Binding SIM cards to Android Devices

An organization provides SIM cards to its employees. However, they can be misused. As a result, SIM cards can be bound with the mobile devices thus keeping them secure. Scalefusion provides mechanism to configure settings to bind SIM card with managed devices, through Android Device Policy.

The document below describes how these settings can be configured.

How does it Work?

To bind a SIM with device, you can do the following:

  1. Lock the device once the SIM is changed or removed.
  2. Set a PIN on the SIM: The PIN can be configured and the SIM is detected only when you enter the PIN.

Configuring SIM Binding Settings

To configure,

  1. On Scalefusion Dashboard, navigate to Device Profiles & Policies > Device Profiles
  2. Edit an existing Android Device Profile or create a new one.
  3. Navigate to Restrictions > Advance Settings > SIM Binding Settings
  4. Toggle on the setting Bind SIM cards to the Device. Rest of the settings can be configured only if you toggle this on.
    You are advised to use this feature after due testing and consideration as it may result in locking any SIM that is inserted.
    1. Configure SIM Binding Targets: Configure which SIM should the device be bound to. You can choose one of the following:
      1. Bind First detected SIM: Binds it to the first SIM detected once the policy is applied.
      2. Bind based on Custom Property: Select a custom property. The SIM will get bound to the devices based on the custom property you have selected. Select this setting first from the drop-down, and select the custom property from the list in the next drop-down.
    2. Enforce a SIM PIN: Enable this setting to enforce a system generated random SIM PIN on the detected SIM. As every SIM comes with a default PIN that is needed to configure a new PIN on the device., here you can enter the default PINs that can be used to try and update PIN. If no input is given Scalefusion tries with 0000, 1111.

      Important Points on enforcing a SIM PIN:
      1. SIM PIN can be enforced only on EMM managed devices which are Knox supported.
      2. After configuring SIM PINs from here, if you disable this setting, the PINs you have set here will be removed and will get reset to default.
      3. PIN reset event is captured and shown in Account activity report also.
      4. If device is Factory Reset, the PINs (you have set) get removed from the device.
    3. Configure Device Blocking Settings: With this, you can configure the settings that would block the device usage with a full screen message, if the SIM is swapped or removed.
      1. Block Device on SIM Swap: With this settings enabled, the device gets blocked whenever a SIM swap takes place.
      2. Block Device on SIM Removal: With this settings enabled, the device gets blocked whenever a SIM is removed.
      3. Configure a Message to be shown in full screen: Compose a message which will be displayed to users on the device, when any of the above actions take place.
        Device Blocking Settings can be applied only on EMM Managed devices.
        The screenshot below shows an example of device blocked when a SIM is changed showing the details of allowed sim and detected one with details which shows the difference between the two.

SIM Binding details in Full Device Information

Once you configure SIM binding settings, the PIN information is also present in Device Details, which is a system generated PIN.

  1. On Scalefusion Dashboard, navigate to Devices and click on View Details.
  2. Click on the gear icon. Now, click on Full Device Information
  3. SIM details are present under SIM Binding tab.
  4. To see the random generated PIN, click on the eye icon. To change the current SIM pin you can use use the pencil icon. It will generate a new PIN. To delete the PIN, click on the bin icon. On deleting, the PIN gets deleted and a new PIN will be generated only on next profile update.

How did we do?

Powered by HelpDocs (opens in a new tab)