Sending commands to a mobile device

To protect data on a mobile device that is lost or stolen, you can send special commands (see the table below).

Commands for protecting data on a lost or stolen device

Method of connecting to Kaspersky Security Center

Command

Result of command execution

Kaspersky Endpoint Security for Android

 

Lock

Mobile device is locked.

Unlock

After unlocking a mobile device running Android 5.0 – 6.Х, the screen unlock password (PIN code) is reset to "1234". After unlocking a device running Android 7.0 or later, the screen unlock password is not changed.

Locate device

Device is located and shown on a map. The mobile service provider charges a fee for sending the SMS and for internet access.

On devices running Android 12 or later, if the user granted the "Use approximate location" permission, the Kaspersky Endpoint Security for Android app first tries to get the precise device location. If this is not successful, the approximate device location is returned only if it was received not more than 30 minutes earlier. Otherwise, the Locate device command fails.

Mugshot

Mobile device is locked. The mugshot photo is taken by the frontal camera of the device when somebody attempts to unlock the device. The mobile service provider charges a fee for sending the SMS and for internet access.

When attempting to unlock the device, the user automatically consents to the mugshot.

If the permission to use the camera has been revoked, the mobile device displays a notification and prompts to provide the permission. On a mobile device running Android 12 or later, if the permission to use camera has been revoked via Quick Settings, the notification is not displayed but the photo taken is black.

Alarm

The mobile device sounds an alarm. The alarm is sounded for 5 minutes (or for 1 minute if the device battery is low).

Wipe corporate data

Wipe containerized data, corporate email account, settings for connecting to the corporate Wi-Fi network and VPN, Access Point Name (APN), Android work profile, KNOX container, and the KNOX License Manager key.

Reset to factory settings

All data is deleted from the mobile device and the settings are rolled back to their factory values. After this command is executed, the device will not be able to receive or execute subsequent commands.

iOS MDM profile

Lock

Mobile device is locked.

Unlock

Mobile device locking with a PIN code is disabled. The previously specified PIN code has been reset.

Wipe corporate data

All installed configuration profiles, provisioning profiles, the iOS MDM profile, and applications for which the Remove together with iOS MDM profile check box has been selected, are removed from the device.

Reset to factory settings

All data is deleted from the mobile device and the settings are rolled back to their factory values. After this command is executed, the device will not be able to receive or execute subsequent commands.

Exchange mailbox

Reset to factory settings

All data is deleted from the mobile device and the settings are rolled back to their factory values. After this command is executed, the device will not be able to receive or execute subsequent commands.

Special rights and permissions are required for the execution of commands of Kaspersky Endpoint Security for Android. When the Initial Configuration Wizard is running, Kaspersky Endpoint Security for Android prompts the user to grant the application all required rights and permissions. The user can skip these steps or disable these permissions in the device settings at a later time. If this is the case, it will be impossible to execute commands.

On devices running Android 10.0 or later, the user must grant the "All the time" permission to access the location. On devices running Android 11.0 or later, the user must also grant the "While using the app" permission to access camera. Otherwise, Anti-theft commands will not function. The user will be notified of this limitation and will again be prompted to grant the permissions of required level. If the user selects the "Only this time" option for the camera permission, access is considered granted by the app. It is recommended to contact the user directly if the Camera permission is requested again.

To learn more about sending commands from the list of mobile devices in Administration Console, please refer to Kaspersky Security Center help.

Page top