{"package_name":"com.google.android.apps.work.oobconfig","label":"Device setup","device_count":22,"observation_count":61,"user_facing_count":0,"first_seen":"2025-05-04T16:17:28Z","last_seen":"2026-11-01T22:09:43Z","guidance":{"summary":"\"Device setup\", a Google system app. On Pixel phones it implements carrier SIM locking: independent security research describes it querying Google's servers after the device connects to Wi-Fi during setup to learn whether the device should be SIM locked, caching that state, and allowing or denying new SIM and eSIM installs accordingly. Our sample records it mostly on Pixels but also on a handful of other makes (CipherLab, HMD Global, Lenovo, realme, Sony, TCL and others) at API 27 to API 30. Where this site holds signer data, which is for the Google and HMD Global devices, it is Google-signed. Its role on the non-Pixel devices could not be sourced.\n\nAn AOSP PackageManagerService change from September 2022, \"forbid deletion of protected packages\", uses this exact package as its test case: before the change it could be removed with \"pm uninstall --user 0\", and after it the removal fails. The Pixel-focused research above reports that on Pixels it can no longer be disabled from Settings or over ADB either, only with root.\n\nVersion note: that protection landed in AOSP in September 2022; which Android release first shipped it could not be sourced, and the non-Pixel observations here (API 27 to API 30) predate it, so whether they are protected, and what the app does on them, could not be established. The \"work\" and \"oobconfig\" parts of the package name suggest an out-of-box enterprise configuration role, but no Google source connecting it to zero-touch enrolment was found, so that should not be assumed.\n\nFor Android Enterprise, EMM and kiosk fleets, no documented reason to disable it was found. On Pixels it enforces the carrier SIM-lock state and the platform blocks its removal, so leave it in place; on other makes, test before touching it given its unsourced role there.","safe_to_disable":"caution","sources":[{"title":"[pm] forbid deletion of protected packages - platform/frameworks/base commit","url":"https://android.googlesource.com/platform/frameworks/base/+/2e42c393f2d5521d20acd9281d411a0fbc6196c3"},{"title":"Bypassing SIM Lock on Pixels - Alex Wang's Blog","url":"https://blog.alexwang.net/bypassing-sim-lock-on-pixels/"},{"title":"Package provenance for com.google.android.apps.work.oobconfig - Android System App Database","url":"https://sysapps.bayton.org/api/packages/com.google.android.apps.work.oobconfig"}],"last_verified":"2026-09-27T00:00:00Z"},"labels":[{"label":"Device setup","locale":"en-us","count":36},{"label":"Apparaatinstallatie","locale":"nl-NL","count":27},{"label":"Device setup","locale":"en","count":21},{"label":"Device setup","locale":"en-gb","count":13},{"label":"Device setup","locale":"en-GB","count":5},{"label":"Apparaatinstallatie","locale":"nl-nl","count":3},{"label":"Device setup","locale":"","count":3},{"label":"Ajustes del dispositivo","locale":"es-es","count":1},{"label":"Device setup","locale":"en-au","count":1},{"label":"Device setup","locale":"en-ca-u-fw-mon-mu-celsius","count":1},{"label":"Device setup","locale":"en-de","count":1},{"label":"Device setup","locale":"en-us-u-fw-mon-ms-ussystem-mu-fahrenhe","count":1}],"seen_on_pagination":{"paging_mode":"complete","limit":22,"offset":0,"has_more":false,"next_offset":null,"after":null,"next_after":null,"total":22},"seen_on":[{"device_id":159,"make":"CipherLab","model":"RK95","os_api":"28","observation_count":3,"user_facing_count":0,"last_seen":"2025-09-25T07:33:44Z"},{"device_id":325,"make":"Google","model":"Pixel 10 Pro","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-03-26T19:19:08Z","provenance":{"classification":"google","sha256":"7ce83c1b71f3d572fed04c8d40c5cb10ff75e6d87d9df6fbd53f0468c2905053"}},{"device_id":358,"make":"Google","model":"Pixel 10 