Commands for mobile device management
Kaspersky Security Center supports commands for mobile device management.
Such commands are used for remote mobile device management. For example, if your mobile device is lost, you can delete corporate data from the device by using a command.
You can use commands for the following types of managed mobile devices:
- iOS MDM devices
- Kaspersky Endpoint Security (KES) devices
- EAS devices
Each device type supports a dedicated set of commands.
Special considerations for certain commands
- For all types of devices, if the Reset to factory settings command is successfully executed, all data is deleted from the device, and the device settings are rolled back to their factory values.
- After successful execution of the Wipe corporate data command on an iOS MDM device, all installed configuration profiles, provisioning profiles, the iOS MDM profile, and applications for which the Remove together with iOS MDM profile check box has been selected are removed from the device.
- If the Wipe corporate data command is successfully executed on a KES device, all corporate data, entries in Contacts, the SMS history, the call log, the calendar, the internet connection settings, and the user accounts, except for the Google™ account, will be deleted from the device. For a KES device, all data from the memory card will also be deleted.
- Before sending the Locate command to a KES device, you will have to confirm that you are using this command for an authorized search for a lost device that belongs to your organization or to one of your employees. A mobile device that receives the Locate command is not locked.
List of commands for mobile devices
The following table shows sets of commands for iOS MDM devices.
Supported commands for mobile device management: iOS MDM devices
Commands | Command execution result |
|---|---|
Lock | The mobile device is locked. |
Unlock | Mobile device locking with a PIN is disabled. The previously specified PIN has been reset. |
Reset to factory settings | All data is deleted from the mobile device and the settings are rolled back to their default values. |
Wipe corporate data | All installed configuration profiles, provisioning profiles, the iOS MDM profile, and applications for which the Remove together with iOS MDM profile check box has been selected are removed from the device. |
Synchronize device | The mobile device data is synchronized with the Administration Server. |
Install profile | The configuration profile is installed on the mobile device. |
Remove profile | The configuration profile is deleted from the mobile device. |
Install provisioning profile | The provisioning profile is installed on the mobile device. |
Remove provisioning profile | The provisioning profile is deleted from the mobile device. |
Install app | The app is installed on the mobile device. |
Remove app | The app is removed from the mobile device. |
Enter redemption code | Redemption code entered for a paid app. |
Configure roaming | Data roaming and voice roaming enabled or disabled. |
The following table shows sets of commands for KES devices.
Supported commands for mobile device management: KES devices
Command | Command execution result |
Lock | The mobile device is locked. |
Unlock | Mobile device locking with a PIN is disabled. The previously specified PIN has been reset. |
Reset to factory settings | All data is deleted from the mobile device and the settings are rolled back to their default values. |
Wipe corporate data | Corporate data, entries in Contacts, the SMS history, the call log, the calendar, the internet connection settings, and the user accounts (except for the Google account) have been deleted. Memory card data has been wiped. |
Synchronize device | The mobile device data is synchronized with the Administration Server. |
Locate device | The mobile device is located and shown on Google Maps™. The mobile carrier charges a fee for sending SMS messages and for providing internet connectivity. |
Mugshot | The mobile device is locked. The photo has been taken by the front camera of the device and saved on Administration Server. Photos can be viewed in the command log. The mobile carrier charges a fee for sending SMS messages and for providing internet connectivity. |
Alarm | The mobile device sounds an alarm. |
The following table shows the commands for EAS devices.
Supported commands for mobile device management: EAS devices
Commands | Command execution result |
|---|---|
Reset to factory settings | All data is deleted from the mobile device and the settings are rolled back to their default values. |
