Manage EMM groups

This section describes how to use the tools in the EMM groups tab to manage your EMM device groups.

Add or remove device groups

You can change which device groups are synced with your EMM at any time

To add or remove device groups:

1. On the EMM groups tab, click MANAGE EMM GROUPS.

   

2. On the next page:

   • Select the device groups you want to add to Knox E-FOTA.
   • Deselect the device groups you want to remove from Knox E-FOTA.

3. Click UPDATE E-FOTA GROUPS.

4. In the confirmation pop up, click UPDATE.

Enroll devices by EMM group

Perform this procedure if you want to enroll one or more device groups to Knox E-FOTA. This means that all devices in the device groups you select will be enrolled.

1. In the EMM groups tab, select the device groups you want to enroll.

2. Click Actions > Enroll devices in groups.

   The Select license popup shows the active licenses that have enough seats to accommodate all devices in you selected device group(s). If you want to see all licenses, click Clear Filters.

3. Select the license you want to use, and click Done.

Assign a device group to a campaign

Perform this procedure if you want to assign all devices in a device group to a campaign.

1. In the EMM groups tab, select the device groups you want to assign to a campaign.

2. Click Actions > Assign campaign.

   The Select campaign popup shows only the active and scheduled campaigns. If you want to see all campaigns (including expired ones), click Clear Filters.

   The Select license popup shows the active licenses that have enough seats to accommodate all devices in you selected device group(s). If you want to see all licenses, click Clear Filters.

3. Select the campaign to assign, and click Done.

Push a campaign to a device group

Perform this procedure if you want to push a campaign update to a device group. This is useful if you've modified an existing campaign and want to immediately apply the update to a device group.

1. In the EMM groups tab, select the device groups you want to push a campaign to.

2. Click Actions > Push campaign.

3. Click Push Now in the confirmation popup.

Manage group priority

Managing group priority is useful in cases where a device is included in multiple EMM groups. Assigning group priority allows you to specify which device group takes precedence in the event of a campaign conflict.

For example, device A is in both group1 and group2. If group1 is assigned to campaign1 and group2 is assigned to campaign2, which campaign is device A assigned to? The answer depends on which group has a higher priority.

To manage group priority:

1. In the EMM groups tab, click MANAGE ALL GROUP PRIORITY.

2. Use the arrow buttons to reorder the device groups by priority, where 1 has the highest priority.

   

3. Click UPDATE GROUPS PRIORITY.

Turn EMM group auto-sync on or off

As a super admin, you can configure Knox E-FOTA to automatically sync with any EMM group changes that are made.

1. In the EMM groups tab, in the top right corner, set the auto-sync switch to On to immediately send a group sync request to your EMM.
2. To disable auto-sync, set the switch to Off. EMM groups no longer update based on the pre-defined sync interval.

For new EMM instances, auto-sync is enabled by default, whereas existing EMM instances have auto-sync disabled. The group info automatically refreshes based on the sync interval shown beside Next sync, located above the toggle. By default, this value is set to 24 hours.

If the group sync is pending or if it fails, the switch is set to Off and you must enable it again to retry auto-sync.

EMM re-authentication

A banner at the top of your Knox E-FOTA console will notify you when devices fail to sync with the EMM. To reconnect them with the EMM:

1. Reset your client secret on the EMM console.
2. Click RECONNECT in the banner at the top of your Knox E-FOTA console.
3. Enter your new client secret to connect with your EMM, then click CONNECT AND SYNC DEVICES.

Policies to prevent accidental status changes when syncing from an EMM

Knox E-FOTA follows the following policies to ensure that any device you add individually is properly managed if you later sync that device through an EMM group:

1. When you add a device to Knox E-FOTA and then add its device group from an EMM to Knox E-FOTA, that device will keep its current status until the EMM group's initial status changes from Synced to something else.

   Example: You enrolled Device A to Knox E-FOTA and assigned it to Campaign A. On the EMM side, Device A is also a member of Group 1. When you add Group 1 to Knox E-FOTA, it will get the status Synced. Device A, however, will retain its Assigned status.

2. When an EMM group's status changes from the initial Synced status to something else, all its members will follow the new status.

   Example: Continuing the example above — if you assign Group 1 to Campaign B, all its members, including Device A, will also be assigned to Campaign B.

3. If an EMM group is explicitly unenrolled, all its members will also be unenrolled.

   Example: Continuing the example above — if you unenroll Group 1, all its members, including Device A, will also be unenrolled.

4. When you add a device to Knox E-FOTA and then add its device groups (multiple groups) from an EMM to Knox E-FOTA, the device will follow the policy of the group with the higher priority. Group priority is set in Knox E-FOTA.

   Example: You enrolled Device A to Knox E-FOTA and assigned it to Campaign A. On the EMM side, Device A is also a member of Group 1 and Group 2. When you add Group 1 and Group 2 to Knox E-FOTA, they will both get the initial status, Synced. Device A, however, will retain its Assigned status (following the first policy above).

   In this example, Group 1 has a higher priority than Group 2, so Device A will follow Group 1's policy. If you enroll Group 2 and assign it to Campaign B, Device A is unaffected. Since Group 1 is still in its initial Synced status, Device A will continue to retain its Assigned status.

   When you enroll Group 1 and assign it to Campaign C, Device A will also be assigned to Campaign C (following the second policy above).