Pro","os_api":"37","observation_count":1,"user_facing_count":0,"last_seen":"2026-11-01T22:09:43Z","provenance":{"classification":"google","sha256":"f0fd6c5b410f25cb25c3b53346c8972fae30f8ee7411df910480ad6b2d60db83"}},{"device_id":63,"make":"Google","model":"Pixel 6","os_api":"31","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-22T21:31:08Z"},{"device_id":203,"make":"Google","model":"Pixel 6","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2025-10-13T09:58:56Z"},{"device_id":9,"make":"Google","model":"Pixel 6 Pro","os_api":"35","observation_count":9,"user_facing_count":0,"last_seen":"2025-06-23T14:09:38Z"},{"device_id":313,"make":"Google","model":"Pixel 7","os_api":"33","observation_count":1,"user_facing_count":0,"last_seen":"2026-02-19T22:30:10Z","provenance":{"classification":"google","sha256":"7ce83c1b71f3d572fed04c8d40c5cb10ff75e6d87d9df6fbd53f0468c2905053"}},{"device_id":318,"make":"Google","model":"Pixel 7 Pro","os_api":"36","observation_count":1,"user_facing_count":0,"last_seen":"2026-03-09T09:38:09Z","provenance":{"classification":"google","sha256":"7ce83c1b71f3d572fed04c8d40c5cb10ff75e6d87d9df6fbd53f0468c2905053"}},{"device_id":93,"make":"Google","model":"Pixel 8","os_api":"36","observation_count":4,"user_facing_count":0,"last_seen":"2026-06-03T19:01:11Z"},{"device_id":198,"make":"Google","model":"Pixel 8a","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-10-05T18:31:57Z"},{"device_id":6,"make":"Google","model":"Pixel 9 Pro XL","os_api":"36","observation_count":21,"user_facing_count":0,"last_seen":"2026-03-29T03:46:05Z","provenance":{"classification":"google","sha256":"7ce83c1b71f3d572fed04c8d40c5cb10ff75e6d87d9df6fbd53f0468c2905053"}},{"device_id":348,"make":"Google","model":"Pixel 9 Pro XL","os_api":"37","observation_count":2,"user_facing_count":0,"last_seen":"2026-10-26T00:10:46Z","provenance":{"classification":"google","sha256":"f0fd6c5b410f25cb25c3b53346c8972fae30f8ee7411df910480ad6b2d60db83"}},{"device_id":47,"make":"Google","model":"Pixel 9a","os_api":"35","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-15T16:13:40Z"},{"device_id":108,"make":"Google","model":"Pixel 9a","os_api":"36","observation_count":6,"user_facing_count":0,"last_seen":"2026-06-02T15:57:40Z","provenance":{"classification":"google","sha256":"f0fd6c5b410f25cb25c3b53346c8972fae30f8ee7411df910480ad6b2d60db83"}},{"device_id":3574,"make":"Google","model":"Pixel 9a","os_api":"37","observation_count":1,"user_facing_count":0,"last_seen":"2026-07-16T23:51:20Z"},{"device_id":277,"make":"HMD Global","model":"Nokia 8.3 5G","os_api":"29","observation_count":1,"user_facing_count":0,"last_seen":"2025-12-25T19:50:30Z","provenance":{"classification":"google","sha256":"f0fd6c5b410f25cb25c3b53346c8972fae30f8ee7411df910480ad6b2d60db83"}},{"device_id":106,"make":"LENOVO","model":"Lenovo TB-7306F","os_api":"30","observation_count":1,"user_facing_count":0,"last_seen":"2025-07-19T15:27:54Z"},{"device_id":148,"make":"realme","model":"RMX2001","os_api":"30","observation_count":1,"user_facing_count":0,"last_seen":"2025-08-21T05:31:41Z"},{"device_id":98,"make":"RHINO","model":"C10","os_api":"29","observation_count":1,"user_facing_count":0,"last_seen":"2025-07-14T09:44:15Z"},{"device_id":126,"make":"SMT_HK","model":"YUMPINGO_1","os_api":"28","observation_count":1,"user_facing_count":0,"last_seen":"2025-08-09T20:31:03Z"},{"device_id":52,"make":"Sony","model":"I3312","os_api":"27","observation_count":1,"user_facing_count":0,"last_seen":"2025-06-17T13:25:35Z"},{"device_id":182,"make":"TCL","model":"6025D_EEA","os_api":"30","observation_count":1,"user_facing_count":0,"last_seen":"2025-09-17T05:43:21Z"}],"intelligence":{"insights":["Signed by Google's own signing key (the same key Google uses across devices), so it is a Google-provided preinstall that updates independently of the system image, though 2 different Google signing keys appear across the fleet. This certificate spans 12 device makes - the hallmark of a globally distributed Google key.","Its largest observed manifest declares 18 permissions: 1 runtime (user-granted), 