Back to top

SIM control

Last updated July 15th, 2024

Some devices support multiple SIMs, and when a device is unmanaged, the device user has an unrestricted ability to use them.

When managing a device as an enterprise or service provider, it can be a security risk or a violation of your service agreement to allow the device user to send and receive data on unapproved mobile networks.

Knox 3.11 provides policies which allow IT admins to configure the following restrictions on physical SIMs and eSIMs. These policies are only available through Knox Service Plugin, please refer to upcoming Knox Service Plugin releases after Knox 3.11.

  • Only allow specific SIM cards — IT admins can add restrictions for both eSIMs and physical SIMs to only allow SIM cards with a specific combination of MCC/MNC, phone number, and ICCID.
  • Only allow a single SIM card — IT admins can add a restriction to only allow one physical SIM card to be activated on a device.
  • Only allow a single eSIM — IT admins can add a restriction to only allow one eSIM, and block all other SIMs on the device.
  • SIM settings UI — In the SIM settings menu, IT admins can set configurations to:
    • Show or hide physical SIM slots
    • Show or hide eSIMs
    • Show or hide preferred SIMs
    • Show or hide SIMs on the quick panel
    • Turn off the prompt to always ask for SIM selection for calls and messaging
    • Prevent device users from activating eSIMs through QR codes or URLs

Is this page helpful?