Headwind MDM Q&A - Recent questions and answers

Answered: Is it possible to disable lock screen widgets on Samsung One UI devices managed by Headwind MDM?

Fri, 17 Jul 2026 10:14:21 +0000

This function is not available in Headwind MDM.

Thank you for the feature request. If more users will request or vote for this feature, we consider implementing it in future versions of Headwind MDM.

Premium license users have advantages when considering feature requests, also we provide them with a cloud build system allowing customizations. Please contact us for more details about the Premium license.

Answered: how to set Privacy Reminder in other language like pt_br

Thu, 16 Jul 2026 08:31:52 +0000

Please read the recommendation in the article: https://qa.h-mdm.com/18364/change-default-language-android-device

Use the value "android.app.extra.PROVISIONING_LOCALE": "pt_BR" in the Other QR code entries field.

Answered: Seeing Custom version, please update manually - How to roll back?

Mon, 13 Jul 2026 08:01:54 +0000

This warning is visible in the following cases:

1. You have multiple variants of Headwind MDM launcher uploaded (for example, both free and Premium)

2. You have renamed the Headwind MDM launcher APK (different from hmdm-x.xx-master.apk or hmdm-x.xx-os.apk)

3. You have uploaded your own version of Headwind MDM launcher

To restore the automatic update, open the Applications tab, and search of com.hmdm.launcher. Then remove all non-standard entries. At the end, only hmdm-x.xx-master.apk or hmdm-x.xx-os.apk should remain.

Answered: Using a custom CA chain in an air-gapped network

Tue, 07 Jul 2026 08:40:54 +0000

1. Upload your root and intermediate certificates to Headwind MDM in the "Files" section (do not assign them to any configuration). Copy their URLs, they will be used to preconfigure Headwind MDM agent.

2. Make the Headwind MDM agent available in your network over plain HTTP. Since Headwind MDM uses Tomcat which listens port 8080, you can just replace https://your-local-domain with http://your-local-domain:8080 in the launcher URL.

3. Open the configuration details, MDM settings tab. Make the following adjustments:

3.1. Paste the plain HTTP based URL of Headwind MDM launcher in the "Override launcher URL" field. This will prevent "Unknown certificate" error and the enrollment failure (HTTP based enrollment is allowed by Android).

3.2. Add the entry "android.app.extra.PROVISIONING_ALLOW_OFFLINE": true in the "Other QR code entries" field.

3.3. Add the certificate URLs (comma-separated) to the "Admin extras" field ("com.hmdm.CERTS" attribute). Note: you can use HTTPS URLs here, as Headwind MDM will ignore the certificate error when downloading certificates.

Try to enroll the device. In most cases, this configuration should work as expected.

If the enrollment fails, the most probable failure reason is the requirement of Internet connection during the enrollment. In that case, the only option is to use an intermediate Internet-connected network for enrollment (see details here: https://h-mdm.com/private-network/).

Answered: How to configure Headwind MDM to automatically open or redirect users to my website

Sat, 04 Jul 2026 06:30:31 +0000

This option (kiosk mode with a browser running a dedicated website) is available in Headwind MDM Premium: https://qa.h-mdm.com/1032/setup-kiosk-to-open-the-web-page Please contact the team for a free trial.

In the Community version, you may need to create a wrapper app (based on WebView, or just running a web view intent), add it to Headwind MDM, and mark it as "Run at boot". Please note that, since kiosk mode is not supported, the user can exit the web application mode.

Answered: Cannot hide status bar and nav buttons in kiosk mode

Mon, 29 Jun 2026 13:21:52 +0000

The software features in earlier Android versions may be limited.

Full functionality is available in the MDM mode on Android 9 and above.

See more: https://h-mdm.com/headwind-mdm-capabilities/

Answered: Kiosk browser not opening pdf inside

Mon, 29 Jun 2026 11:05:00 +0000

Kiosk Browser uses WebView, a built-in system web engine. It works with HTML only and is not supposed to display PDF in an embedded window. Currently it treats PDF as external files and opens the related application.

To avoid opening PDF in Chrome, install a dedicated application to view the PDF files only. Or avoid PDF in your web application. Note that Kiosk Browser is designed as an engine for standalone kiosks which aren't supposed to display PDF to their users.

Answered: How can I integrate Cloudstream with my existing Headwind MDM setup for better remote management?

Mon, 22 Jun 2026 11:56:47 +0000

We're not aware of any cases of integration of Cloudstream with Headwind MDM. However I believe the Cloudstream app should work well on devices managed by Headwind MDM.

