[General Questions and Answers] Cody5000:
Hello,

I have an issue with my personal phone, the Tmobile LG Aristo, being enrolled and supervised by an unknown MDM management agent (I don't know which one or who put it there). I will post the instances in the bugreport that show up when I search for "MDM" below and please let me know if there's more information I can provide. Here are some questions and observations:

Wiping the phone doesn't fix the problem and there's nothing stated anywhere that the phone is being managed so no obvious certificate to delete nor an app.

Also, do the trust certificates have anything to do with this and if I disabled the correct one(s) it would then remove the software?

I know Apple has Apple Configurator to do enroll/unenroll management software from iOS devices. Does Android have a tool like Apple Configurator that I need to use?

Thanks very much and I know very little about this problem so sorry if I left out anything important.

Places in the bug report where "MDM" shows up:

u:r:system_server:s0 system 1683 1349 1365492 114324 20 0 0 0 fg SyS_epoll_ 00000000 S LGMDMUIApplicat

u:r:system_server:s0 system 1768 1349 1365492 114324 20 0 0 0 fg SyS_epoll_ 00000000 S LGMDMPostRunnab

u:r:system_server:s0 system 1769 1349 1365492 114324 20 0 0 0 fg SyS_epoll_ 00000000 S LGMDMDevicePoli

u:r:system_server:s0 system 1770 1349 1365492 114324 20 0 0 0 fg SyS_epoll_ 00000000 S LGMDMDevicePoli

u:r:system_server:s0 system 1772 1349 1365492 114324 20 0 0 0 fg SyS_epoll_ 00000000 S LGMDMExternalMe

u:r:system_server:s0 system 1774 1349 1365492 114324 20 0 0 0 fg SyS_epoll_ 00000000 S LGMDMPermission

u:r:system_server:s0 system 3277 1349 1365492 114332 20 0 0 0 fg SyS_epoll_ 00000000 S LGMDMUIApplicat

u:r:platform_app:s0 u0_a91 2220 1842 1327444 95752 20 0 0 0 fg SyS_epoll_ 00000000 S LGMDMUILockScre

u:r:platform_app:s0 u0_a91 2745 1842 1327444 95752 20 0 0 0 fg SyS_epoll_ 00000000 S LGMDMUIApplicat

1683 LGMDMUIApplicat SyS_epoll_wait

1768 LGMDMPostRunnab SyS_epoll_wait

1769 LGMDMDevicePoli SyS_epoll_wait

1770 LGMDMDevicePoli SyS_epoll_wait

1772 LGMDMExternalMe SyS_epoll_wait

1774 LGMDMPermission SyS_epoll_wait

3277 LGMDMUIApplicat SyS_epoll_wait

2220 LGMDMUILockScre SyS_epoll_wait

2745 LGMDMUIApplicat SyS_epoll_wait

11-26 21:45:32.925 1349 1349 W PackageManager: Unknown permission com.sec.enterprise.knox.MDM_CONTENT_PROVIDER in package com.android.chrome

11-26 21:45:34.785 1349 1695 W PackageManager: Unknown permission com.sec.enterprise.knox.MDM_CONTENT_PROVIDER in package com.android.chrome

11-26 21:45:35.148 1349 1349 W ContextImpl: Calling a method in the system process without a qualified user: android.app.ContextImpl.bindService:1426 com.lge.mdm.controller.LGMDMVpnController.bindLGVpnService:486 com.lge.mdm.controller.LGMDMVpnController.isAuthentecVpn:463 com.lge.mdm.controller.LGMDMVpnController.<init>:68 com.lge.mdm.controller.LGMDMVpnController.getInstance:77

11-26 21:45:35.148 1349 1349 W ContextImpl: Calling a method in the system process without a qualified user: android.app.ContextImpl.bindService:1426 com.lge.mdm.controller.LGMDMVpnController.bindLGVpnService:486 com.lge.mdm.controller.LGMDMVpnController.isAuthentecVpn:463 com.lge.mdm.controller.LGMDMVpnController.<init>:68 com.lge.mdm.controller.LGMDMVpnController.getInstance:77

11-26 21:45:35.148 1349 1349 W ContextImpl: Calling a method in the system process without a qualified user: android.app.ContextImpl.bindService:1426 com.lge.mdm.controller.LGMDMVpnController.bindLGVpnService:486 com.lge.mdm.controller.LGMDMVpnController.isAuthentecVpn:463 com.lge.mdm.controller.LGMDMVpnController.<init>:68 com.lge.mdm.controller.LGMDMVpnController.getInstance:77

11-26 21:45:35.148 1349 1349 W ContextImpl: Calling a method in the system process without a qualified user: android.app.ContextImpl.bindService:1426 com.lge.mdm.controller.LGMDMVpnController.bindLGVpnService:486 com.lge.mdm.controller.LGMDMVpnController.isAuthentecVpn:463 com.lge.mdm.controller.LGMDMVpnController.<init>:68 com.lge.mdm.controller.LGMDMVpnController.getInstance:77

