Database Users

Any way past corporate-required PIN locks?

My company upgraded their exchange server, and now requires lock screens (PIN or password, no pattern) if we want to access email on our personal phones.
As someone with a rooted phone, is there any way to disable this and still have access to my corporate email? It's really annoying to have to punch in a PIN 500 times a day, but I really do need email access on my phone as much as I'm on the road.

I think this has been discussed before, but maybe on a different phone (HeroC maybe) But essentially no there isn't away - to access the server the phone goes through a series of checks, one of the checks being that an appropraite pin was entered to unlock the phone. if that check fails, authentication to the server is denied. Someone *might* be able to spoof the check in the email app, but I am fairly sure its actually OS deep, not just within the mail client.
So it would be a large undertaking and potentially could cause you to loose your job by by passing security measures. I know I wouldn't think twice about firing someone who did it on my network.

No way that I know of, and is something that is on pretty much everyphone. Blackberrys the security policies can even block installation of 3rd party applications.
What's even more fun for you, is the ability of your it staff to lock you out of your phone or even remotely wipe your phone.
Sent from my SPH-D700 using XDA Premium App

Restola said:
My company upgraded their exchange server, and now requires lock screens (PIN or password, no pattern) if we want to access email on our personal phones.
As someone with a rooted phone, is there any way to disable this and still have access to my corporate email? It's really annoying to have to punch in a PIN 500 times a day, but I really do need email access on my phone as much as I'm on the road.
Click to expand...
Click to collapse
I think you are stuck. Do you have the option of getting a company-supplied phone to access the company email, and keep your personal Android separate?

There is a thread in Q&A talking about an app that does this.
Do you BONSAI?

Actually there is a way I had to do it to my coworkers phone for her pattern lock
What u need: locked phone phones #, wifi or u can use wifi tether if u have another phone
1. Call the persons phone #
2. Leave phone call connected on both sides
3. Connect to wifi if u havnt already
4. Goto settings/accounts manager setting or what ever and log into a diff google account then it should require u to change the password to by pass it
Should work hopefully I read this thread correctly and answered appropietly
Edit sorry read it wrong and u don't think there is a way
My way is how u get around it
Sent from my Epic 4.1g bonsai plant

Here's the link to the thread that may help:
http://forum.xda-developers.com/showthread.php?t=1033017

I thought it was just being big brother, turns out its a regulatory requirement since we were bought by a publicly traded company. I guess I'll deal with it. If it pisses me off too much I'll just get rid of my exchange account on my phone and stop responding to emails when I'm not at my desk.

A possible workaround would be to try touhdwn for your exchange mail instead of the default mail client. Its a paid app but there should be a demo version in the market. I have a dp2 for work and they pay for touchdown for us. When using touhdown it pin locks just the app instead of whole phone. On my Droid at least moto customized the screen timeout and lock to be different timers so I found the pin to be less annoying than the interface of touchdown.
With the epics slightly bigger screen to make the TD interface a litte less annoying(lots of small buttons instead of utilizing menu button) and since epics lock is all or nothing I think I might actually use TD on my epic if I were getting my corp email there.
While not a complete removal of the pin maybe it would at least make it less annoying for you. Plus I'd guess if work catches you wihout a pin it might not go over well. TD solution lets you protect the email if you lose your phone, and does have a remote wipe for the same scenario.

[Wallet won't work if rooted]

So I just tried to setup my Google Wallet on my Nexus 7. It said my device was not supported this is the message I received: "Some users may disable important security mechanisms in order to gain system-level "root" access to their device. We strongly discourage doing so if you plan to use Google Wallet. We are unable to support devices with the unauthorized operating systems as the security layers of the device may be limited." So my question is there ANY way to bypass this and use wallet?

It still works.. Just ignore the message...
I get the same on my GSM Nexus

raqball said:
It still works.. Just ignore the message...
I get the same on my GSM Nexus
Click to expand...
Click to collapse
okay, thanks. how come i can't see my credit cards that i have added on my computer?

The unsupported device message for being rooted is normal it will still work. Wallet accounts are individual to the device which is why you prob dont see the cards. Wallet on my GNex is a diff id than the one on my N7.

dbett4 said:
okay, thanks. how come i can't see my credit cards that i have added on my computer?
Click to expand...
Click to collapse
You have to add your credit card to the "Google Prepaid Card"
From there you can transfer funds from your credit card you linked to the Google Pre Card and set that as your default card.

Google wallet doesn't show in play after rooting.

