- Basics
- The Knox Ecosystem
- White Paper
- Samsung Knox Portal
- Knox Cloud Services
- General Knox Support
- Knox Licenses
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
SIM control
Set a default SIM control configuration
Configure a default bundle of settings that restrict SIM functionality or lock the device. This default policy can be used consistently across deployments until more granular modifications are needed for specific deployment objectives. A maximum of five SIM control policies can be added. SIM cards that match the MCC/MNC codes entered in a SIM control policy can be used without restriction on devices that receive SIM control policies in the Devices menu. Any unlisted SIM cards can be configured to restrict some functionality as well as lock the device. For dual-SIM devices, restrictions only apply to the unlisted SIM card. Each mobile device carrier has their own unique MCC and MNC pair. You can list a maximum of 50 MCC/MNC pairs. For step-by-step instructions to apply this policy to selected user devices, see Enable and disable SIM control.
To set a default SIM control configuration for Knox Guard managed devices:
- Select Policies from the left-hand navigation menu.
- Select SIM CONTROL under the ADVANCED CONTROLS field.
- Enter the Policy name. It can't match an existing policy name.
- Fill the MCC and MNC fields for SIM control restriction exclusion.
- Set the following restrictions for the unlisted MCC/MNC:
- Make outgoing calls — Restricts the device's ability to make phone calls.
- Receive incoming calls — Restrcits the device's ability to recieve phone calls.
- Send or receive SMS/MMS/RCS — Restricts the device's ability to send and receive text messages.
- Data usage — Prevents apps on the device from consuming mobile data.
- Check the insert allowed SIM (Apply when the allowed SIM is inserted) — If the device is dual-SIM and an allowed SIM card is present, allows the other SIM to use restricted features. If this setting is selected, you can choose which features to allow for the other SIM.
- Apply the above restrictions when international roaming is in use — Restricts the device's phone, text and data usage when connecting to a mobile network in a country other than the device's original country of deployment. This setting applies to restricted SIMs in a dual-SIM device only.
- Lock device — Locks the device in order to prevent the usage of unlisted SIM cards.
- Turn on network registration verification — Validates that a deactivated SIM card is not being misused by comparing it to the MCC/MNC of the allowed network operators.
- Enter the contact information for your support services in the CUSTOMER SUPPORT OPTIONS section.
- The Advanced support methods section is also displayed on the SIM lock page but is centrally configured in Lock screen.
- (Optional) Click Primary support option to select the main support contact information. It is centrally configured in Lock screen.
- Select SAVE to commit the default SIM control settings.
Delete SIM control policy
To delete a SIM control policy:
- Go to Policies.
- Select SIM CONTROL in the ADVANCED CONTROLS section.
- Click the X next to the SIM control policy you want to delete.
