Device Status

• Device overview
• Commands
• Location map

Device overview

Open a device from Dashboard → Devices by clicking the device row. The page title shows the device Model (when available) and the internal Id.

Historical data vs current enrollment

When a device has multiple enrollments, Cerberus Enterprise can show a read-only historical record. In that case, the page displays a Historical data banner and a button to return to the current enrollment data.

Top fields

The top section summarizes the device identity, assignment, and management state. Some fields are platform-specific and appear only for Android or Apple devices.

• Id and Model: read-only identifiers.
• User: shows the currently assigned user (if any). From the user menu you can Open user or Change user, or assign a user when none is set.
• Management mode and Ownership: displayed with tooltips in the UI.
• State: current device state (with icon and tooltip details).
• ADE profile (Apple only): shows the assigned Automated Device Enrollment profile (if any) and lets you open or change it.
• Policy: shows the assigned policy and lets you open or change it, or assign one when none is set.
• Policy compliance status (when a policy is assigned): indicates whether the device is compliant.
• Policy version (when a policy is assigned): indicates whether the device has the latest policy version applied.
• Enrolled on and Last status report: timestamps for enrollment and last reported status.
• Disenrolled on: shown when the device has been disenrolled.

Some data and panels are available only when the corresponding category is enabled in the device policy. For more information read the Status reporting and Location and geofence pages.

Panels

The Device editor is organized in expandable sections. Depending on platform and state, you may see one or more of the following panels:

• Location map: a tabbed panel with Location history for the current device and, on Android devices, a Geofence tab for geofence transitions when geofence data is available.
• Commands: send commands to the device and view command history (platform-specific).
• Security posture (Android only): posture, Play Integrity verdict, and security risks.
• Application reports (Android only): installed apps and feedback/error reports.
• Managed applications (Apple only): managed app state and installation details.
• Non compliance details: shown when a device is not compliant; lists the policy settings that are out of compliance.
• Status reports: additional data reported by the device, displayed as a tree of categories and values.
• Enrollment history: previous enrollments for this same physical device, shown as a list.

Location panel tabs

The Location map panel now uses tabs so location history and geofence transitions stay separated.

• Location: shows history filters, a date-range search, location markers, the accuracy circle, and live tracking controls for the current device.
• Geofence (Android only): shows geofence transition history on a dedicated map, with period filters, an optional archived-geofence toggle, and a side list of transitions.

For the full behavior of these tabs, see Location map.

Actions

At the bottom of the page you can refresh data and perform actions depending on the platform, device state, and license status.

• Refresh data: reload the device record.
• Disable device / Enable device (Android only): available in supported states.
• Disenroll device: removes management from the device. The exact behavior depends on platform and ownership (for example, Android may wipe a work profile or factory reset).
• Delete device: available when the device is already disenrolled and its record can be removed.

Commands

The Device editor provides a Commands panel to send remote commands to a managed device. Available commands depend on the platform (Android or Apple) and device state.

If the device is not currently online, the command will be delivered and executed as soon as the device connects to the Internet. For Android commands you can set the Duration parameter to determine for how long an undelivered command remains valid.

Android (AMAPI) commands

For Android devices, the Commands panel includes a Duration field (value + unit) and a Command selector. Some commands require additional parameters, which appear dynamically when you select the command.

Common parameters

• Duration: how long the command is valid if it cannot be executed immediately.
• Command: choose which action to send to the device.

Commands with additional fields

• Reset password: requires New password and Confirm new password. Optional toggles include Lock now, Require entry, and Do not ask for credentials on boot.
• Clear app data: requires the target Package name.
• Start lost mode: requires a Lost message and supports optional contact fields (street address, organization, phone number, email).
• Request device info: requires selecting which device information to request.
• Add eSIM: requires an Activation code and an Activation state.
• Remove eSIM: requires the eSIM ICCID.
• Wipe: supports a Wipe reason message (shown to users on personal devices) and optional wipe flags.

Command history

Below the send controls, the dashboard shows a command history table. The table is sortable and supports pagination. Some rows can be expanded to view additional parameters or execution details.

Android history columns

• Creation date
• Command
• Validity
• Status
• Error
• Execution date

Apple (MDM) commands

For Apple devices, the Commands panel provides a Command selector. Some commands require additional inputs. As with Android, a command history table is shown below.

Commands with additional fields

• InstallApplication: requires the application Bundle ID.
• SendNotification: requires a Notification message (maximum length 200 characters).

Apple history columns

• Creation date
• Command
• Status
• Status time

Refresh

Use the refresh action in the Commands panel to reload the command history.

Location map

This page documents the device-specific location tools available in Device overview. The panel contains a Location tab for position history and, on Android devices, a Geofence tab for geofence transitions.

Prerequisites

Device location data is shown only when location reporting is enabled in the device policy. To enable it, open the policy and turn on Location and geofence → Report location. For more details, see Location and geofence.

On devices that are not fully managed, location data may still depend on the Cerberus Enterprise app having the required location permissions and on location services being enabled on the device.

For the global multi-device map available from the dashboard, see Dashboard location map.

Loading and no-data state

• While location data is loading, the panel shows a loading overlay on the map.
• If the device has no location data available, the panel shows a message stating No location data available together with a reminder to enable location reporting in the assigned policy.
• If a date filter is active and no samples match it, the panel shows No data available in the selected date range.

Location tab

Open the Location tab to inspect the history for a single device. The available filters include the last known location, recent history ranges, a custom date range, and live tracking.

• Last: shows the last known location.
• Today, Last 7 days, and Last 30 days: show recorded locations for the selected period.
• Search: lets you choose a custom date range.
• Live: starts or stops live tracking for the current device.

Marker details

When you click a location marker, an information window opens with:

• The timestamp of the location record.
• The reported accuracy (in meters).
• The reported speed, when the device provides it.
• The reported heading or bearing, when the device provides it.

Accuracy circle

When the information window is open, an accuracy circle is displayed around the marker. The circle radius corresponds to the reported accuracy (in meters). Closing the information window hides the circle.

Live tracking

In the device history view, selecting the Live filter starts a real-time tracking request for that specific device. Cerberus Enterprise asks for confirmation before starting the request.

• Live tracking runs for up to 15 minutes.
• The device shows a notification while live tracking is active.
• While live tracking is active, the panel keeps refreshing the latest location and the live indicator stays visible.
• Selecting the live filter again lets you stop live tracking before the timeout ends.

Geofence tab

On Android devices, the second tab shows geofence transitions generated from the geofences defined in the assigned policy. This tab is available when geofence data exists for the device.

• The map shows the current geofence areas together with the recorded transition points.
• The transition list on the right lets you inspect enter and exit events.
• The available filters are Today, Last 7 days, Last 30 days, and a custom date-range search.
• Include archived also shows transitions related to old geofence definitions that are no longer present in the current policy.

Geofence transition details

Selecting a transition opens its details on the map and highlights the corresponding list entry. When available, Cerberus Enterprise also shows the device coordinates and reported accuracy for that transition.