Enforcing Android Encryption.

Question

Hey all, I've been beating my head against my desk trying to figure out how to get Sophos MDM to enforce android phone encryption. The only configurations I have available to me is: Password Policies, Restrictions, App Protection, App Control, Exchange ActiveSync, Wi-Fi, VPN, Root Certificates, Client Certificate. None of which from what I can tell enforce device encryption. I'm running Sophos MDM v 4.0.3.3

Any and all help is much appreciated!

This thread was automatically locked due to age.

SDU · Accepted Answer

Hi RichKCE,

with SMC 4.0 the Android Encryption is a bit tricky to find. With SMC 5.0 it is part of the "Restrictions" profile.

But with SMC 4, you have to follow at first these steps:

1. Log on to the SMC web console

2. Go to "Settings | General"

3. Within the "Personal" tab enable "Enable command bundles (expert mode)"

4. Save the changes

5. A new section "Command bundles" appears on the left hand side

6. In there, create a new bundles with the "androidSetStorageEncryption" command

7. Deploy that bundle to your device(s)

Hope this helps.

Best regards
Stefan