gmail and that would basically do it too. I don't have any financial information stored to the phone if I think about it (with exception of maybe Fandango).
One time, I found an non-password protected iPhone in a cab. There was no password lock on the phone, and we were able to return the phone to the owner by finding the last person he called. He happened to be with the person who picked up.
How do most people here feel about it?
It's really up to you. If you're comfortable with no password, just have a plan in case you lose it. Which, it sounds like you do. Also think about backing up things like pictures from time to time.
I use the face recognition feature. Works pretty well once you train it. And I have my name on the swipe screen before that, so maybe I'll get it back if someone I know finds it.
And, while I haven't tried it on this phone yet, Seekdroid is another option. Lets you remotely lock and wipe the phone from any web browser.
Sent from my SCH-I535 using Tapatalk
dunderball said:
A lot of people always question why I don't have any security measures in place after swiping my screen. I personally just don't see the benefit of typing in a password every single time I unlock, versus the risk of actually losing my phone.
I also feel that if the worst did happen, I could change my Gmail and Facebook passwords and that would basically cover all bases. In fact, all I'd have to do is revoke two-step authorization for Gmail and that would basically do it too. I don't have any financial information stored to the phone if I think about it (with exception of maybe Fandango).
One time, I found an non-password protected iPhone in a cab. There was no password lock on the phone, and we were able to return the phone to the owner by finding the last person he called. He happened to be with the person who picked up.
How do most people here feel about it?
Click to expand...
Click to collapse
I prefer at-least a simple password. Also, under Security -> Owner information - I have a message for any potential finders of my phone: "If this phone is lost please email ma at [email protected]". That message scrolls across the screen even when locked.

Exchange Email Security Policy - (No Pin)