I got that display after I rooted.
OTA Rootkeeper fixed the problem - just temporarily unroot before stating wallet.

The message is there for a reason. If your nexus is rooted and somebody steals it, they can use su to access the Google Wallet asec data without needing to enter the PIN. Doing a "temporary unroot" might suppress the message but it doesn't actually solve the security problem.

I'm glad to see this thread, as I was wondering if wallet would still work now that I've rooted.
I have to admit, I don't really see how Wallet on a tablet can be considered convenient. I can see it on a phone, since I always have that with me. That said, I'll happily use the free $10!

[Q] wallet issue - not authorizing card at POS

alright guys. Quick question. Has anyone had any of the "secure element" issues on the Nexus 4? I have been looking around and not found anything related to the N4 talking about the secure element. Lots of stuff on the old G-Nex and Nexus S forums though.
To be clear, I am NOT having the error message about secure element come up on the screen. However, after my most recent flash every time I try to use wallet, the paypass terminal says "unable to authorize payment, try another card". Again, there is no "secure element" message, just an error on the paypass terminal.
I tried it on the vending machines at my work and it erred. I then went to CVS just to try it there and it also said the card couldn't be authorized.
I called Google and they said that they see the transactions attempt to go through but show that the card is being declined at point of sale. So, it makes me think that it is not an outage on Google or even a secure element issue. After all, no secure element error code and if it at least attempts to go through, seems to not be secure element.
So, I figured it may be a google wallet outage. Nope. I then figured maybe paypass was down. Nope, it worked with other cards. But every time I try to use the phone it simply rejects the payment. And yes, I know the card my wallet account is linked to is still good...
I flashed a complete factory image back to stock unrooted and it still wont go through.
And I was also sure to always wipe the app before I flashed anything, so I don't think the secure element would have been damaged anyhow, but just seeing if perhaps anyone knows of a secure element issue or some other issue.
Thanks for your time and assistance.

thos25 said:
alright guys. Quick question. Has anyone had any of the "secure element" issues on the Nexus 4? I have been looking around and not found anything related to the N4 talking about the secure element. Lots of stuff on the old G-Nex and Nexus S forums though.
To be clear, I am NOT having the error message about secure element come up on the screen. However, after my most recent flash every time I try to use wallet, the paypass terminal says "unable to authorize payment, try another card". Again, there is no "secure element" message, just an error on the paypass terminal.
I tried it on the vending machines at my work and it erred. I then went to CVS just to try it there and it also said the card couldn't be authorized.
I called Google and they said that they see the transactions attempt to go through but show that the card is being declined at point of sale. So, it makes me think that it is not an outage on Google or even a secure element issue. After all, no secure element error code and if it at least attempts to go through, seems to not be secure element.
So, I figured it may be a google wallet outage. Nope. I then figured maybe paypass was down. Nope, it worked with other cards. But every time I try to use the phone it simply rejects the payment. And yes, I know the card my wallet account is linked to is still good...
I flashed a complete factory image back to stock unrooted and it still wont go through.
And I was also sure to always wipe the app before I flashed anything, so I don't think the secure element would have been damaged anyhow, but just seeing if perhaps anyone knows of a secure element issue or some other issue.
Thanks for your time and assistance.
Click to expand...
Click to collapse
On your phone, go to Wallet > Settings > Reset Google Wallet app, then clear the app data in settings.
Next, on a PC, go to https://wallet.google.com/manage/ and remove all payment cards.
Back on your phone, setup wallet and add the credit cards there.
I had the issue once on my Nexus S and this fixed it for me.

SpookyTunes said:
On your phone, go to Wallet > Settings > Reset Google Wallet app, then clear the app data in settings.
Next, on a PC, go to https://wallet.google.com/manage/ and remove all payment cards.
Back on your phone, setup wallet and add the credit cards there.
I had the issue once on my Nexus S and this fixed it for me.
Click to expand...
Click to collapse
thanks. I'll give it a shot. Hopefully this fixes it. Seemed strange since I wasn't getting an error message but the point of sale is rejecting it. Google said it is showing up on their end as declining for expired card, but I know the cards aren't expired.
We will see. My main concern was simply that this is a Secure Element issue and perhaps the newest version of wallet just doesn't indicate it.
Ill report back soon.

thos25 said:
thanks. I'll give it a shot. Hopefully this fixes it. Seemed strange since I wasn't getting an error message but the point of sale is rejecting it. Google said it is showing up on their end as declining for expired card, but I know the cards aren't expired.
We will see. My main concern was simply that this is a Secure Element issue and perhaps the newest version of wallet just doesn't indicate it.
Ill report back soon.
Click to expand...
Click to collapse
I think the main issue with the secure element was related to the Google prepaid card. It stored the money in the SE, so the idea that you could put $20 on it, back it up, spend the money, restore, and spend it again would have become a cat and mouse security nightmare for Google.

