Kaspersky Security Center

Commands for mobile device management

April 14, 2024

ID 90314

Kaspersky Security Center supports commands for mobile device management.

Such commands are used for remote mobile device management. For example, if your mobile device is lost, you can delete corporate data from the device by using a command.

You can use commands for the following types of managed mobile devices:

  • iOS MDM devices
  • Kaspersky Endpoint Security (KES) devices
  • EAS devices

Each device type supports a dedicated set of commands.

Special considerations for certain commands

  • For all types of devices, if the Reset to factory settings command is successfully executed, all data is deleted from the device, and the device settings are rolled back to their factory values.
  • After successful execution of the Wipe corporate data command on an iOS MDM device, all installed configuration profiles, provisioning profiles, the iOS MDM profile, and applications for which the Remove together with iOS MDM profile check box has been selected are removed from the device.
  • If the Wipe corporate data command is successfully executed on a KES device, all corporate data, entries in Contacts, the SMS history, the call log, the calendar, the internet connection settings, and the user accounts, except for the Google™ account, will be deleted from the device. For a KES device, all data from the memory card will also be deleted.
  • Before sending the Locate command to a KES device, you will have to confirm that you are using this command for an authorized search for a lost device that belongs to your organization or to one of your employees. A mobile device that receives the Locate command is not locked.

List of commands for mobile devices

The following table shows sets of commands for iOS MDM devices.

Supported commands for mobile device management: iOS MDM devices

Commands

Command execution result

Lock

The mobile device is locked.

Unlock

Mobile device locking with a PIN is disabled. The previously specified PIN has been reset.

Reset to factory settings

All data is deleted from the mobile device and the settings are rolled back to their default values.

Wipe corporate data

All installed configuration profiles, provisioning profiles, the iOS MDM profile, and applications for which the Remove together with iOS MDM profile check box has been selected are removed from the device.

Synchronize device

The mobile device data is synchronized with the Administration Server.

Install profile

The configuration profile is installed on the mobile device.

Remove profile

The configuration profile is deleted from the mobile device.

Install provisioning profile

The provisioning profile is installed on the mobile device.

Remove provisioning profile

The provisioning profile is deleted from the mobile device.

Install app

The app is installed on the mobile device.

Remove app

The app is removed from the mobile device.

Enter redemption code

Redemption code entered for a paid app.

Configure roaming

Data roaming and voice roaming enabled or disabled.

The following table shows sets of commands for KES devices.

Supported commands for mobile device management: KES devices

Command

Command execution result

Lock

The mobile device is locked.

Unlock

Mobile device locking with a PIN is disabled. The previously specified PIN has been reset.

Reset to factory settings

All data is deleted from the mobile device and the settings are rolled back to their default values.

Wipe corporate data

Corporate data, entries in Contacts, the SMS history, the call log, the calendar, the internet connection settings, and the user accounts (except for the Google account) have been deleted. Memory card data has been wiped.

Synchronize device

The mobile device data is synchronized with the Administration Server.

Locate device

The mobile device is located and shown on Google Maps™. The mobile carrier charges a fee for sending SMS messages and for providing internet connectivity.

Mugshot

The mobile device is locked. The photo has been taken by the front camera of the device and saved on Administration Server. Photos can be viewed in the command log. The mobile carrier charges a fee for sending SMS messages and for providing internet connectivity.

Alarm

The mobile device sounds an alarm.

The following table shows the commands for EAS devices.

Supported commands for mobile device management: EAS devices

Commands

Command execution result

Reset to factory settings

All data is deleted from the mobile device and the settings are rolled back to their default values.

See also:

Scenario: Mobile Device Management deployment

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.