11-26 21:45:36.061 1349 1349 D AudioSystem: muteMicrophone [MDM policy:false], [state:false]

11-26 21:45:37.518 1349 1695 I MountService: MDM Ignoring mount emulated due to policy

11-26 21:45:37.572 1349 1695 I MountService: MDM Ignoring mount public:179,65 due to policy

11-26 21:45:39.408 1842 2179 V LGMDMManager: Create singleton instance

11-26 21:45:39.442 1842 2179 V LGMDMManagerInternal: Create singleton instance

11-26 21:45:39.563 1349 1404 W PackageManager: Unknown permission com.sec.enterprise.knox.MDM_CONTENT_PROVIDER in package com.android.chrome

11-26 21:45:40.460 2198 2210 V LGMDMManager: Create singleton instance

11-26 21:45:42.568 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:42.575 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:42.627 1904 1904 D wpa_supplicant: wlan0: [MDM] get_mdm_autoconn_policy : 0

11-26 21:45:42.627 1904 1904 D wpa_supplicant: wlan0: [MDM] reassociate : 1

11-26 21:45:42.627 1904 1904 D wpa_supplicant: wlan0: [MDM] lg mdm allow/disallow auto connect is not set!

11-26 21:45:42.629 1904 1904 D wpa_supplicant: wlan0: [MDM] get_mdm_autoconn_policy : 0

11-26 21:45:42.629 1904 1904 D wpa_supplicant: wlan0: [MDM] reassociate : 1

11-26 21:45:42.629 1904 1904 D wpa_supplicant: wlan0: [MDM] lg mdm allow/disallow auto connect is not set!

11-26 21:45:43.342 1349 1769 W ContextImpl: Calling a method in the system process without a qualified user: android.app.ContextImpl.bindService:1426 com.lge.android.atservice.client.LGATCMDClient.bindService:105 com.lge.mdm.controller.LGMDMATClientConnector.connectATService:42 com.lge.mdm.controller.LGMDMDeviceWipeController.connectATService:36 com.lge.mdm.controller.LGMDMDevicePolicyManagerService$1.onReceive:231

11-26 21:45:43.342 1349 1769 W ContextImpl: Calling a method in the system process without a qualified user: android.app.ContextImpl.bindService:1426 com.lge.android.atservice.client.LGATCMDClient.bindService:105 com.lge.mdm.controller.LGMDMATClientConnector.connectATService:42 com.lge.mdm.controller.LGMDMDeviceWipeController.connectATService:36 com.lge.mdm.controller.LGMDMDevicePolicyManagerService$1.onReceive:231

11-26 21:45:43.342 1349 1769 W ContextImpl: Calling a method in the system process without a qualified user: android.app.ContextImpl.bindService:1426 com.lge.android.atservice.client.LGATCMDClient.bindService:105 com.lge.mdm.controller.LGMDMATClientConnector.connectATService:42 com.lge.mdm.controller.LGMDMDeviceWipeController.connectATService:36 com.lge.mdm.controller.LGMDMDevicePolicyManagerService$1.onReceive:231

11-26 21:45:43.379 1349 1769 W ContextImpl: Calling a method in the system process without a qualified user: android.app.ContextImpl.bindService:1426 com.lge.android.atservice.client.LGATCMDClient.bindService:105 com.lge.mdm.controller.LGMDMATClientConnector.connectATService:42 com.lge.mdm.controller.LGMDMDownloadModeController.connectATService:35 com.lge.mdm.controller.LGMDMDevicePolicyManagerService$1.onReceive:232

11-26 21:45:43.379 1349 1769 W ContextImpl: Calling a method in the system process without a qualified user: android.app.ContextImpl.bindService:1426 com.lge.android.atservice.client.LGATCMDClient.bindService:105 com.lge.mdm.controller.LGMDMATClientConnector.connectATService:42 com.lge.mdm.controller.LGMDMDownloadModeController.connectATService:35 com.lge.mdm.controller.LGMDMDevicePolicyManagerService$1.onReceive:232

11-26 21:45:43.379 1349 1769 W ContextImpl: Calling a method in the system process without a qualified user: android.app.ContextImpl.bindService:1426 com.lge.android.atservice.client.LGATCMDClient.bindService:105 com.lge.mdm.controller.LGMDMATClientConnector.connectATService:42 com.lge.mdm.controller.LGMDMDownloadModeController.connectATService:35 com.lge.mdm.controller.LGMDMDevicePolicyManagerService$1.onReceive:232

11-26 21:45:43.688 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:43.698 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:44.430 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:44.432 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:44.432 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:44.439 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:44.440 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:44.455 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:44.455 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:44.493 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:46.025 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:46.100 1842 1842 D EmergencyButton: MDM updateEmergencyCallButton() - isLockoutMode: false

11-26 21:45:47.030 2836 2836 I MDM__DMClient: Process started

11-26 21:45:47.394 1904 1904 D wpa_supplicant: wlan0: [MDM] get_mdm_autoconn_policy : 0

11-26 21:45:47.394 1904 1904 D wpa_supplicant: wlan0: [MDM] reassociate : 1

11-26 21:45:47.394 1904 1904 D wpa_supplicant: wlan0: [MDM] lg mdm allow/disallow auto connect is not set!