SpookyTunes said:
I think the main issue with the secure element was related to the Google prepaid card. It stored the money in the SE, so the idea that you could put $20 on it, back it up, spend the money, restore, and spend it again would have become a cat and mouse security nightmare for Google.
Click to expand...
Click to collapse
Unfortunately no dice.
I wiped the app. Diabled it. uninstalled all updates. I went all out just to make sure to clear everything. And of course wiped all data from within the app itself prior to clearing data and cache, etc.
Deleted all payment info off of the google account using the link you provided.
Then I enabled the app, reinstalled updates and entered all new payment information. No dice.
So then I added in a card which I have never even had linked to the google wallet account. I figured perhaps just the card itself is somehow jacked up within Google network (expiration date or something). I tried the brand new card which has never been used before and it failed to authorize as well.
Im a bit lost at this point with other things to try. I do have a couple of old nandroids which I can try, but I am not sure if it will resolve the issue as I had already tried another one without success.
Any other ideas guys?

thos25 said:
Unfortunately no dice.
I wiped the app. Diabled it. uninstalled all updates. I went all out just to make sure to clear everything. And of course wiped all data from within the app itself prior to clearing data and cache, etc.
Deleted all payment info off of the google account using the link you provided.
Then I enabled the app, reinstalled updates and entered all new payment information. No dice.
So then I added in a card which I have never even had linked to the google wallet account. I figured perhaps just the card itself is somehow jacked up within Google network (expiration date or something). I tried the brand new card which has never been used before and it failed to authorize as well.
Im a bit lost at this point with other things to try. I do have a couple of old nandroids which I can try, but I am not sure if it will resolve the issue as I had already tried another one without success.
Any other ideas guys?
Click to expand...
Click to collapse
Only flash back to stock 4.2.2 ROM and re-lock the bootloader. Also try skipping the update to Wallet.

I'm actually on stock 4.2.2 now. I tried to flash factory image after it wasn't working on a custom ROM.
Boot loader didn't get locked though. I won't be able to try anything else until Monday though since the only readily available pay pass is on the vending machines at work.
Sent from my Nexus 4 using xda app-developers app

SpookyTunes said:
I think the main issue with the secure element was related to the Google prepaid card. It stored the money in the SE, so the idea that you could put $20 on it, back it up, spend the money, restore, and spend it again would have become a cat and mouse security nightmare for Google.
Click to expand...
Click to collapse
Something like this did occur back when Google was providing Nexus 7 users with I think $10 wallet credit. People would restore their accounts (or maybe just sync a new account, not too sure), and get their credit again, essentially, infinite spending (within that limit)

Okay. So I am back at work with access to a vending machine with an NFC reader…
I have tried several things with no luck. First, I noticed there was a “verify your identity” section under wallet settings.
1) I verified my identity figuring perhaps it needed verification before it would allow any transactions. That didn’t work.
2) I have an NFC payment on 5/24 so I restored my 5/24 nand to try to see if that would restore functionality. It didn’t.
3) I then flashed the 5/25 update to the CM Nightly ROM I used on 5/24. I know I had done this so I figured I would try that. Plus, I have an NFC payment on 5/25 (last time NFC was used) so I figured I would try that. No luck.
I am really confused. I am not getting a secure element error, so I don’t think the chip is locked out. I called my CC company and they see the transaction come through and approve it, but never get a charge on it. Google also says they see the transaction request. This means the phone is sending the information as it should, which also makes me think the chip is NOT locked out. If flashing prior ROMS didn’t work, and flashing a complete factory image doesn’t work, it makes me think it has to be on Googles end somewhere.
I wonder if perhaps the virtual card I was assigned from Bancorp is somehow messed up.

another update. I added a new gmail account to the phone. Basically I created a new gmail just to try something.
I then reset the app, added the new gmail account info to the phone. I then set it up using all of my same payment information. Once the app was set up I tried it out at the vending machine and it worked.
So, since using an entirely new account works. This pretty much confirms that the app itself is not messed up and that there is no issue with the secure element either.
After I confirmed that the app works using a new account, I then reset the app, put in my actual gmail account again, and set up wallet again. This time it didn’t work. At this point I would say it is pretty safe to assume that it is definitely an issue with google wallet on googles end or perhaps on Bancorp Money Networks end.

