Glossary

Glossary

ADB — Android Debug Bridge, the command-line tool to talk to a device/emulator over USB or TCP.

AVD — Android Virtual Device, an emulator configuration. See Testing with an Emulator.

Device Admin — a limited management mode a user can grant an app. CORE MDM uses it for Lock/Wipe/Alarm. See Device Owner Setup.

Device Owner (DO) — the highest management mode, set on an account-free device. Unlocks the full policy set.

DPM / DevicePolicyManager — the Android system service that enforces device policies. DevicePolicyHelper wraps it.

Enrollment — the device registering itself in Firestore under an owner. See Enrollment and Provisioning.

Enrollment token — a 32-char one-time secret used to claim/provision a pre-registered device.

Firestore — Firebase's real-time NoSQL database; the single source of truth and the command transport. See Firestore Data Model.

Hardware ID — the stable per-device identifier (IMEI → serial → Android ID), used as the device's Firestore document ID.

Kiosk / lock-task mode — restricting the device to a set of allowed apps. See Kiosk Mode.

Lockdown (full) — a command that turns on a bundle of restrictions at once. See Commands and Command Queue.

Policy — a persistent policies.<key> field the device converges to. See Policies Reference.

Command — a one-shot action (lock/reboot/wipe/lockdown) in the commands subcollection, queued and cancellable.

Owner / ownerId — the admin UID a device belongs to; scopes what each admin sees.

deviceUid — the UID the device itself signed in as; lets the device update its own record under the rules.

Super-admin — the single email in isSuperAdmin() with full read and admin tools. See Security Rules.

Always-on VPN — an Android feature where a VPN auto-starts and persists; CORE MDM uses it (as DO) to run the content filter without a consent tap. See Content Filter and DNS.

Private DNS — system-level DNS-over-TLS to a chosen host; CORE MDM can enforce and lock it.

Signing key — the certificate an APK is signed with. The same key is required to update in place and for Google Sign-In. See Releases and Signing.

Foreground service — MdmCommandService, kept alive with a persistent notification so it can hold the Firestore listeners.