Revision history

Android Deployment Models

Android Enterprise devices

Android devices using the device administrator

Android MAM-only devices

AppConnect for Android devices

Samsung Knox Workspace devices

Wear OS by Google

Setting up Ivanti EPMM for Android Enterprise

Android Enterprise Overview

Enabling Android Enterprise

Configuring the security policy for Android Enterprise devices

Configuring the lockdown policy for Android Enterprise devices

Removing Android Enterprise

Setting up Ivanti EPMM with a closed network / AOSP deployment

Enabling a closed network / AOSP deployment in Ivanti EPMM

Creating a new Android Enterprise configuration

Provisioning the Android device

Managing the closed network / AOSP devices

Managing Devices

Enabling Server Name Lookup

Registering Devices

General management of devices

Searching for Devices

Securing Devices

Managing Custom Attributes

Custom Attributes

Assigning a custom attributes role

Adding custom attributes to users and/or devices

Viewing custom attributes available for users and/or devices

Viewing custom attributes assigned to users

Viewing custom attributes assigned to devices

Editing custom attributes for users and/or devices

Searching for custom attributes for users and/or devices

Exporting a log of the custom attributes for users and/or devices

Deleting custom attributes from users and/or devices

Setting custom attribute values for device or users

Viewing custom attribute changes

Pushing label attribute changes to devices and users

Managing Policies

Working with default policies

Importing and exporting policies

Viewing policy status and platform support

Security Policy

Global App Config Settings policy

Sync policies and battery use

MTD Anti-Phishing/Smishing Policy

Work Schedule policy

Country changes and alerts

Configuring an eSIM refresh cellular plan policy

Android devices and the Client Is Always Connected option

Enabling attestation on Android devices

Working with Windows Update policies

Working with Samsung Android kiosk policies

Working with Android Quick Setup policies

Working with Samsung general policies

Working with Wear OS device policies

Notifications of changes to the privacy policy

Exporting the devices in the WatchList

Managing Compliance

Managing device compliance checks

Tiered compliance

Compliance actions policy violations

Viewing quarantine information

Viewing configurations removed due to quarantine

Custom compliance policies

Managing Scripts

Managing Device Settings with Configurations

Management of device settings with configurations

Configurations page

Default configurations

Displaying configurations status

Adding new configurations

Editing configurations

Deleting configurations

Exporting configurations

Importing configurations

Applying configurations to labels

Android File Transfer Configurations

Android Enhanced Multiple-Slicing Support

Impact of changing LDAP server variables

Configuring Email

Exchange settings

Configuring POP and IMAP email settings (for iOS and macOS)

Synchronizing Google account data

Setting up Gmail with Android Enterprise

Managing Wi-Fi Settings

Wi-Fi profiles and password caching

Wi-Fi network priority for Android devices

Using Wi-Fi priority values

How an Android device chooses its Wi-Fi network

Wi-Fi network manual override behavior

Wi-Fi authentication types

Managing VPN Settings

VPN settings overview

Configuring new VPN settings

Cisco Legacy AnyConnect

Tunnel (Android)

Tunnel (Samsung Knox Workspace)

Palo Alto Networks GlobalProtect

Pulse Secure SSL

Encrypting and Decrypting logs

Knox VPN Support

Managing Certificates and Configuring Certificate Authorities

Certificates overview

Managing certificates issued by certificate enrollment configurations

Configuring certificate pinning for registered devices

Supported certificate scenarios

Ivanti EPMM as a certificate authority

Configuring Ivanti EPMM as an independent root CA (Self-Signed)

Configuring Ivanti EPMM as an intermediate CA

Mutual authentication between devices and Ivanti EPMM

Certificates settings

Certificate Enrollment settings

Configuring a client-provided certificate enrollment setting

Configuring an Entrust CA

Configuring a GlobalSign CA

Configuring Ivanti EPMM as the CA

Configuring OpenTrust CA

Configuring a single file identity certificate enrollment setting

Configuring SCEP

Enabling Kerberos Authentication between EPMM and the SCEP and LDAP servers

Configuring Symantec Managed PKI

Configuring Symantec Web Services Managed PKI

Configuring a user-provided certificate enrollment setting

Android shared-kiosk mode overview

Setting up the Android shared-kiosk mode

Configuring the Android shared-kiosk mode

User experience for staging and shared kiosk users

Suggestions for configuring shared-kiosk mode

Using Ivanti Mobile@Work for Android

Ivanti Mobile@Work Support Tab Policy

Working with Events

Managing events

Customizing Event Center messages

Viewing and Exporting Events

Troubleshooting Ivanti EPMM and devices

Pushing device profiles

About Ivanti EPMM logs

Audit log information

Audit Logs use cases

Certificate Management

Service Diagnostic tests

Device log encryption on Android devices

Encrypting device logs with your own certificate

Pull client logs for client devices

Office 365 App Protection overview

Office 365 App Protection policies

Office 365 App Protection configurations

Office 365 App Protection user groups

Office 365 App Protection reports

Office 365 App Protection settings

Samsung Knox Settings

Apply the Intune license to device users

Adding Ivanti EPMM as a compliance partner

Creating a conditional access policy in Microsoft Endpoint Manager

Connecting Microsoft Azure to Ivanti EPMM

Creating a partner device compliance policy

De-provisioning of the Azure tenant

Installing Ivanti Mobile@Work for iOS, macOS, and Android

Required client device user action and use cases

Help@Work for Android

About Help@Work for Android

How Help@Work for Android works

Help@Work for Android setup overview

Installing TeamViewer on your desktop

Requesting a TeamViewer account

Creating a TeamViewer app

Enabling Help@Work in Ivanti EPMM

Deploying the TeamViewer QuickSupport app

Starting a remote control session

Transitioning Help@Work to the Modern workflow for Android

About Help@Work for Android

How Help@Work for Android works

Enabling Help@Work in Ivanti EPMM

Language Support

Translated versions of client apps

Selecting languages for Ivanti EPMM messages

Setting the system default language

Changing language selection from the Admin Portal

Samsung Android Kiosk Support

About Samsung Android kiosk

Setting up Samsung Android kiosk mode

Samsung Android kiosk policy

Creating a Samsung Android kiosk configuration for multiple-app mode

Enabling and Disabling Samsung Android kiosk mode

An example of Samsung Android kiosk mode

Information about Samsung Android kiosk mode in device details

Samsung Android kiosk mode deployment notes

Setting the kiosk policy for Android managed devices

The SMS Archive Feature

About the SMS & Call Log Archive feature

Supported devices

Setting Up the SMS & Call Log Archive feature

Setting up encrypted SMS and call log archive encryption

Monitoring the SMS & Call Log archive

Self-service User Portal

Setting up the self-service user portal

Using the self-service user portal

What is the self-service user portal?

Setting up Android Enterprise with the alternative method

Method 2: Setting up using AFW json file generated from Google account

Managing users for Android Enterprise

Documentation resources

Ivanti EPMM documentation

Docs powered by Archbee

The SMS Archive Feature

Supported devices

0 min

The SMS archive feature and the call log archive feature are only supported for Samsung Knox devices.

Updated 06 Oct 2026

About the SMS & Call Log Archive feature

Setting Up the SMS & Call Log Archive feature

Docs powered by Archbee

Docs powered by Archbee

Copyright © 2026, Ivanti, Inc. All rights reserved.

Privacy and Legal