7 signature or system-level, 7 install-time and 3 vendor or uncatalogued.","APK size ranges from 2.0 MB to 12.2 MB across the reporting device profiles, so the build differs substantially between them.","Never reported as user-facing, so it runs as a background or system component rather than an app the user opens."],"device_profiles":9,"signer_count":2,"signer_consistent":false,"max_permission_count":18,"min_size_bytes":2055788,"max_size_bytes":12748926,"min_target_sdk":28,"max_target_sdk":37,"oldest_version":"1.0.450944095","newest_version":"1.0.909815892","has_third_party_preinstall":false,"genuine_third_party":false,"play_eligible_count":0,"signers":[{"sha256":"7ce83c1b71f3d572fed04c8d40c5cb10ff75e6d87d9df6fbd53f0468c2905053","classification":"google","observation_count":26,"makes":["Google"],"signs_framework":false,"global_make_count":12,"global_package_count":14,"global_observation_count":514},{"sha256":"f0fd6c5b410f25cb25c3b53346c8972fae30f8ee7411df910480ad6b2d60db83","classification":"google","observation_count":26,"makes":["Google","HMD Global"],"signs_framework":false,"global_make_count":29,"global_package_count":30,"global_observation_count":1922}],"permissions":[{"permission":"android.permission.ACCESS_LOCAL_NETWORK","official":false},{"permission":"android.permission.ACCESS_NETWORK_STATE","description":"Allows the app to view information about network connections such as which networks exist and are connected.","official":true},{"permission":"android.permission.CHANGE_NETWORK_STATE","description":"Allows the app to change the state of network connectivity.","official":true},{"permission":"android.permission.CONNECTIVITY_INTERNAL","description":"Signature or privileged system permission.","official":false},{"permission":"android.permission.CONNECTIVITY_USE_RESTRICTED_NETWORKS","description":"Signature or privileged system permission.","official":false},{"permission":"android.permission.FOREGROUND_SERVICE","description":"Allows the app to make use of foreground services.","official":true},{"permission":"android.permission.FOREGROUND_SERVICE_DATA_SYNC","description":"Allows the app to make use of foreground services with the type \"dataSync\"","official":true},{"permission":"android.permission.INTERNET","description":"Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.","official":true},{"permission":"android.permission.MANAGE_CARRIER_OEM_UNLOCK_STATE","description":"Signature or privileged system permission.","official":false},{"permission":"android.permission.MANAGE_USERS","description":"Signature or privileged system permission.","official":false},{"permission":"android.permission.MODIFY_PHONE_STATE","description":"Signature or privileged system permission.","official":false},{"permission":"android.permission.POST_NOTIFICATIONS","description":"Allows the app to show notifications","official":true},{"permission":"android.permission.READ_PRIVILEGED_PHONE_STATE","description":"Signature or privileged system permission.","official":false,"doc":{"title":"User Data Identifiers","url":"https://developer.android.com/identity/user-data-ids"}},{"permission":"android.permission.RECEIVE_BOOT_COMPLETED","description":"Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.","official":true},{"permission":"android.permission.USE_LOOPBACK_INTERFACE","official":false},{"permission":"android.permission.WAKE_LOCK","description":"Allows the app to prevent the phone from going to sleep.","official":true},{"permission":"android.permission.WRITE_SECURE_SETTINGS","description":"Signature or privileged system permission.","official":false},{"permission":"com.google.android.providers.gsf.permission.READ_GSERVICES","official":false}]},"previews":{"labels":{"kind":"preview","limit":60,"total":12,"truncated":false,"collection_url":"/api/packages/com.google.android.apps.work.oobconfig/labels"}},"collections":{"labels":"/api/packages/com.google.android.apps.work.oobconfig/labels","seen_on":"/api/packages/com.google.android.apps.work.oobconfig/seen_on"}}