Commands for mobile device management

Kaspersky Security Center supports commands for mobile device management.

Such commands are used for remote mobile device management. For example, if your mobile device is lost, you can delete corporate data from the device by using a command.

You can use commands for the following types of managed mobile devices:

iOS MDM devices
Kaspersky Endpoint Security (KES) devices
EAS devices

Each device type supports a dedicated set of commands.

Special considerations for certain commands

For all types of devices, if the Reset to factory settings command is successfully executed, all data is deleted from the device, and the device settings are rolled back to their factory values.
After successful execution of the Wipe corporate data command on an iOS MDM device, all installed configuration profiles, provisioning profiles, the iOS MDM profile, and applications for which the Remove together with iOS MDM profile check box has been selected are removed from the device.
If the Wipe corporate data command is successfully executed on a KES device, all corporate data, entries in Contacts, the SMS history, the call log, the calendar, the internet connection settings, and the user accounts, except for the Google™ account, will be deleted from the device. For a KES device, all data from the memory card will also be deleted.
Before sending the Locate command to a KES device, you will have to confirm that you are using this command for an authorized search for a lost device that belongs to your organization or to one of your employees. When using Kaspersky Security Center Service Pack 2 Maintenance Release 1 or earlier versions, a mobile device that receives the Locate command is locked. Starting from Kaspersky Security Center 10 Service Pack 3, the device is not locked.

List of commands for mobile devices

The following table shows sets of commands for iOS MDM devices.

Supported commands for mobile device management: iOS MDM devices

Commands	Command execution result
Lock	The mobile device is locked.
Unlock	Mobile device locking with a PIN is disabled. The previously specified PIN has been reset.
Reset to factory settings	All data is deleted from the mobile device and the settings are rolled back to their default values.
Wipe corporate data	All installed configuration profiles, provisioning profiles, the iOS MDM profile, and applications for which the Remove together with iOS MDM profile check box has been selected are removed from the device.
Synchronize device	The mobile device data is synchronized with the Administration Server.
Install profile	The configuration profile is installed on the mobile device.
Remove profile	The configuration profile is deleted from the mobile device.
Install provisioning profile	The provisioning profile is installed on the mobile device.
Remove provisioning profile	The provisioning profile is deleted from the mobile device.
Install app	The app is installed on the mobile device.
Remove app	The app is removed from the mobile device.
Enter redemption code	Redemption code entered for a paid app.
Configure roaming	Data roaming and voice roaming enabled or disabled.

The following table shows sets of commands for KES devices.

Supported commands for mobile device management: KES devices

Command	Command execution result
Lock	The mobile device is locked.
Unlock	Mobile device locking with a PIN is disabled. The previously specified PIN has been reset.
Reset to factory settings	All data is deleted from the mobile device and the settings are rolled back to their default values.
Wipe corporate data	Corporate data, entries in Contacts, the SMS history, the call log, the calendar, the internet connection settings, and the user accounts (except for the Google account) have been deleted. Memory card data has been wiped.
Synchronize device	The mobile device data is synchronized with the Administration Server.
Locate device	The mobile device is located and shown on Google Maps™. The mobile carrier charges a fee for sending SMS messages and for providing internet connectivity.
Mugshot	The mobile device is locked. The photo has been taken by the front camera of the device and saved on Administration Server. Photos can be viewed in the command log. The mobile carrier charges a fee for sending SMS messages and for providing internet connectivity.
Alarm	The mobile device sounds an alarm.

The following table shows the commands for EAS devices.

Supported commands for mobile device management: EAS devices

Commands	Command execution result
Reset to factory settings	All data is deleted from the mobile device and the settings are rolled back to their default values.