Offline device lock
Last updated July 17th, 2025
Devices can be rendered offline when a user purposely avoids connecting to a network. When this occurs, the device fails to receive policies from its dedicated Knox Guard server.
You can use the Offline device lock policy to automatically lock a device that’s been offline for a given period of time. Once an offline device is locked, the device user must contact their carrier to restore functionality. The device user must first share the challenge code displayed on their device’s lock screen, which generates when the device is locked. You can then provide the user a PIN to restore the device’s functionality.
For information on how to update this policy for select devices, see Update or disable offline lock policy.
Set an offline device lock
To set an offline device lock:
-
Navigate to the Policies page.
-
Under DEVICE LOCK, click OFFLINE LOCK.
-
Enable Offline Device Lock.
-
Specify how long to wait before locking an offline device. You can set a number of days between 3 — 200.
-
Enter a default Offline device lock message that displays as a dismissible pop-up when the offline device is locked. As this message is intended for offline devices, we recommend you set this policy before the device enrolls into Knox Guard.
-
(Optional) You can Block incoming calls when device is locked. You can modify this setting using the Lock screen policy.
-
Enter your Contact Information. You must provide either a Phone number or E-mail address.
- Phone numbers can only contain numbers and the following symbols:
#
,+
,*
. - Man Machine Interface (MMI) codes starting with *09, *42, *56, *60, *63, *64, *68, *72, *77, and *78 are blocked.
- Phone numbers can only contain numbers and the following symbols:
-
(Optional) Configure your Advanced support methods. You can modify these settings using the Lock screen policy.
-
Enter a Warning notification that displays to the device user before the device is locked. This notification displays as a full screen message. If the user connects to a network after receiving an offline lock message, the device’s offline timer resets.
-
Enter the number of days before the device lock warning message is sent out.
-
Click SAVE.
On this page
Is this page helpful?