@ohos.enterprise.securityManager (Security Management) (System API)
The securityManager module provides device security management capabilities, including obtaining the security patch status and file system encryption status.
NOTE
The initial APIs of this module are supported since API version 11. Newly added APIs will be marked with a superscript to indicate their earliest API version.
The APIs of this module can be used only in the stage model.
The APIs provided by this module can be called only by a device administrator application that is enabled.
The APIs provided by this module are system APIs.
Modules to Import
import securityManager from '@ohos.enterprise.securityManager';
securityManager.getSecurityPatchTag
getSecurityPatchTag(admin: Want): string
Obtains the device security patch tag through the specified device administrator application. This API returns the result synchronously. If the operation is successful, the security patch tag is returned. If the operation fails, an exception is thrown.
Required permissions: ohos.permission.ENTERPRISE_MANAGE_SECURITY
System capability: SystemCapability.Customization.EnterpriseDeviceManager
System API: This is a system API.
Parameters
Name | Type | Mandatory | Description |
---|---|---|---|
admin | Want | Yes | Device administrator application. |
Return value
Type | Description |
---|---|
string | Patch tag obtained. |
Error codes
For details about the error codes, see Enterprise Device Management Error Codes.
ID | Error Message |
---|---|
9200001 | the application is not an administrator of the device. |
9200002 | the administrator application does not have permission to manage the device. |
Example
import Want from '@ohos.app.ability.Want';
let wantTemp: Want = {
bundleName: 'com.example.myapplication',
abilityName: 'EntryAbility',
};
try {
let res: string = securityManager.getSecurityPatchTag(wantTemp);
console.info(`Succeeded in getting security patch tag. tag: ${res}`);
} catch(err) {
console.error(`Failed to get security patch tag. Code: ${err.code}, message: ${err.message}`);
}
securityManager.getDeviceEncryptionStatus
getDeviceEncryptionStatus(admin: Want): DeviceEncryptionStatus
Obtains the file system encryption status of the device. This API returns the result synchronously. If the operation is successful, the file encryption status is returned. If the operation fails, an exception is thrown.
Required permissions: ohos.permission.ENTERPRISE_MANAGE_SECURITY
System capability: SystemCapability.Customization.EnterpriseDeviceManager
System API: This is a system API.
Parameters
Name | Type | Mandatory | Description |
---|---|---|---|
admin | Want | Yes | Device administrator application. |
Return value
Type | Description |
---|---|
DeviceEncryptionStatus | File system encryption status. Currently, only a boolean value indicating whether the file system is encrypted is returned. |
Error codes
For details about the error codes, see Enterprise Device Management Error Codes.
ID | Error Message |
---|---|
9200001 | the application is not an administrator of the device. |
9200002 | the administrator application does not have permission to manage the device. |
Example
import Want from '@ohos.app.ability.Want';
let wantTemp: Want = {
bundleName: 'com.example.myapplication',
abilityName: 'EntryAbility',
};
try {
let result: securityManager.DeviceEncryptionStatus = securityManager.getDeviceEncryptionStatus(wantTemp);
console.info(`Succeeded in getting device encryption status. isEncrypted: ${result.isEncrypted}`);
} catch(err) {
console.error(`Failed to get device encryption status. Code: ${err.code}, message: ${err.message}`);
}
DeviceEncryptionStatus
Represents the file system encryption status.
System capability: SystemCapability.Customization.EnterpriseDeviceManager
System API: This is a system API.
Name | Type | Mandatory | Description |
---|---|---|---|
isEncrypted | boolean | Yes | Whether the file system of the device is encrypted. The value true means the file system is encrypted; the value false means the opposite. |