I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
I'm trying to figure out the same thing.
I couldnt find anything in the play store that would do it.
Sent from my SCH-I605 using Tapatalk 2
Enhanced email has the option
sent from my "Oh my God its huge" galaxy note 2
smalltownbird said:
Enhanced email has the option
sent from my "Oh my God its huge" galaxy note 2
Click to expand...
Click to collapse
I see it for $9.99 on the GooglePlay Store ... a little steep for a single option / enhancement.
Durzo.Blint said:
I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
Click to expand...
Click to collapse
As the office IT guy. We make you set that stuff for a reason! Be careful as this could be a violation of your corporate use policy.
Make sure and ask your IT department before circumventing this policy.
However I belive touchdown leta you leave this password on just the exchange data on your phone.
omnifox said:
As the office IT guy. We make you set that stuff for a reason! Be careful as this could be a violation of your corporate use policy.
Make sure and ask your IT department before circumventing this policy.
However I belive touchdown leta you leave this password on just the exchange data on your phone.
Click to expand...
Click to collapse
thanks for the help, but not only is Touchdown $19.99, according to their website the software will not bypass pin/password security.
Touchdown doesn't circumvent the policy but you only need to enter the pin when accessing anything synced to your device via the exchange service. Everything else is wide open. Personally, I prefer to have all my information locked down via a pin. Too much information accessible on these devices anymore and the minor inconvenience of entering a pin is a small price to pay IMHO
Durzo.Blint said:
I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
Click to expand...
Click to collapse
my corporate exchange admin said that i simply needed to use the pattern unlock screen function and that would be sufficient. i'm sure its a configuration option he did on the exchange server.
Durzo.Blint said:
I've searched the board here and found a few threads about bypassing the security policy when corporate email requires a pin/password code unlock on your phone preventing you from customizing your lock screen. All of the threads I saw where made under forums for other devices and I'm curious if anyone may know if they will work for the Verizon Note II?
I have a corp email account I sync on my phone and it forces me to use a pin lock or password phrase for security. I would like to try and get around this limitation, does anyone have any suggestions?
Click to expand...
Click to collapse
I rooted my Note 2 with "imnuts" deodexed version of the root method located here,
http://forum.xda-developers.com/showthread.php?t=2035404
Then I was able to follow these directions located here,
http://forum.xda-developers.com/showthread.php?t=1117452
This worked for what you are trying to do. Follow the directions and be sure and download the Java files that are pointed out and it will work just fine. It's real easy to do but make sure you FOLLOW the directions. I have used this method on my GS3 and it worked for it also.
Jetdr said:
I rooted my Note 2 with "imnuts" deodexed version of the root method located here,
http://forum.xda-developers.com/showthread.php?t=2035404
Then I was able to follow these directions located here,
http://forum.xda-developers.com/showthread.php?t=1117452
This worked for what you are trying to do. Follow the directions and be sure and download the Java files that are pointed out and it will work just fine. It's real easy to do but make sure you FOLLOW the directions. I have used this method on my GS3 and it worked for it also.
Click to expand...
Click to collapse
Thanks a million for this!! I will try this and report back my results. :good:
Or just use maildroid. Its free in the play store
Sent from my SCH-I605 using xda premium
As much as I would like to, I KNOW that my IT department would kick my @$$ if I did this. If your phone was lost/stolen, your exposing yourself to some serious issues if there is any sensitive info on your phone.
I just wish they would allow the pattern lock and not force the PIN method at my company.
I'm trying to setup a home VPN and I'm having the same issue. It's requiring I setup a security lock for my phone just to enter any VPN information.
Kind of frustrating because it's not a corporate network I'm connecting to, just my own personal home network. And there's no way for me to do it without some type of security lock. Very lame sauce.
DaRkL3AD3R said:
I'm trying to setup a home VPN and I'm having the same issue. It's requiring I setup a security lock for my phone just to enter any VPN information.
Kind of frustrating because it's not a corporate network I'm connecting to, just my own personal home network. And there's no way for me to do it without some type of security lock. Very lame sauce.
Click to expand...
Click to collapse
Yeah I agree here, really wish there was a way to disable that feature. I understand that they want to make the device secure when using passwords, but it should be our choice when using that security. The VPN security is annoying as hell for me. I end up removing the vpn when I'm done.
Being the "IT Guy" at my job, once corporate data touches a person's phone it becomes a liability. No matter how you look at it. YES the phone belongs to you but the Email belongs to the company.
We enforce the Pin on our Exchange Servers here and require any employee to sign a contract pretty much stating that they're going to comply with the rules and regulations.
Is it inconvenient for the user, "He'll yeah it is", you know how often I get cussed out? But the fact of the matter is that the company has to protect itself.
Before we put this policy in place, we had an employee that had an iPad he had email and other proprietary materials on it. No Pin and it was a 3G model. He reported the iPad missing 5 days later only because he was wondering why his emails in outlook would go from unread to read with out him doing anything. After investigating it came out about the iPad and we had to remotely wiped it.
Long story short a company can't take chances with its information so if it means inconveniencing it's employees a little to give them the convenience (oxymoron) of using a mobile device for accessing data....then so be it.
Sent from my SCH-I605 using Tapatalk 2
Is this exchange email security policy a verizon specific requirement? I just switched from sprint and never had to agree to any permissions that alowed my phone to factory reset without my input before. I was on HTC before but now samsung. Ditto a coworker who is now on motorola and gets the same excessive permissions to setup work email. So many limitations and restrictions since the switch that I would think about going back to Sprint
Sent from my SCH-I605 using xda premium
Please read forum rules before posting
Questions go in Q&A
Thread moved
Thank you for your cooperation
Friendly Neighborhood Moderator

[Q] Launcher with password protection

We are thinking about the possibility of installing 7" cheaper android tablets in public, in our company. The main thing I am trying to achieve is, the user should only have access to the applications that I place on the home screen, as widgets/shortcuts, and cannot open anything else, not even Play Store for example.
Is there any launcher out there, that has password protection? For example, I want to lock the home screen, and it should ask for a password, when I want to unlock it. Maybe, ask for a password, if I want to open the app drawer as well, that would be the best.
I was searching, but couldn't find anything so far. Any help or direction is thanked, or if you know about a better solution then what I described briefly, that is even better.
cheers

Can Mate20 Pro Face ID Unlock Be Geolocked and/or Temporarily Disabled?

