Back to top

Android Management API device commands

Last updated September 25th, 2024

The available commands for a device vary based on its management mode.

Device

Device command Description Supported system
Push Profile Pushes and applies the latest profile and app information to the device.

Work profile on company-owned

Work profile Fully Managed

Reboot Device Reboots the device.

Fully Managed

Clear Screen Lock Resets the device's lock screen password and creates a temporary password. After sending the device command, the temporary password — found on the Device Details page — is delivered to the device user.

Work profile on company-owned

Work profile Fully Managed

Unenroll Device Unenrolls the device.

Work profile on company-owned

Work profile Fully Managed

Lock Screen Locks the device screen. If the device's screen is password-locked, then the user needs to enter the password to access the device again.

Fully Managed

Enable Lost Mode

Locks a missing or lost device, displays a message on its screen, and sounds an alarm for five minutes. The device user must manually unlock the device to disable lost mode.

  • If the device is not found and manually unlocked, the device location is reported and shown in the Knox Manage console. The device is locked and can be accessed only after you disable the lost mode.
  • Screen Lock Policies and Location Settings must be configured ahead of enabling the lost mode to prevent anyone from accessing the device and disabling the lost mode.
  • You can customize the message displayed on the locked phone and also include a phone number, email, and address.

You can't use lost mode if:

  • The device user paused the work profile on the device.
  • The device user manually exited the lost mode in the last 12 hours.
  • You used a device command to reset the screen lock on the device in the last 12 hours.

Android 13 and higher

Work profile on company-owned

Disable Lock Mode Unlocks a missing or lost device by removing the lost mode.

Android 13 and higher

Work profile on company-owned

Work Profile Controls

Device command Description Supported system
Lock Screen Locks the work profile, if it has a lock separate from the personal profile. The next time the device user accesses a work profile app, they must unlock the work profile before they can continue.

Work profile on company-owned

Work profile

Collect Audit Log Collects the Knox Manage audit logs of the device.

Work profile on company-owned

Work profile

Collect Device Log Gathers the log data from the device.

Work profile on company-owned

Work profile

Reset Push Token

Creates and registers a new Firebase Cloud Messaging (FCM) token for the Knox Manage Companion app on the device.

Use this command in scenarios where the device can't receive push notifications, which typically occurs when the token was changed on the Knox Manage server and the device was unable to sync it.

Work profile on company-owned

Work profile

Device Info

Device command Description Supported system
Collect Current Location Gathers current location data from the device.

Work profile on company-owned

Work profile

Is this page helpful?