Device Status

• Device overview
• SIMs management
• Commands
• Location map

Device overview

Open a device from Dashboard → Devices by clicking the device row. The page title shows the device Model (when available) and the internal Id.

Historical data vs current enrollment

When a device has multiple enrollments, Cerberus Enterprise can show a read-only historical record. In that case, the page displays a Historical data banner and a button to return to the current enrollment data.

Top fields

The top section summarizes the device identity, assignment, and management state. Some fields are platform-specific and appear only for Android or Apple devices.

• Id and Model: read-only identifiers.
• User: shows the currently assigned user (if any). From the user menu you can Open user or Change user, or assign a user when none is set.
• Management mode and Ownership: displayed with tooltips in the UI.
• State: current device state (with icon and tooltip details).
• ADE profile (Apple only): shows the assigned Automated Device Enrollment profile (if any) and lets you open or change it.
• Policy: shows the assigned policy and lets you open or change it, or assign one when none is set.
• Policy compliance status (when a policy is assigned): indicates whether the device is compliant.
• Policy version (when a policy is assigned): indicates whether the device has the latest policy version applied.
• Enrolled on and Last status report: timestamps for enrollment and last reported status.
• Disenrolled on: shown when the device has been disenrolled.

Some data and panels are available only when the corresponding category is enabled in the device policy. For more information read the Status reporting and Location and geofence pages.

Panels

The Device editor is organized in expandable sections. Depending on platform and state, you may see one or more of the following panels:

• Location map: a tabbed panel with Location history for the current device and, on Android devices, a Geofence tab for geofence transitions when geofence data is available.
• SIMs management (Android only): device EID, installed SIMs and eSIMs, and eSIM command history. See the dedicated SIMs management page.
• Commands: send commands to the device and view command history (platform-specific).
• Security posture (Android only): posture, Play Integrity verdict, and security risks.
• Application reports (Android only): installed apps and feedback/error reports.
• Managed applications (Apple only): managed app state and installation details.
• Non compliance details: shown when a device is not compliant; lists the policy settings that are out of compliance.
• Status reports: additional data reported by the device, displayed as a tree of categories and values.
• Enrollment history: previous enrollments for this same physical device, shown as a list.

Location panel tabs

The Location map panel now uses tabs so location history and geofence transitions stay separated.

• Location: shows history filters, a date-range search, location markers, the accuracy circle, and live tracking controls for the current device.
• Geofence (Android only): shows geofence transition history on a dedicated map, with period filters, an optional archived-geofence toggle, and a side list of transitions.

For the full behavior of these tabs, see Location map.

Actions

At the bottom of the page you can refresh data and perform actions depending on the platform, device state, and license status.

• Refresh data: reload the device record.
• Disable device / Enable device (Android only): available in supported states.
• Disenroll device: removes management from the device. The exact behavior depends on platform and ownership (for example, Android may wipe a work profile or factory reset).
• Delete device: available when the device is already disenrolled and its record can be removed.

SIMs management

On Android devices, the Device editor provides a SIMs management panel to manage the SIMs and eSIM profiles installed on the device, to add or remove eSIM profiles, and to view the history of the eSIM commands sent to the device. This panel is available only for Android devices.

SIM information is reported by fully managed devices when Network info reporting is enabled in the device policy (this option is always enabled by Cerberus Enterprise). See the Status reporting page.

Device EID

The EID (eUICC Identifier) identifies the eSIM hardware of the device. Carriers use it to bind eSIM profiles to the device, so retrieving it is usually the first step of an eSIM provisioning workflow.

• Company-owned devices (Android 13 and above): the EID is reported automatically with the device status and no user interaction is required.
• Personally-owned devices (Android 13 and above): use the Request EID button. The user will see a notification on the device asking to share the EID, and can approve or decline the request. The EID is shown only if the user approves. While the request is pending, the button remains disabled.

Sending an EID request shows a confirmation dialog first, because the user will see a notification on the device.

Installed SIMs

The Installed SIMs table lists the SIMs currently known for the device, including physical SIMs and eSIM profiles. On personally-owned devices, eSIM profiles installed with the Add eSIM command are shown even when the device does not report SIM information.

• Carrier: the carrier name associated with the SIM (when reported).
• Phone number: the phone number associated with the SIM (when reported).
• ICCID: the Integrated Circuit Card Identifier of the SIM.
• Activation state: whether the eSIM is activated or not. Reported only for eSIMs on Android 15 and above.
• Configuration mode: whether the eSIM was configured by an administrator or by the user. Reported only for eSIMs on Android 15 and above.
• SIM type: shows whether the device reports the entry as an eSIM.

eSIMs with an ongoing or executed (not failed) removal command show a temporary Removing activation state. The entry disappears from the list when the device reports the updated SIM list. While a removal is in progress, the remove button is not available, to avoid sending the same command twice.

Remove eSIM

Use the remove button next to an installed eSIM to remove its profile from the device. A confirmation dialog asks you to confirm the ICCID of the eSIM to be removed before the command is sent. Removing an eSIM is supported on Android 15 and above.

Add eSIM

The Add eSIM section installs a new eSIM profile on the device (supported on Android 15 and above). It requires:

• Validity: how long the command is valid if it cannot be executed immediately.
• Activation code: the activation code for the eSIM profile, provided by the carrier. You can enter the full code, or only the SM-DP+ address to let the device discover a profile the carrier already linked to its EID.
• Activation state: whether the eSIM profile should be activated automatically after download, or left not activated for manual activation by the user.

