SkieSkie for Enterprise
Hardening and tamper protection, page 3
Every protection Skie applies to a managed device, and what each one stops. 72 questions answered.
- What is a signed policy bundle and why does it matter?A signed policy bundle is the set of rules sent to a device, with a cryptographic signature the device checks before applying anything. If the signature does not verify, the device rejects...
- What is the per-device key and what is it used for?Each managed device has its own key and identity, tied to its IMEI, serial and enrolment ID. The device uses its key to sign what it reports, so the dashboard can trust that a status came...
- How do we know a rule was really applied on a device?After every apply, the device reads each protection back from Android and reports a compliance score. Skie does not assume a rule is in force because it was sent. It asks Android what is...
- Could a device or app send a fake 'all good' report to the dashboard?Reports are signed with the device's own key, and the server checks the signature, so a fake message from an app or another source is not accepted as that device's status. The compliance...
- When Skie hides or blocks an app, is it deleted?No. Skie hides or suspends apps instead of deleting them, so the app and its data come back when the app is allowed again. Remove Skie also deletes no apps. The only removal is by the...
- Will Skie ever hide or break essential system apps like the dialer or settings?No. Essential system apps are never touched by Skie, so the phone still calls, the clock works and Settings opens, whatever an app list says. Hiding applies to the other built-in and...
- What happens if my device model has not been reviewed by Skie?Skie works on any Android 12 or newer phone or tablet, and a new model gets a one-time review during setup. Until a model is reviewed, its built-in apps are left alone, so nothing is hidden...
- Is the connection between Skie and the managed devices encrypted?Yes. Devices talk to Skie over HTTPS, and DNS lookups to the filter use encrypted DNS. On top of that, policy bundles are signed and device reports are signed with a per-device key, so...
- If the Skie server is down, do the rules still apply on devices?Yes. Rules are cached on the device and keep working offline, so the filter, app lists, schedules and hardening carry on with the last verified policy. What pauses is new information...
- Can a student change the date and time to stretch a schedule window?No. Date and time are locked to automatic, with auto time and auto time zone forced on, and Skie uses a trusted clock for sync timing. So changing the clock does not extend a study window...
- How are Skie app updates verified, and can we hold one back?The Skie app updates itself, and each update is checked with a checksum before it is installed. Releases roll out in stages to chosen organisations and can be paused. To roll back a bad...
- How does Skie recognise a device, and what happens when it is reset and set up again?Skie records each device by IMEI, serial and enrolment ID. If a device is reset and provisioned again, it is recognised and does not take a second seat. The identity also feeds lost...