- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Knox Mobile Enrollment
- Knox Configure
- Introduction
- Get started
- How to guides
- Manage licenses
- Release notes
- Provide feedback
- Troubleshoot
- Wearables
- FAQ
- KBAs
- Knox Capture
- Welcome
- Overview
- How-to guides
- Manage licenses
- Scanning profiles
- Apps and activities
- Scan engine settings
- Keystroke output and data formatting
- Export configuration and deploy through EMM
- Set the camera scan trigger
- Connect a hardware scanner
- Configure the output path
- Check a configuration in test mode
- Use intent output
- Knox Capture AR
- Get started
- How-to videos
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Capture Scandit Edition
- Introduction
- How it works
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Complete device management
- Delete devices
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- Start and stop blinking reminder
- Lock and unlock devices
- Send relock timestamp
- Update or disable offline lock policy
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Knox Guard REST API
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
SIM control
Set a default SIM control configuration
Configure a default bundle of settings that restrict SIM functionality or lock the device. This default policy can be used consistently across deployments until more granular modifications are needed for specific deployment objectives. A maximum of five SIM control policies can be added. SIM cards that match the MCC/MNC codes entered in a SIM control policy can be used without restriction on devices that receive SIM control policies in the Devices menu. Any unlisted SIM cards can be configured to restrict some functionality as well as lock the device. For dual-SIM devices, restrictions only apply to the unlisted SIM card. Each mobile device carrier has their own unique MCC and MNC pair. You can list a maximum of 50 MCC/MNC pairs. For step-by-step instructions to apply this policy to selected user devices, see Enable and disable SIM control.
To set a default SIM control configuration for Knox Guard managed devices:
- Select Policies from the left-hand navigation menu.
- Select SIM CONTROL under the ADVANCED CONTROLS field.
- Enter the Policy name. It can't match an existing policy name.
- Fill the MCC and MNC fields for SIM control restriction exclusion.
- Set the following restrictions for the unlisted MCC/MNC:
- Make outgoing calls — Restricts the device's ability to make phone calls.
- Receive incoming calls — Restrcits the device's ability to recieve phone calls.
- Send or receive SMS/MMS/RCS — Restricts the device's ability to send and receive text messages.
- Data usage — Prevents apps on the device from consuming mobile data.
- Check the insert allowed SIM (Apply when the allowed SIM is inserted) — If the device is dual-SIM and an allowed SIM card is present, allows the other SIM to use restricted features. If this setting is selected, you can choose which features to allow for the other SIM.
- Apply the above restrictions when international roaming is in use — Restricts the device's phone, text and data usage when connecting to a mobile network in a country other than the device's original country of deployment. This setting applies to restricted SIMs in a dual-SIM device only.
- Lock device — Locks the device in order to prevent the usage of unlisted SIM cards.
- Mobile Number Lock — allows customers to enable or disable IMSI policies regardless of whether MCC/MNC information is provided
- Turn on network registration verification — Validates that a blocked SIM card is not being misused by verifying that the connected network matches the allowlisted networks (via MCC/MNC).
- Block incoming calls when device is locked — You can add phone numbers that are allowed to call.
- Allow PIN Code unlock — allows the SIM locked device to be unlocked using a PIN. See the How to unlock devices using pin code? KBA for instructions.
- Enter the contact information for your support services in the CUSTOMER SUPPORT OPTIONS section.
- The Advanced support methods section is also displayed on the SIM lock page but is centrally configured in Lock screen.
- (Optional) Click Primary support option to select the main support contact information. It is centrally configured in Lock screen.
- Select SAVE to commit the default SIM control settings.
Delete SIM control policy
To delete a SIM control policy:
- Go to Policies.
- Select SIM CONTROL in the ADVANCED CONTROLS section.
- Click the X next to the SIM control policy you want to delete.

This document was updated for Knox cloud services 23.06 UAT.
Set a default SIM control configuration
Configure a default bundle of settings that restrict SIM functionality or lock the device. This default policy can be used consistently across deployments until more granular modifications are needed for specific deployment objectives. A maximum of five SIM control policies can be added. SIM cards that match the MCC/MNC codes entered in a SIM control policy can be used without restriction on devices that receive SIM control policies in the Devices menu. Any unlisted SIM cards can be configured to restrict some functionality as well as lock the device. For dual-SIM devices, restrictions only apply to the unlisted SIM card. Each mobile device carrier has their own unique MCC and MNC pair. You can list a maximum of 50 MCC/MNC pairs. For step-by-step instructions to apply this policy to selected user devices, see Enable and disable SIM control.
To set a default SIM control configuration for Knox Guard managed devices:
- Select Policies from the left-hand navigation menu.
- Select SIM CONTROL under the ADVANCED CONTROLS field.
- Enter the Policy name. It can't match an existing policy name.
- Fill the MCC and MNC fields for SIM control restriction exclusion.
- Set the following restrictions for the unlisted MCC/MNC:
- Make outgoing calls — Restricts the device's ability to make phone calls.
- Receive incoming calls — Restrcits the device's ability to recieve phone calls.
- Send or receive SMS/MMS/RCS — Restricts the device's ability to send and receive text messages.
- Data usage — Prevents apps on the device from consuming mobile data.
- Check the insert allowed SIM (Apply when the allowed SIM is inserted) — If the device is dual-SIM and an allowed SIM card is present, allows the other SIM to use restricted features. If this setting is selected, you can choose which features to allow for the other SIM.
- Apply the above restrictions when international roaming is in use — Restricts the device's phone, text and data usage when connecting to a mobile network in a country other than the device's original country of deployment. This setting applies to restricted SIMs in a dual-SIM device only.
- Lock device — Locks the device in order to prevent the usage of unlisted SIM cards.
- Mobile Number Lock — allows customers to enable or disable IMSI policies regardless of whether MCC/MNC information is provided
- Turn on network registration verification — Validates that a blocked SIM card is not being misused by verifying that the connected network matches the allowlisted networks (via MCC/MNC).
- Block incoming calls when device is locked — You can add phone numbers that are allowed to call.
- Allow PIN Code unlock — allows the SIM locked device to be unlocked using a PIN. For details, see How to unlock devices using pin code?.
- Enter the contact information for your support services in the CUSTOMER SUPPORT OPTIONS section.
- The Advanced support methods section is also displayed on the SIM lock page but is centrally configured in Lock screen.
- (Optional) Click Primary support option to select the main support contact information. It is centrally configured in Lock screen.
- Select SAVE to commit the default SIM control settings.

Delete SIM control policy
To delete a SIM control policy:
- Go to Policies.
- Select SIM CONTROL in the ADVANCED CONTROLS section.
- Click the X next to the SIM control policy you want to delete.
