Allow dual SIM operation

Some devices support multiple SIMs — both physical and eSIMs — and when a device is unmanaged, the device user has an unrestricted ability device to add and remove them.

When managing a device as an enterprise or service provider, it can be a security risk or a violation of your service agreement to allow the device user to send and receive data on unapproved mobile networks. With the Allow dual SIM operation policy, Knox Service Plugin lets you disable alternative SIMs, restricting the device to only the primary SIM.

Requirements

The Allow dual SIM operation policy blocks the secondary physical SIM and eSIMs on devices running One UI 6.0 and lower.

On One UI 6.0, this policy only blocks the secondary physical SIM.

On One UI 6.1 and higher, the policy has no effect. Due to how base Android 14 implements Multiple Enabled Profiles, SIMs in One UI 6.1 and higher have unique identifiers, and device management apps like Knox Service Plugin can’t distinguish between a primary and alternative SIM. If you apply this policy to devices that aren’t supported, your EMM console will report:

Allow dual SIM operation in Device-wide policies is not supported by this device. [14001]

Disable secondary and alternative SIMs

To completely disable alternative SIMs on devices and block users from managing them:

1. On your EMM console, add an assignment for the Knox Service Plugin app intended for your target devices, or edit it if one already exists.

2. For the app’s managed configuration, set the following:

   Setting	Value
   Device-wide policies > Enable device policy controls	True
   Device-wide policies > Advanced Restriction policies (Premium) > Enable Advanced restrictions controls	True
   Device-wide policies > Advanced Restriction policies (Premium) > Allow dual SIM operation	False

3. Finish configuring the app assignment.

4. Push the app to the devices.