Hi everyone, I'm a potential Mate20 Pro customer, but I need more information on the features:
1. Is it possible to temporarily disable the face unlock, similar to the iPhone X?
Here is how Apple implements mechanism to disable it: https://mic.com/articles/191653/heres-how-iphone-users-can-disable-face-id#.GFGUiwnJH
2. Is it possible to geolock Face Unlock, so it works in your own home, but is disabled in other places?
Thank you.
Anyone?
Not understanding why you'd do that. Probably just set screen lock delay in settings. I never had geolock
leo72793 said:
Not understanding why you'd do that. Probably just set screen lock delay in settings. I never had geolock
Click to expand...
Click to collapse
The reason is in the article I linked above: To protect yourself against anyone (such as a bad police officer) who might try to hold your phone up to your face to unlock without permission. Apple has a solution.
As for geolocks, some phones can already disable or downgrade their security when you are in a trusted zone. (My mom's old LG G4 from 2015 does this.) It would be nice to only allow face unlock in my own home or office.
oops double post
Bamboo-Toolkit said:
The reason is in the article I linked above: To protect yourself against anyone (such as a bad police officer) who might try to hold your phone up to your face to unlock without permission. Apple has a solution.
As for geolocks, some phones can already disable or downgrade their security when you are in a trusted zone. (My mom's old LG G4 from 2015 does this.) It would be nice to only allow face unlock in my own home or office.
Click to expand...
Click to collapse
well for the "geolock" id expect it to need location and or wifi access. which if off wont allow it to work. 2nd, what are you tryingh to hide from cops lol
Dunno about geo locking (that might need a 3rd party app) but there is an option to require the eyes to be open.
Might be useful for those people living in such Police states that may infringe on your civil and constitutional rights as you simply need to keep your eyes shut
Unless that is the LEO is carrying matchsticks
---------- Post added at 07:06 AM ---------- Previous post was at 06:09 AM ----------
Actually now that I've woken up, if someone is that paranoid they're worried about a LEO holding the phone to the face to unlock then maybe they should just disable face and fingerprint unlock all together and only use a PIN with a very short screen off time
With smart unlock you can tell the phone to unlock without code or anything at certain places (ie at Home). Outside of that place you would need your PIN or password (if you chose one of these options). At home you would have no security for unlocking but I think it's the closest thing to what you want (if you want to beef up your security for certain apps you can chose a pin or face unlock for every single app so nobody could use them even if they got hold of your phone at home).
Hope that helps
leo72793 said:
well for the "geolock" id expect it to need location and or wifi access. which if off wont allow it to work. 2nd, what are you tryingh to hide from cops lol
Click to expand...
Click to collapse
I'm just security-conscious.
Just because you're paranoid doesn't mean anyone is actually chasing you! :silly:
panman1964 said:
Might be useful for those people living in such Police states that may infringe on your civil and constitutional rights as you simply need to keep your eyes shut
[/COLOR]Actually now that I've woken up, if someone is that paranoid they're worried about a LEO holding the phone to the face to unlock then maybe they should just disable face and fingerprint unlock all together and only use a PIN with a very short screen off time
Click to expand...
Click to collapse
In China, the police can just arrest anyone and hold them forever until they give up their phone PW. That's police states for you!
Here in the Western world, PIN unlocks often have different legal protections than biometric unlocks, hence Apple's solution. But you do have a point about disabling Face / Fingerprint unlock.
AndiThebassman said:
With smart unlock you can tell the phone to unlock without code or anything at certain places (ie at Home). Outside of that place you would need your PIN or password (if you chose one of these options). At home you would have no security for unlocking but I think it's the closest thing to what you want (if you want to beef up your security for certain apps you can chose a pin or face unlock for every single app so nobody could use them even if they got hold of your phone at home).
Hope that helps
Click to expand...
Click to collapse
Thanks, this is helpful.
For Huawei go to secure lock settings and enable "Show lockdown button on power off screen", when you try to power off your phone there will be an extra option called lockdown when you select this your phone can only be unclocked by PIN (if you've set it)
Bamboo-Toolkit said:
I'm just security-conscious.
Just because you're paranoid doesn't mean anyone is actually chasing you! :silly:
In China, the police can just arrest anyone and hold them forever until they give up their phone PW. That's police states for you!
Here in the Western world, PIN unlocks often have different legal protections than biometric unlocks, hence Apple's solution. But you do have a point about disabling Face / Fingerprint unlock.
Thanks, this is helpful.
Click to expand...
Click to collapse
huawei offer privacy area in secuirty&privacy. use 2nd passoword enter privacy mode. told them your main password and hide your 2nd password. DO NOT BELIEVE IN MOVIES, YOU UNABLE TO RESIST TORTURE. this is right to protect yourself and your date. but in privacy mode use phone sim card 2. you keep sim card out.

Categories

Resources