11-26 21:45:47.395 1904 1904 D wpa_supplicant: wlan0: [MDM] get_mdm_autoconn_policy : 0

11-26 21:45:47.395 1904 1904 D wpa_supplicant: wlan0: [MDM] reassociate : 1

11-26 21:45:47.395 1904 1904 D wpa_supplicant: wlan0: [MDM] lg mdm allow/disallow auto connect is not set!

11-26 21:45:55.577 2766 2766 V LGMDMManagerInternal: Create singleton instance

11-26 21:45:57.338 1904 1904 D wpa_supplicant: wlan0: [MDM] get_mdm_autoconn_policy : 0

11-26 21:45:57.338 1904 1904 D wpa_supplicant: wlan0: [MDM] reassociate : 1

11-26 21:45:57.338 1904 1904 D wpa_supplicant: wlan0: [MDM] lg mdm allow/disallow auto connect is not set!

11-26 21:46:00.545 3373 3373 V LGMDMManager: Create singleton instance

11-26 21:46:11.163 3373 3373 V LGMDMManagerInternal: Create singleton instance

11-26 21:46:22.862 3373 3373 I LGMDMSettings: UserHandle is : 0

11-26 21:46:22.866 3373 3373 I LGMDMSettings: isDpmMaximunTimeToLock`s value is : 0

11-26 21:46:45.966 2899 5207 E MDM : [329] xet.run: Couldn't connect to Google API client: krr{statusCode=API_UNAVAILABLE, resolution=null, message=null}

11-26 21:46:55.238 5429 5441 V LGMDMManagerInternal: Create singleton instance

11-26 21:47:00.282 6023 6023 V LGMDMManager: Create singleton instance

11-26 21:47:09.268 6455 6455 I MDM__DMClient: Process started

11-26 21:47:09.998 6472 6472 I MDM__DMClient: Process started

"LGMDMUIApplicationAdapter" prio=5 tid=35 Native

"LGMDMPostRunnable" prio=5 tid=32 Native

"LGMDMDevicePolicyManagerServiceReceiver" prio=5 tid=40 Native

"LGMDMDevicePolicyManagerService" prio=5 tid=41 Native

"LGMDMExternalMemorySlotContoller" prio=5 tid=43 Native

"LGMDMPermissionController" prio=5 tid=45 Native

"LGMDMUIApplicationAdapter" prio=5 tid=113 Native

"LGMDMUILockScreenAdapter" prio=5 tid=44 Native

"LGMDMUIApplicationAdapter" prio=5 tid=60 Native

Action: "com.lge.mdm.intent.action.LGMDM_LOCK_OUT"

com.lge.mdm.intent.action.LGMDM_LOCK_OUT:

Current LGMDM Device Policy Manager state:

com.google.android.gms.mdm.MDM_SETTINGS_ACTIVITY:

com.google.android.gms.mdm.MDM_LOCKSCREEN_ACTIVITY:

8332180 com.lge.email/.policy.mdm.MDMConfigReceiver

8332180 com.lge.email/.policy.mdm.MDMConfigReceiver

5d7199e com.android.settings/.lgmdm.LGMDMBroadcastReceiver

8332180 com.lge.email/.policy.mdm.MDMConfigReceiver

3LM_MDM_ACTIVATED:

8332180 com.lge.email/.policy.mdm.MDMConfigReceiver

8332180 com.lge.email/.policy.mdm.MDMConfigReceiver

3LM_MDM_DEACTIVATED:

8332180 com.lge.email/.policy.mdm.MDMConfigReceiver

8332180 com.lge.email/.policy.mdm.MDMConfigReceiver

8332180 com.lge.email/.policy.mdm.MDMConfigReceiver

Permission [com.lge.email.permission.MDM_EMAIL_ACCOUNT] (133a7a9):

perm=Permission{5ca112e com.lge.email.permission.MDM_EMAIL_ACCOUNT}

com.lge.email.permission.MDM_EMAIL_ACCOUNT: prot=signature|privileged, INSTALLED

com.lge.email.permission.MDM_EMAIL_ACCOUNT: granted=true