Command history

Below the Add eSIM section, the panel shows the history of the eSIM commands sent to the device: Add eSIM, Remove eSIM, and Request EID. The table is sortable and supports pagination. Some rows can be expanded to view the command parameters (for example the activation code or the ICCID) and the execution status, including the eSIM error details when an operation fails on the device.

• Creation date
• Command
• Validity
• Status
• Error: shows the eSIM error status (for example User denied, Invalid activation code, or ICCID not found) when the command execution reports it.
• Execution date

Wipe eSIMs on wipe and disenroll

When you wipe the device from the Commands panel, the Wipe eSIMs flag controls whether eSIM profiles are removed with the wipe. On personally-owned devices with a work profile this flag is enabled by default (managed eSIMs are removed, personally-owned eSIMs are not affected). The same flag is available in the Disenroll device confirmation dialog.

Commands

The Device editor provides a Commands panel to send remote commands to a managed device. Available commands depend on the platform (Android or Apple) and device state.

If the device is not currently online, the command will be delivered and executed as soon as the device connects to the Internet. For Android commands you can set the Validity parameter to determine for how long an undelivered command remains valid.

Android (AMAPI) commands

For Android devices, the Commands panel includes a Validity field (value + unit) and a Command selector. Some commands require additional parameters, which appear dynamically when you select the command.

Common parameters

• Validity: how long the command is valid if it cannot be executed immediately.
• Command: choose which action to send to the device.

Commands with additional fields

• Reset password: requires New password and Confirm new password. Optional toggles include Lock now, Require entry, and Do not ask for credentials on boot.
• Clear app data: requires the target Package name.
• Start lost mode: requires a Lost message and supports optional contact fields (street address, organization, phone number, email).
• Wipe: supports a Wipe reason message (shown to users on personal devices) and optional wipe flags, including Wipe eSIMs.

The eSIM commands (Add eSIM, Remove eSIM, Request EID) are available in the dedicated SIMs management panel.

Command history

Below the send controls, the dashboard shows a command history table. The table is sortable and supports pagination. Some rows can be expanded to view additional parameters or execution details.

Android history columns

• Creation date
• Command
• Validity
• Status
• Error
• Execution date

Apple (MDM) commands

For Apple devices, the Commands panel provides a Command selector. Some commands require additional inputs. As with Android, a command history table is shown below.

Commands with additional fields

• InstallApplication: requires the application Bundle ID.
• SendNotification: requires a Notification message (maximum length 200 characters).

Apple history columns

• Creation date
• Command
• Status
• Status time

Refresh

Use the refresh action in the Commands panel to reload the command history.

Location map

This page documents the device-specific location tools available in Device overview. The panel contains a Location tab for position history and, on Android devices, a Geofence tab for geofence transitions.

Prerequisites

Device location data is shown only when location reporting is enabled in the device policy. To enable it, open the policy and turn on Location and geofence → Report location. For more details, see Location and geofence.

On devices that are not fully managed, location data may still depend on the Cerberus Enterprise app having the required location permissions and on location services being enabled on the device.

For the global multi-device map available from the dashboard, see Dashboard location map.

Loading and no-data state

• While location data is loading, the panel shows a loading overlay on the map.
• If the device has no location data available, the panel shows a message stating No location data available together with a reminder to enable location reporting in the assigned policy.
• If a date filter is active and no samples match it, the panel shows No data available in the selected date range.

Location tab

Open the Location tab to inspect the history for a single device. The available filters include the last known location, recent history ranges, a custom date range, and live tracking.

• Last: shows the last known location.
• Today, Last 7 days, and Last 30 days: show recorded locations for the selected period.
• Search: lets you choose a custom date range.
• Live: starts or stops live tracking for the current device.

Marker details

When you click a location marker, an information window opens with:

• The timestamp of the location record.
• The reported accuracy (in meters).
• The reported speed, when the device provides it.
• The reported heading or bearing, when the device provides it.

Accuracy circle

When the information window is open, an accuracy circle is displayed around the marker. The circle radius corresponds to the reported accuracy (in meters). Closing the information window hides the circle.

Live tracking

In the device history view, selecting the Live filter starts a real-time tracking request for that specific device. Cerberus Enterprise asks for confirmation before starting the request.

• Live tracking runs for up to 15 minutes.
• The device shows a notification while live tracking is active.
• While live tracking is active, the panel keeps refreshing the latest location and the live indicator stays visible.
• Selecting the live filter again lets you stop live tracking before the timeout ends.

Geofence tab

On Android devices, the second tab shows geofence transitions generated from the geofences defined in the assigned policy. This tab is available when geofence data exists for the device.

• The map shows the current geofence areas together with the recorded transition points.
• The transition list on the right lets you inspect enter and exit events.
• The available filters are Today, Last 7 days, Last 30 days, and a custom date-range search.
• Include archived also shows transitions related to old geofence definitions that are no longer present in the current policy.

Geofence transition details

Selecting a transition opens its details on the map and highlights the corresponding list entry. When available, Cerberus Enterprise also shows the device coordinates and reported accuracy for that transition.