How to Deploy Qtrac Kiosk URLs on iPads Using Workspace ONE (AirWatch) How to Deploy Qtrac Kiosk URLs on iPads Using Workspace ONE (AirWatch)

How to Deploy Qtrac Kiosk URLs on iPads Using Workspace ONE (AirWatch)

Alek Alek

Hello,

Thank you for visiting our Qtrac Knowledge Base library. We hope the below article will assist you. Based on your search inquiry, it looks like you are trying to deploy Qtrac Kiosk URLs on IPads using Workspace ONE formerly known as AirWatch. 

Generic Ipad Cover.png

Audience

Customer IT Administrators using VMware Workspace ONE to manage supervised iPads.

Purpose

This article explains how to deploy Qtrac Kiosk URLs to individual iPads at individual locations, locking each iPad into Kiosk Mode so that:

  • Only the Qtrac kiosk URL is accessible

  • Users cannot exit the browser

  • Camera, settings, and other apps are fully blocked

  • The kiosk auto-launches on reboot

Qtrac does not require access to your Workspace ONE environment.

Supported Architecture (Recommended)

We recommend one of the following Apple-approved kiosk approaches:

Option Description Recommendation
Web Clip + Single App Mode Full-screen web app locked to one URL Best for single URL per device
Workspace ONE Web + Single App Mode Managed kiosk browser with URL restrictions Enterprise alternative
Chrome on iOS Possible but limited kiosk controls ❌ Not recommended

Note: On iPadOS, all browsers (including Chrome) use Apple WebKit. Workspace ONE provides the strongest kiosk controls using Web Clips or Workspace ONE Web.

Screenshots in this article are illustrative only. Workspace ONE UEM screens, menu paths, and options may vary based on UEM version, deployment model, and tenant configuration.

Prerequisites

Before starting, ensure:

  • iPads are Supervised and enrolled in Workspace ONE

  • Devices appear in the correct Organization Group

  • You have received a Qtrac Excel file containing:

    Location Name Device Serial or Asset Tag Qtrac Kiosk URL
    Valencia 9260490 https://app.qtrac.com/Clone-Kiosk/123456789

Option A (Recommended): Web Clip + Single App Mode

This option creates a full-screen Qtrac web app and locks the iPad so nothing else is accessible.

Workspace ONE UEM architecture | Omnissa

Step 1: Create a Smart Group per Location

Smart Groups ensure the correct URL goes to the correct iPad.

  1. Navigate to
    Groups & Settings → Groups → Smart Groups

  2. Click Add Smart Group

How to Turn Dumb Groups into Smart Groups with the Workspace ...
Managing invalid Smart Groups in UEM (6000174)

3. Configure:

  • Name: SG – Qtrac – <Location Name>

  • Criteria: Device Serial Number, Asset Tag, or Tag

4. Save

Step 2: Create the Web Clip Profile

  1. Go to Profiles (path varies by console):

    1. Devices → Profiles / Devices → Profiles & Resources → Profiles, OR kb.omnissa.com

    2. Resources → Profiles & Baselines → Profiles Omnissa Documentation

  2. Add Profile → Platform: Apple iOS (or iOS/iPadOS).

  3. In the payload list, select Web Clips.

  4. Configure Web Clip:

    1. Label/Name: Qtrac Kiosk – <Location>

    2. URL: <location-specific Qtrac URL>

    3. Removable: False / Disabled

    4. Full Screen: Enabled (if option exists)

    5. Icon: optional

  5. Save & Publish.

  6. Assign this profile to the Smart Group for that location.
    ✅ After this, the iPad has a managed Web Clip for that location.

Step 3: Create a Single App Mode (Kiosk) Profile

This locks the iPad to the Qtrac kiosk app.

  1. Navigate to
    Devices → Profiles & Resources → Profiles

  2. Click Add → Profile → iOS

Configure Single App Mode on iOS with VMware Workspace ONE UEM ...
Setting up iPad's for Field Workers using Workspace ONE – Many ...
  1. Configure:

    • Profile Name: Kiosk – Qtrac – <Location Name>

    • Add Single App Mode / Kiosk payload

    • Select Qtrac Web Clip as the kiosk app
      Alternative: lock to Workspace ONE Web (Option B below) if your console can’t target a web clip directly.

    • Enable Auto-launch
      (Optional) Set an exit passcode / admin-only exit method if the org requires a break-glass path (recommended for IT support).

  2. Save & Publish
    ✅ Device is now locked so the user can’t leave the kiosk target.

 

Step 4 (Not required but recommended): Apply Security Restrictions Profile

Although Single App Mode already locks the device, most customers also apply a Restrictions profile. This isn’t “required” for kiosk (Single App Mode already blocks leaving), but it’s commonly applied for defense-in-depth (control center, Siri on lock screen, etc.). Omnissa’s iOS profile framework supports deploying device restrictions. Omnissa Documentation+1

Suggested Restrictions

  • Disable Camera

  • Disable Siri

  • Disable Control Center

  • Disable Notifications

  • Disable App Store & iCloud

  • Disable AirDrop & Bluetooth settings

 
Enable Screen Time Feature for Workspace ONE iOS devices with ...
Block screen capture on Workspace ONE Productivity Apps – Content ...

Assign this profile to the same Smart Group.

 

Option B — Workspace ONE Web in Single-Tab Kiosk Mode (Best “browser” experience)

If the tenant wants a managed browser, Omnissa documents configuring Workspace ONE Web via UEM and supports kiosk behaviors. Omnissa Documentation+2Omnissa Documentation+2

High-level:

  1. Deploy Workspace ONE Web app

  2. Configure Kiosk Mode (single tab) and allowed URL/homepage in the Workspace ONE Web settings/app config VMware Blogs+1

  3. Put the iPad into Single App Mode locked to Workspace ONE Web kb.omnissa.com

Expected End-User Experience

  • iPad boots directly into Qtrac kiosk

  • No Home button, gestures, or multitasking

  • No access to Settings, Camera, or other apps

  • Browser cannot be closed or navigated elsewhere

  • Power cycle returns to kiosk automatically

 

FAQ

Can we use Google Chrome instead?

Chrome can be locked as a single app, but Workspace ONE cannot reliably enforce a single fixed URL with Chrome on iPadOS. For true kiosk behavior, use Web Clips or Workspace ONE Web.

Can Qtrac manage this for us?

No. Due to customer security policies, Qtrac does not require nor request Workspace ONE access. This guide allows your IT team to deploy independently.

Can URLs be changed later?

Yes. Updating the Web App URL and republishing will update the kiosk without touching the device.

 

Need Help?

If you have questions about:

  • URL formatting

  • Environment setup (Test vs Prod)

  • Validation after deployment

Please contact Qtrac Support and reference “iPad Kiosk Deployment via Workspace ONE.”