Offline device lock

Set an offline device lock

Set an offline lock that automatically locks a device when it’s been offline for a given period of time.

A device can be rendered offline when the user does not purposely connect to a network. When this occurs, the device is not receiving its policy from its dedicated Knox Guard server. Once an offline device is locked, the device user is required to contact their carrier to restore functionality. The device user must share the challenge code on their device’s lock screen (generated when the device was locked), and then the admin provides a PIN to the device user to enter on their device to restore its functionality.

To set an offline device lock:

1. Select Policies from the left-hand navigation menu.

2. Select OFFLINE LOCK from the DEVICE Lock field.

3. Enable Turn on Offline Device Lock to automatically lock specific devices that are offline for a defined period of time.

   

4. Set a number of days between 3 — 200 to Specify how long to wait before locking an offline device.

5. Set a 200 character maximum Warning notification displayed to the device user before the offline device is locked. This notification displays as a full screen message.

6. Determine the number of days before the device lock warning message is sent out. This provides the device owner an opportunity to restore their offline device and connect to the Knox Guard server before their device is locked. Once the user connects to a network while receiving an offline error message, the Offline Lock Time will be reset to the original value configured by the admin.

7. Enter a 200 character maximum default Offline Device Lock warning message displayed when the device lock is enabled on the offline device. This is a pop-up message that can be dismissed by the device user prior to their device being locked. Since this message is for an offline lock, it should be set before the device is enrolled.

8. The Block incoming calls when device is locked checkbox lets an admin know if the device has been set in the Devices page to block incoming calls. Phone numbers added to the list allow the device to receive calls from these numbers when locked.

9. Enter the Phone number of the contact resource locked device users call for restoring their offline device unlocked. Special characters can be used if necessary.

10. Enter the E-mail address of the support contact resource locked device users contact.

11. Under the Advanced support methods review the additional support settings. These settings cannot be configured within the Offline policy and must be configured using the Default lock screen policy.

12. Primary support option is selectable. Choose from the drop-down menu to select a support email, phone, or app.

13. Select SAVE to commit the default offline device lock settings.

If you want to update this policy for select devices, see Update or disable offline lock policy