- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Introduction
- Get started
- Features
- License management
- Release notes
- Troubleshoot
- Wearables
- Shared Device
- FAQ
- KBAs
- Mobile
- Knox Capture
- Welcome
- Overview
- How-to guides
- Manage licenses
- Scanning profiles
- Apps and activities
- Scan engine settings
- Keystroke output and data formatting
- Export configuration and deploy through EMM
- Set the camera scan trigger
- Connect a hardware scanner
- Configure the output path
- Check a configuration in test mode
- Use intent output
- Knox Capture AR
- Get started
- How-to videos
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Capture: Scandit Edition
- Introduction
- How it works
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
Enable and Disable SIM control
Knox Guard devices in any state except 'rejected' state can be controlled for their SIM operation individually, collectively, or in bulk. The solution provides features like locking a device when needed, applying usability restrictions for voice, text and data usage, and applying international roaming restrictions.
For information on setting default values for SIM control, see SIM control.
Enable SIM control
Devices with a dual SIM card configuration can use restricted features as long as one of the SIM cards is allowed. To enable this behavior, use the Minimum restriction setting in the SIM control policy. If both SIM cards are blocked, they are restricted according to the control policy, as before.
To control selected device SIMs:
- Select one or more device checkboxes from the Devices page.
- Select the ACTIONS drop-down menu from the Devices page and select Manage policy > Enable SIM control.
-
Settings which are applied in 'Policies' will show here. To edit these settings, go to Policies > SIM CONTROL.
If the 'Lock device' checkbox is selected, 'Locked devices' messaging is shown. If voice calls, SMS/MMS/RCS, or data usage is disabled, 'Restricted actions notification' messaging is shown. This information is read-only; messaging must be edited within Policies.
Refer to the MCC and MNC fields to assess whether a default Mobility Country Code (MCC) and Mobile Network Code (MNC) tuple was applied to uniquely identify the selected device's mobile network carrier to exclude it from SIM control. Each mobile device carrier has their own unique MCC and MNC tuple. To revise the default MCC and MNC tuple, see SIM control.
Refer to the Mobile Number Lock field to enable or disable IMSI policies regardless of whether MCC/MNC information is provided.
- Hit the CONFIRM button to proceed with SIM control. A message displays near the top of the screen stating 'SIM control will be enabled on x device(s)'. This may take some time depending on the device's network.
- Once applied, a SIM control icon
is shown next to the device's Device ID. Devices can also be filtered for this setting from the drop-down. Clicking this icon will show a pop-up with all the SIM control policies applied to the respective device.
Disable SIM control
SIM control can be disabled with Knox Guard when needed as mobile device ownership is changed or a new subscription plan applied. SIM control can be disabled either individually, collectively, or in bulk.
- Invoke the ACTIONS drop-down menu from the top right-hand side of the Devices page and select Manage device > Disable SIM control.
- The Disable SIM control screen prompts whether the selected devices are to be disabled. Select CONFIRM to proceed. A notification message displays on the top portion of the Devices screen stating the selected devices have their SIM control disabled.
Enable SIM control in bulk
A standardized CSV template is available to select devices in bulk using their IMEIs. The maximum number of devices that can be selected in one CSV bulk upload is 10,000.
To bulk enable devices:
- Select BULK ACTIONS.
- Select the Download CSV template link from the top portion of the screen.
NOTE — For more information on how to create a properly formatted CSV file for bulk device acceptance, select Instructions for all bulk actions from the bottom left-hand side of the Bulk actions screen.
- Select the ENABLE SIM CONTROL portion of the Bulk actions screen and add the properly formatted CSV file into the Enable SIM control screen.
- Select the CONFIRM button to accept the devices. A message displays near the top of the screen stating 'x' devices have been accepted and the activation of policies might take some time based on the device's network.
Disable SIM control in bulk
A standardized CSV template is available to select devices in bulk using their IMEIs. The maximum number of devices that can be selected in one CSV bulk upload is 10,000.
To bulk enable devices:
- Select BULK ACTIONS.
- Click the Download CSV template link.
NOTE — For more information on how to create a properly formatted CSV file for bulk device acceptance, select Instructions for all bulk actions from the bottom left-hand side of the Bulk actions screen.
- Select the DISABLE SIM CONTROL portion of the Bulk actions screen and add the properly formatted CSV file into the Disable SIM control screen.
- Select CONFIRM to proceed.