I've been having this exact same issue with my Nexus 4. Still have not been able to fix it. I just tried setting it up with another account that I don't recall ever really having had Wallet with and that still didn't work. I have not tried to make a completely new gmail account yet. It's very weird, you'd think Google Wallet would just send the same info as my actual credit card does, the blink function in that one works fine.

I am having the same problem on my Gen Nex as well. Very annoying!

I've been able to use it in a few different places without problems now. I haven't gone back to these vending machines at work though so I don't know if Google ever did something after I contacted them. I was so upset when I contacted them because I explain my problem with as many details as possible, I am very clear about how I have a Nexus 4 and how this used to work fine. They reply back to me with some dumb generic message about how in order to use the NFC function in Wallet I have to have a NFC enabled device, which isn't even true because you can't use Google wallet on most phones NFC or not. Honestly it's like they just didn't read my email at all. I emailed them back asking if they even read the email but they never got back to me.

[Q] Anyone familiar with Exchange ActiveSync policy?

I work for a medical practice. We need to keep strict EAS policies such as force PIN or password, force Encryption, allow remote wipe, timeouts, etc. No exceptions if you want to have corporate e-mail on your mobile... and I simply can't live without it.
Anyways... I'm here to talk about biometrics. I think on Exchange 2013 they just patched in the ability to allow BM separately... but what about the rest of us who will be on 2010 for a good while longer? The iPhone totally has us beat in this category. We did some testing yesterday... and the iPhone 5S is actually "smart" enough to just push your set PIN into the phone on unlock and allows the continued use of BM. With my GS5, since BM is a completely different (unlinked) feature, it is greyed out. No BM for me. :crying:
I'm just curious if anyone else has dug into this? I have been taking a lot of flak from all my IT cohorts that I still need to use a PIN.

sipple31 said:
I work for a medical practice. We need to keep strict EAS policies such as force PIN or password, force Encryption, allow remote wipe, timeouts, etc. No exceptions if you want to have corporate e-mail on your mobile... and I simply can't live without it.
Anyways... I'm here to talk about biometrics. I think on Exchange 2013 they just patched in the ability to allow BM separately... but what about the rest of us who will be on 2010 for a good while longer? The iPhone totally has us beat in this category. We did some testing yesterday... and the iPhone 5S is actually "smart" enough to just push your set PIN into the phone on unlock and allows the continued use of BM. With my GS5, since BM is a completely different (unlinked) feature, it is greyed out. No BM for me. :crying:
I'm just curious if anyone else has dug into this? I have been taking a lot of flak from all my IT cohorts that I still need to use a PIN.
Click to expand...
Click to collapse
If you want to use the Finger Print reader to unlock on your phone and a pin just for your email, you can use email apps like Touchdown instead of the default email application. So the only time you would have to enter a pin is when you open touchdown app, not to unlock your phone.

Work Email and Smart Lock

So apparently when signing into work email using the Gmail app, Smart Lock becomes completely disabled and I am only allowed pin and password screen lock. Any way around this?

Yes. Use Nine. Your IT department is enforcing the security. By using Nine you can set to use the security for the app only. Everything else is enabled. To be honest I used Gmail for 2 weeks after finding that I lost my heading in all my replied/forwarded emails (date, time, to/from and subjecf). Nine as been flawless for the past 2 weeks. Paid app but worth it.

Any other work around out there.

I've tried almost every exchange mail app and Nine has the most features with no crashes. Nine allows you to apply the company security to just the app instead of the phone. I've been using it for about 2 years.
Sent from my Nexus 6P using Tapatalk

AndrasLOHF said:
Any other work around out there.
Click to expand...
Click to collapse
There are Xposed apps to disable forced authentication for Exchange but these require root, and most employers have stopped allowing root on BYOD. That was enough to show my employer the middle finger and tell them that if they want me to have access to corporate email they better start paying for a device because I am not giving up root for their convenience.
Agree with previous posters that if you are not rooted Nine is beautiful app. It also has the advantage over Gmail of being instantly able to tell if an email is work or personal with one glance at the status bar. It ain't cheap but is well worth it.
Another workaround, if your company allows webmail access is MailCal. This is a very nice GUI wrapper around OWA, far and away the best of its kind and the developer is super responsive.