You can try registering a demo account on our cloud service srv.h-mdm.com and check for yourself.

The application installation process is described in the instructions: https://h-mdm.com/quick-start/, "Deploying your application" section.

Answered: Return value of connect(Contex, MDMService.ResultHandler) vs. ResultHandler.onMDMConnected()

Mon, 22 Jun 2026 11:26:32 +0000

The connection is asynchronous.

When MDMService.connect() returns true, this means the connection process is initiated without issues (for example, as you mentioned, Headwind MDM launcher should be installed on the device, otherwise you get an immediate error ERROR_NO_MDM).

When the service connection is completed, a callback ResultHandler.onMDMConnected() is called.

Answered: Is MDMService DIRECT_BOOT aware?

Fri, 19 Jun 2026 04:44:18 +0000

Yes, there are plans to implement the listener of android.intent.action.LOCKED_BOOT_COMPLETED in Headwind MDM, so it could work after boot even when the device is locked.

This however needs some design changes, because currently all settings are stored in user preferences which are not available when a device is locked.

Answered: Does community edition support kiosk lockdown...?

Mon, 15 Jun 2026 07:35:58 +0000

The Community version doesn't have the option to block unwanted apps and settings. It also doesn't support kiosk mode.

You can request a trial license for a Premium or Enterprise license at: https://h-mdm.com/pricing/

Answered: Installing app from google play

Thu, 04 Jun 2026 10:47:23 +0000

Hi,

It is assumed that only the administrator installs applications through the Headwind MDM panel.

Answered: remotely format a device

Mon, 25 May 2026 14:21:12 +0000

Please open the Functions menu -> Reboot, lock, reset.

Select your device and click the Factory reset button.

Answered: Feature: integration wtih app stores

Mon, 25 May 2026 13:17:20 +0000

Any news on the topic?

Answered: Kiosk Browser 1.29 - microphone not working with WebRTC (getUserMedia returns NotReadableError)

Mon, 25 May 2026 09:29:45 +0000

The kiosk browser was designed to be used on standalone interactive devices (kiosks), and it currently does not have a microphone and camera permission.

If this will be changed in the future, we will let you know.

Answered: Where can I see the changelog?

Mon, 25 May 2026 08:50:26 +0000

https://github.com/h-mdm/hmdm-android/tags found it!

Answered: "Auto-grant all permissions” enabled but apps still asks for permissions on first launch?

Thu, 21 May 2026 08:38:05 +0000

Hi,
Unfortunately, not all Android permissions can be granted automatically.
More info: https://qa.h-mdm.com/18777/

Answered: re-registration device acount

Mon, 18 May 2026 14:16:22 +0000

If you turn on prevent.duplicate.enrollment, then, to replace a damaged device, you need to delete and re-create the device in the "Devices" section. This is done intentionally to prevent the duplicate device enrollment (replacing a damaged device is considered an exceptional action, so there is no special option or button for that).

If replacing devices is a frequent action in your workflow, consider turning off preventing duplicate enrollment.

Answered: Is message severity of message "Stealing link for clientId...' relevant (ERROR vs. WARN)

Fri, 15 May 2026 15:22:06 +0000

This message is currently suppressed (as per the commit). This message means that a device has reconnected, which is a frequent case. This message may need to pay attention only if a device is in a reconnection loop (you've apparently met that issue, reboot the device to fix). The repeating warning may flood logs quickly and cause more serious failures when the storage is full. So we decided to suppress it.

In the future, we will deprecate MQTT. Consider switching to HTTP polling to avoid issues like this.

Answered: Updating the Docker-based Headwind MDM

Thu, 07 May 2026 04:54:41 +0000

To update both Headwind MDM and Tomcat services, compare the version of the hmdm container in docker-compose.yaml with the latest tag at https://github.com/h-mdm/hmdm-docker.

If your version is outdated, update the version number in docker-compose.yaml and pull the changes:

docker-compose up -d

Notice: if your instance of Headwind MDM is working in the closed network without Internet access, docker may fail to pull changes.

To update the Docker image in an isolated network, you need to:

1. Pull the new image and save it to a file

docker pull headwindmdm:hmdm-0.1.8
docker save -o hmdm-0.1.8.tar headwindmdm:hmdm-0.1.8

(replace 0.1.8 with the latest version of Headwind MDM container)

2. Upload the image to the offline server

3. Import the image to the local docker repository

docker load -i /path/to/hmdm-0.1.8.tar

4. Proceed with updating similar to the online update

Answered: Is it possible to prevent user from disconnecting a VPN connection from notification area in Android?

