---
title: Security Policy
slug: dmg-android/guide/security-policy
createdAt: 2026-10-06T07:46:34.997Z
---

Security policies specify how Ivanti EPMM addresses several areas of mobile security. Ivanti, Inc recommends you create separate policies for each platform to avoid inconsistencies.

For more information on creating or editing a security policy, see "Security policies" in the Getting Started with Ivanti EPMM*.*

## Proactive password security policy

When certificates are applied to the device as certificate settings, certificate enrollment settings, or via a Wi-Fi configuration, Ivanti Mobile\@Work proactively applies a password policy that meets the Android OS certificate installation requirements.

With the proactive password policy, Ivanti Mobile\@Work prompts the user to create a screen lock for their device, even if Ivanti EPMM does not enforce a privacy policy.

:::hint{type="info"}
Ivanti Mobile\@Work hides managed applications when the device unlock passcode has expired.
:::

Before your device unlock passcode expires, Ivanti Mobile\@Work displays the following notification: **Your
 device unlock passcode will expire soon. Tap the notification to update your passcode and retain
 access to your work apps.**

After your device unlock passcode expires, Ivanti Mobile\@Work:

- Hides your managed work apps.
- Displays the following notification: **Your device unlock passcode has expired. Tap the
   notification to update your passcode and regain access to your work apps**.

## Password policy attributes

For all password policy attributes, Ivanti EPMM only displays "Unsupported" for Ivanti Mobile\@Work for Android 10.6 or supported newer versions. This Android 10 or above device needs to be in Device Admin (DA) mode. If the device is still using an old version of Ivanti Mobile\@Work , it will not report "Unsupported."

You can view this information in Devices & Users > Device > Device tab. "Unsupported" will display for the following password policy attributes:

- Password
- Password Type
- Minimum Password Length
- Maximum Password Age

Ivanti EPMM will not quarantine the device, the security policy will display as "Applied," and the device status will be compliant.

Ivanti EPMM will no longer consider Unsupported for the above password policy attributes as a policy violation if the device is Android 10 or above and in Device Admin mode.

Previously if the security policy was in violation, a compliance action could be triggered if one was set. Some compliance actions could be: Send an alert, Block email or Quarantine.

**Related topics** 

[Device log encryption on Android devices](docId\:jHxetCe9Z5VCeMZcR8ESb)