Back to top

Allow dual SIM operation

Last updated June 28th, 2024

Some devices support multiple SIMs, and when a device is unmanaged, the device user has an unrestricted ability to use them.

When managing a device as an enterprise or service provider, it can be a security risk or a violation of your service agreement to allow the device user to send and receive data on unapproved mobile networks. With the Allow dual SIM operation policy, Knox Service Plugin lets you disable the secondary physical SIM, restricting the device to only the primary physical SIM.

The Allow dual SIM operation policy can only control physical SIMs on a device. To control eSIMs, see the Allow eSIM operation policy.

Disable secondary and alternative SIMs

To completely disable alternative SIMs on devices and block users from managing them:

  1. On your EMM console, add an assignment for the Knox Service Plugin app intended for your target devices, or edit it if one already exists.

  2. For the app’s managed configuration, set the following:

    Setting Value
    Device-wide policies > Enable device policy controls True
    Device-wide policies > Advanced Restriction policies (Premium) > Enable Advanced restrictions controls True
    Device-wide policies > Advanced Restriction policies (Premium) > Allow dual SIM operation False
  3. Finish configuring the app assignment.

  4. Push the app to the devices.

Is this page helpful?