Java application administration on iDEN devices

If you need a Java ME application on a Motorola iDEN device to always be active, set it so that it cannot be deleted, or prevent the application permissions from being modified without permission, the newer Motorola iDEN devices have a set of features known as the Enterprise AMS that will be useful.

To take advantage of them, you'll need to follow the following steps:

  • Enter the "Java Apps" menu
  • Enter the following key sequence: *159#
  • You will be prompted for an administrator PIN. The first time this menu is invokes, the default PIN is '0000'. You will be prompted to create a new PIN in this case. This PIN is separate from any other PINs on the device.

Once you have created the new pin, you will see a menu of options:

Full-Time App
This defines an application that is always active, that cannot be ended (only suspended), and that is started up when the device is powered up. If you select this option, you will see a list of all of the installed MIDlets on the device and you will be able to select only one application from the list to be defined as a full-time application. To not set a Full-time app, or to reset the phone to default settings, select "-None-" from the list.
Permanent Apps
This defines an application that cannot be deleted from the device. If you select this menu option, you will see a list of all of the installed MIDlets on the device. You can select one or many applications that are prevented from being deleted on the device. To quickly select all the applications, select "-All-" from the menu. To quickly deselect all applications, select "-None-" from the menu.
Fixed Permissions
This allows you to define a set of Java Security Domain permissions that are fixed for an application. If you select this option, you will see a list of all the installed MIDlets on the device. The top option on this list is "[Edit Permissions]", which lists all of the protected Function Groups on the device. The following is an example of the list:

  • App Auto Invoke
  • Local Connect
  • Location
  • Mobile Media Record
  • Messaging
  • Network
  • Phone Call
  • Read User Data
  • System Control
  • Write User Data

Note that the actual permissions list will depend on the JSRs available on the device as well as the security domains policies for the device. The default function groups for Motorola iDEN devices can be found at http://programa.nii.com/en/node/266

Each of these function groups can be set to a default behavior:

User:
Follow the user's individual permissions choice for the MIDlet
Always:
the application always has permission
Ask:
The application will ask for permission every time
Never
The application does not have permission to access that function

Within the list of applications, you can select one or many applications to which the set of fixed permissions defined above will apply.

Overview
This provides a summary of all of the Enterprise AMS configurations
Change PIN
This allows you to change the PIN used to enter the Enterprise AMS
Info/Help
This provides a set of help screens providing the explanations above.

Your settings become final upon exiting the AMS.

This feature is available on all Motorola iDEN that include the "Administrator Control of MIDlets" feature, including i605, i615, i880, i870, i885, i876, i290 and i335 handsets.