Tue, 05 May 2026 08:42:43 +0000

Try using no_config_vpn in the restrictions field. See also https://developer.android.com/reference/android/os/UserManager#DISALLOW_CONFIG_VPN

You can find this field in the configuration details on the MDM settings tab.

Also, Headwind MDM Premium has the URL filtering plugin (works in a similar way as PersonalDNS and has the ad blocking option). Its benefit is that it is running as Always-On VPN and couldn't be turned off by the user. You can test Headwind MDM Premium by contacting the technical support (https://h-mdm.com/contact-us).

Answered: Create a folder with several apps

Thu, 30 Apr 2026 12:49:36 +0000

Headwind MDM does not support creating folders on the homescreen to group multiple applications together.

Answered: android.permission.CALL_PHONE

Tue, 28 Apr 2026 05:07:06 +0000

Headwind MDM does not have call activities and cannot execute commands to forward calls.

I guess you need to explicitly indicate the package name for the call intent:

Push command type: runApp

Payload: {pkg: "com.android.server.telecom", action: "android.intent.action.CALL", data: "tel:%23%23002%23"}

Answered: Android 14+ QR enrollment is blocked, asks IT admin contact, and Play Protect rejects APK after attempts.

Mon, 27 Apr 2026 15:39:06 +0000

Please contact technical support (https://h-mdm.com/contact-us), provide the support with the QR code you're using for setting up a device, and in which country are you located. We will analyze what's going wrong and let you know.

Note: Custom builds of Headwind MDM are blocked by Play Protect. Use only the original launcher which could be downloaded here: https://h-mdm.com/download/

Answered: How to install Headwind MDM on a device without a camera by using adb?

Thu, 16 Apr 2026 09:34:45 +0000

Here's the setup flow including adb. We presume adb is already activated (here is how to turn on developer mode and connect the device to the host by adb).

1. Open the list of configurations in the Headwind MDM web panel, choose the configuration for your devices, click the QR code icon, choose the device number assignment strategy (IMEI or serial number), then click "Generate JSON".

2. Save the JSON as init.json on your computer.

3. Download the APK file of the MDM agent to your computer (hmdm-x.xx-os.apk)

4. Connect the device to the computer by usb

5. Run the commands (they could be merged into a script):

adb install hmdm-x.xx-os.apk
adb shell dpm set-device-owner com.hmdm.launcher/.AdminReceiver
adb push init.json /storage/emulated/0/Android/data/com.hmdm.launcher/files/init.json
adb shell am start com.hmdm.launcher

6. To complete the setup, grant the permissions requested by the Headwind MDM launcher. This can also be done via adb console:

appops set com.hmdm.launcher SYSTEM_ALERT_WINDOW allow
appops set com.hmdm.launcher GET_USAGE_STATS allow

(not required in kiosk mode)

7. Optionally, turn off the USB debugging and developer options as these options make the device unsecure:

settings put global development_settings_enabled 0; settings put global adb_enabled 0

Important: these two commands must be sent as one line, because each of them interrupts the ADB session.

Answered: mqtt disconnect/reconnect problem

Wed, 15 Apr 2026 09:32:56 +0000

If MQTT protocol does not work well on your devices (most probably due to network issues), consider switching from MQTT to HTTP long polling. This will make Push notifications working more reliably.

Answered: Headwind MDM Launcher - Internal Server Error

Mon, 13 Apr 2026 09:49:54 +0000

When you're getting an Internal Server Error, check the Tomcat log (/var/lib/tomcat9/logs/catalina.out) for the exact error reason, in most cases the log will contain the error reason and the stack trace.

Answered: MDM settings restrictions

Fri, 10 Apr 2026 15:33:22 +0000

To add an activity, please read the instructions: https://qa.h-mdm.com/18181/how-to-open-access-to-settings-sheets

You can find documentation on restrictions here: https://developer.android.com/reference/android/os/UserManager

For example, to disable airplane mode, add the value no_airplane_mode

Answered: Static DNS content control in the browser

Tue, 07 Apr 2026 19:33:56 +0000

This feature is not available on Android.

Perhaps the URL filtering plugin functionality would be more suitable for you:

https://qa.h-mdm.com/17026/can-i-let-user-open-only-some-urls-url-filtering-feature

INSTALL_PARSE_FAILED_NOT_APK error when installing app.

Mon, 06 Apr 2026 15:13:06 +0000

I just finished another test with the Shopee app and saw the logs below.

