Purpose
The System Settings Profile in SureMDM enables administrators to enforce policies that control the activation or deactivation of specific system settings on enrolled Linux devices. This helps maintain consistent security, connectivity, and operational configurations across managed devices.
Using the Linux System Settings profile, administrators can configure Wi-Fi, Bluetooth, clipboard restrictions, package management settings, lock screen messages, screen capture restrictions, and Bluetooth controls remotely through the SureMDM console.
Prerequisites
- Valid SureMDM account
- Linux devices enrolled in SureMDM
- Appropriate permissions to create and deploy profiles
- SureMDM Agent installed on the Linux devices
- Internet connectivity on the managed devices
Note
- Lock Screen Message feature is supported only on SureMDM Agent version 3.3.1 and later.
- Disable Screen Capture feature is supported only on SureMDM Agent version 3.6.2 and later.
- Bluetooth Controls feature is supported only on Linux devices with SureMDM Agent version 7.12.0 and above.
Steps
Create a Linux System Settings Profile
- Log in to the SureMDM Web Console.
- Navigate to:
Profiles → Linux → Add → System Settings → Configure - Enter a Profile Name.
- Configure the required System Settings from the following options.
System Settings Options
Wi-Fi Settings
Use this option to configure Wi-Fi as Always On or Always Off.
Disable Clipboard Settings
Use this option to disable clipboard functionality such as copy and paste operations.
Disable Bluetooth
Use this option to enable or disable Bluetooth functionality on the device.
Update Packages
Use this option to synchronize and refresh the package index files from their configured repositories.
- Refreshes the system metadata and package repository information.
- Checks online repositories for the latest package information.
- Updates the internal package database available for installation or upgrades.
- Does not install, upgrade, or remove any software from the device.
- This is a non-intrusive operation intended only to refresh package information.
Install Kernel Updates
Use this option to install incremental and safe updates to existing system packages and kernel components.
- Updates already installed applications and components.
- Applies only simple and low-risk updates.
- Skips packages that may require complex dependency changes or conflict resolution.
- Does not install additional software or remove existing applications.
- Helps maintain system stability and compatibility.
Upgrade Packages
Use this option to perform a complete system package upgrade.
- Installs all available package upgrades on the device.
- Handles complex upgrades that may require adding or removing packages.
- Performs major system-level updates, including kernel and core package updates.
- May modify certain system configurations if required for compatibility.
- Ensures the device is fully updated with the latest compatible software versions.
Force Wi-Fi Whitelisting
Use this option to restrict devices to connect only to networks configured through the Wi-Fi Configuration profile.
Enable Lock Screen Message
Use this option to display a custom message on the lock screen of the device.
Note
Supported only on SureMDM Agent version 3.3.1 and later.
Disable Screen Capture
Use this option to block screenshots and screen recording on the device.
Note
Supported only on SureMDM Agent version 3.6.2 and later.
Configure Bluetooth Controls
- Configure the required Bluetooth Control settings from the following options and click Save.
Enable Bluetooth Service
Toggle this option to enable or disable Bluetooth functionality on the device.
Bluetooth Permission
Choose one of the following options:
Allow
All Bluetooth devices will be blocked except the devices specified in allowed categories or allowlist devices.
Block
All Bluetooth devices will be allowed except the devices specified in blocked categories or blocklist devices.
Allowed Bluetooth Device Categories
(Available when Bluetooth Permission is set to Allow)
Select the categories of Bluetooth devices that should be permitted.
Supported categories include:
- Audio Devices (Bluetooth speakers, headphones)
- HSP – Headsets
- Hands-free Devices (Car kits, Bluetooth headsets)
- Networking Devices (Bluetooth tethering, modem access)
- OBEX/FTP Devices (File transfer devices)
- Serial Devices (GPS devices, serial communication)
- Messaging Devices (SMS messaging over Bluetooth)
- Imaging Devices (Bluetooth cameras, printers)
- Audio/Video Control Devices (Remote controls for music)
- Input Devices (Keyboard, mouse)
- Low Energy Devices (Fitness trackers, smartwatches)
- PBA – Personal Broadband Profile Devices
Allowlist Bluetooth Devices
(Available when Bluetooth Permission is set to Allow)
Specify the MAC addresses of Bluetooth devices that should always be allowed regardless of category restrictions.
Multiple MAC addresses can be added.
Blocked Bluetooth Device Categories
(Available when Bluetooth Permission is set to Block)
Select categories of Bluetooth devices that should be blocked while all others remain accessible.
Blocklist Bluetooth Devices
(Available when Bluetooth Permission is set to Block)
Specify MAC addresses of Bluetooth devices that should be explicitly blocked.
Notes
- If Bluetooth Permission is set to Allow, all Bluetooth devices will be blocked except devices included in the Allowed Bluetooth Device Categories or Allowlist Bluetooth Devices.
- If Bluetooth Permission is set to Block, all Bluetooth devices will be allowed except devices included in the Blocked Bluetooth Device Categories or Blocklist Bluetooth Devices.
- Bluetooth Controls feature is supported only on Linux devices running SureMDM Agent version 7.12.0 and later.
Deploy the Profile
- Go back to the Home tab and select the Linux device(s) or device group(s).
- Click Apply to launch the Apply Job/Profile To Device prompt.
- Select the created profile and click Apply.
Result
Once the profile is deployed successfully, the configured system settings and Bluetooth control policies will be applied to the selected Linux devices.
Conclusion
Using the Linux System Settings Profile in SureMDM allows administrators to centrally manage and enforce device-level configurations across Linux endpoints. This helps maintain security compliance, streamline device management, and ensure consistent operational policies throughout the organization.
Need more help? Here’s how to get help from our experts.