Hi Timothy,

For Work Managed Device, for Samsung ELM devices, MobiControl enforces encryption as soon as an external SD card is mounted. For all other devices there currently is no way to enforce encryption, but we do have a Feature control to Disable Mounting an SD card so that you can block the user from adding one to the device if they want.

As for the Work Profile, it is always created on the device never on the SD Card, hence the work container is always encrypted but MobiControl has no control outside of the container.

Hope this helps answer the questions.

Let me know if you need more details.

Thanks

On any of the devices that I have setup as Android enterprise as a work managed device, it doesn't prompt or do anything else that would make me think it has encrypted the SD card. I can also remove the SD card and put it into another phone and I can read the data on it without issue which also makes me think the encryption isn't working.

Are these Samsung device enrolled as Android Enterprise?

Yes they are.

Which version of the Android Enterprise agent are you using on the device?

It is running version 13.5.1.1049

Do you have a support case open for this? If not, I would recommend creating one as I verified with the Android team that this is supposed to work as explained in the previous response.

You can log a case here: https://www.soti.net/services/log-a-case/

Ok, will log a case, thanks for the help.