06/04/2026 11:05:37.902 celular 1 com.hmdm.launcher VERBOSE Update flow completed
06/04/2026 11:05:37.317 celular 1 com.hmdm.launcher ERROR Install failed: INVALID, extra: INSTALL_PARSE_FAILED_NOT_APK: Failed to parse /data/app/vmdl1933863625.tmp/COSU
06/04/2026 11:05:36.979 celular 1 com.hmdm.launcher INFO Silently installing app com.shopee.br 1
06/04/2026 11:05:33.156 celular 1 com.hmdm.launcher DEBUG Downloading app: com.shopee.br

Do you know what it could be?

Answered: Push long polling inquiry

Mon, 06 Apr 2026 15:10:34 +0000

You can use the HTTP polling mode instead of the MQTT mode.

Please check out the article: https://qa.h-mdm.com/5308/there-configure-automatic-polling-configuration-changes

Answered: MDM Agent not launching after a phone restart

Fri, 27 Mar 2026 09:04:00 +0000

Please ensure the MDM launcher is running in MDM mode.

More details here: https://h-mdm.com/compatibility/

Answered: Remote Exit to System Launcher / Device Unlock on Android 15

Thu, 19 Mar 2026 08:31:01 +0000

There are two available options to unlock the device:

1. Send a push message to the device with the “permissiveMode” option. This temporarily disables restrictions for 3 minutes. Please note that this option does not work in kiosk mode. You can send it to a specific device.

2. Enable the “Permissive (unlocked) mode” option in the configuration settings.

You can create a copy of your configuration with the “Permissive (unlocked) mode” option enabled and apply it to a specific device. Please note that this option also does not work in kiosk mode.

For devices operating in kiosk mode, you can temporarily switch them to a configuration where the “Permissive (unlocked) mode” option is enabled.

We are sorry that Headwind Remote didn't meet your expectations. Our users complained big delays in the screencast delivery. If that's your case, let me note that we have recently released a new version where this issue is reliably resolved - the screencast delay never exceeds a few seconds. Please contact the technical support to get a free trial.

Answered: failed to download the package headwind MDM pager plugin error on android device

Wed, 18 Mar 2026 08:29:17 +0000

It appears that the application details include a link to an APK file hosted on our server.

Please download the application to your computer using a web browser, and then add it to the control panel by following the instructions in the guide:

https://h-mdm.com/quick-start/

Deploying your application section.

Answered: Problème upload app

Fri, 13 Mar 2026 15:01:07 +0000

Try checking your browser console for HTTP errors when trying to upload a file.

You might find a 413 error there: https://qa.h-mdm.com/11659/failed-to-upload-the-app-413-request-entity-too-large

If this isn't the case, check this file: /var/lib/tomcat9/logs/catalina.out; it should contain the error stack trace for the error.

Answered: Is the current Headwind MDM compatible with Android 7.1

Fri, 13 Mar 2026 08:49:03 +0000

Headwind MDM is compatible with most Android devices running Android 7 or higher.

If your device doesn't have a camera, you can install the MDM launcher as a regular app and grant device owner permissions by following these instructions: https://qa.h-mdm.com/1411/how-to-enroll-headwind-mdm-device-owner-android-through-adb

Answered: HMDM docker compose setup with traefik container - reverse proxy setup

Tue, 10 Mar 2026 10:12:07 +0000

To fix the URL entries in the QR code, check these two points:

1. Correct the value of base.url in the Tomcat config file (/volumes/hmdm-config/ROOT.xml), it should be https://mdm.example.com. Restart the container to apply changes.

2. Correct the URL of Headwind MDM launcher in the "Applications" section of the web panel, it should be https://mdm.example.com/files/hmdm-xxxx.apk

Answered: Reconnection loop detected! You have multiple devices with ID=MS-M! MQTT service stopped.

Tue, 03 Mar 2026 10:24:29 +0000

This is usually happening when two devices have the same ID, most probably they were enrolled with the same QR code.

Find the device with the duplicate ID, and re-enroll with another ID (you can also change the device ID in the Headwind MDM agent admin panel, tap and hold the key icon).

Answered: How to install Headwind MDM mobile app without QR code scanning?

Tue, 24 Feb 2026 07:15:45 +0000

If you just install the APK normally, it won’t run as device owner, so things like silent app installs won’t work.

No Standby - Display always on

Mon, 23 Feb 2026 13:00:41 +0000

Hello everyone,

I have just started testing the Community Edition and have the following question:

After successfully adding the tablet to the MDM, standby mode no longer works. We have the problem that the display automatically turns back on immediately after standby mode.

Now the battery on all devices is draining very quickly.

Does anyone have any ideas or settings?

Varying time to action updates/reboot/factory reset

Mon, 16 Feb 2026 12:55:49 +0000

As the title suggests - i try to push an update or action a reboot or factory reset. Same devices, same version, same network etc and there are various timeframes - no rhyme or reason. some are actioned after 5 minutes, some take an hour. what's the reason for this and what can be done to action them straight away

Is it possible to grant "Display over other apps" permissions to our Kiosk application via push messages?

Mon, 16 Feb 2026 10:42:52 +0000

We need to grant our Kiosk application "Display over other apps" permissions. Is it possible to grant this specific permission via a Headwind push message without user interaction? I think this already happens with Headwind Remote, but is it possible to use this functionality for other apps as well?

Cant Install HMDM in Lenovo Tablet TB311FU - Settings Wizard has stopped

Wed, 11 Feb 2026 11:03:43 +0000

Hello,
I want to enroll some tablets on the hmdm platform

(version Web panel 5.38.1 and apk 6.31)

After the QR Code is scanned, and after the varius checks i press, i get to google's privacy page, after i press accept to finish the setup, i get an error saying that the Settings Wizard has stopped and from then the set up wizard of the tablet is broken and only fixable via hard reset.

Problème QR Code

Wed, 11 Feb 2026 07:29:50 +0000

Bonjour,

Sur certaine configuration, je n'est plus la possibilité d'avoir le QR code

-----------------

Hello,

On some configurations, I no longer have the option to display the QR code.

adb command?

Tue, 10 Feb 2026 06:48:47 +0000

Hi everyone, I’m using the open-source version and I’d like to know if the following is possible:

When I connect one of my devices in developer mode and manually run the command "adb shell cmd overlay enable com.android.internal.systemui.navbar.gestural", the device successfully switches to gesture mode. However, when I try to send the same command via runCommand, it doesn't work. I’ve already tried these formats:

{command: "adb shell cmd overlay enable com.android.internal.systemui.navbar.gestural"}
{command: "cmd overlay enable com.android.internal.systemui.navbar.gestural"}
{command: "shell cmd overlay enable com.android.internal.systemui.navbar.gestural"}

Is this a known limitation of the platform's scope, or am I doing something wrong?

Thanks in advance for your help!

what do the table user role settings do

Fri, 06 Feb 2026 05:21:11 +0000

i want to know the use case of userrolesettings
what do each bollean attribute do,
i want to know how to use it actually

Giving Permission Searching Nearby Devices

Mon, 02 Feb 2026 07:45:21 +0000

I have my own app that requires 'searching nearby devices', do you have a way from Headwind MDM to allow all apps to search for nearby devices?

How to allow WiFi settings in Kiosk Mode

Thu, 29 Jan 2026 12:53:47 +0000

Hey,

I am trying to set up a device with Kiosk mode while still allowing quick settings. Changing brightness, volume and all that works but WiFI settings are locked. How can I change that?

Thank you

Bluetooth interactions not work

Thu, 29 Jan 2026 07:30:49 +0000

Our app is running on a device managed by Headwind MDM, but it can no longer perform Bluetooth interactions.
In the MDM configuration, Bluetooth is set to Enabled.

Before the device was managed by Headwind MDM, our app was installed and used as a system app, and Bluetooth functionality worked as expected.

Our app needs to:

scan for Bluetooth devices,
pair with them without user interaction, and
establish a connection.

The following permissions are declared in the app:

<uses-permission android:name="android.permission.BLUETOOTH" />
<uses-permission android:name="android.permission.BLUETOOTH_ADMIN" />
<uses-permission android:name="android.permission.BLUETOOTH_PRIVILEGED" />

What changes or additional configuration are required to restore this functionality?

Headwinds reinstall failing

Wed, 28 Jan 2026 06:53:36 +0000

Morning,

I have been testing with headwinds for a little now and we are quite happy, I am getting an issue however on my lenovo TB310XU and TB311XU.

When I factory reset them and then try to enroll them again using the QR code it either gets stuck at "Just a Sec" before any downloading or initializing of the work profile happens or if I go through the normal installer until I connect the wifi then go back to the starting page to open up the QR code, the content downloads but then I get stuck on "Getting Ready for work setup".

If I enroll a device that has never been enrolled onto HMDM before then I have no issue installing the MDM but if it is a device that was previously enrolled I am having an issue. I have tried to factory reset using the debug menu built into the tablet and via settings but not luck...