- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Knox Guard REST API
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
This section describes how to use the tools in the EMM groups tab to manage your EMM device groups.
Add or remove device groups
You can change which device groups are synced with your EMM at any time
To add or remove device groups:
-
On the EMM groups tab, click MANAGE EMM GROUPS.
-
On the next page:
- Select the device groups you want to add to Knox E-FOTA.
- Deselect the device groups you want to remove from Knox E-FOTA.
-
Click UPDATE E-FOTA GROUPS.
- In the confirmation pop up, click UPDATE.
Enroll devices by EMM group
Perform this procedure if you want to enroll one or more device groups to Knox E-FOTA. This means that all devices in the device groups you select will be enrolled.
- In the EMM groups tab, select the device groups you want to enroll.
-
Click Actions > Enroll devices in groups.
The Select license popup shows the active licenses that have enough seats to accommodate all devices in you selected device group(s). If you want to see all licenses, click Clear Filters.
-
Select the license you want to use, and click Done.
Assign a device group to a campaign
Perform this procedure if you want to assign all devices in a device group to a campaign.
- In the EMM groups tab, select the device groups you want to assign to a campaign.
-
Click Actions > Assign campaign.
The Select campaign popup shows only the active and scheduled campaigns. If you want to see all campaigns (including expired ones), click Clear Filters.
The Select license popup shows the active licenses that have enough seats to accommodate all devices in you selected device group(s). If you want to see all licenses, click Clear Filters.
-
Select the campaign to assign, and click Done.
Push a campaign to a device group
Perform this procedure if you want to push a campaign update to a device group. This is useful if you've modified an existing campaign and want to immediately apply the update to a device group.
- In the EMM groups tab, select the device groups you want to push a campaign to.
-
Click Actions > Push campaign.
-
Click Push Now in the confirmation popup.
Manage group priority
Managing group priority is useful in cases where a device is included in multiple EMM groups. Assigning group priority allows you to specify which device group takes precedence in the event of a campaign conflict.
For example, device A is in both group1 and group2. If group1 is assigned to campaign1 and group2 is assigned to campaign2, which campaign is device A assigned to? The answer depends on which group has a higher priority.
To manage group priority:
- On the EMM groups page:
- Click Actions > Manage group priority, or
- Click Manage all group priority.
- Click one or more groups and reassign their priority using the upward or downward arrow.
- Optionally click Move to Top or Move to Bottom actions on the top right to reassign the priority of one or more groups in one swift action.
- Click Update groups priority.
EMM group auto-sync
As an IT admin, you can configure Knox E-FOTA to automatically sync any changes made to EMM groups. To do so, on the EMM groups tab:
- Switch on the Auto-sync switch to immediately send a group sync request to your EMM.
- Switch off the Auto-sync switch to disable the auto-sync process. EMM groups are no longer updated based on the pre-defined sync interval.
Moreover, the Auto-sync switch is switched off by default. The EMM group information is updated automatically, based on the sync interval shown beside the Next sync field. The interval defaults to 24 hours.
If the group sync is pending or if it fails, the switch is switched off and you must manually switch it on again to enable auto-sync.
EMM re-authentication
A banner at the top of your Knox E-FOTA console will notify you when devices fail to sync with the EMM. To reconnect them with the EMM:
- Reset your client secret on the EMM console.
- Click RECONNECT in the banner at the top of your Knox E-FOTA console.
- Enter your new client secret to connect with your EMM, then click CONNECT AND SYNC DEVICES.
Also, as an IT admin, you can update your EMM connection credentials anytime:
- On the EMM groups page, click Actions > Reconnect EMM > Click Connect if all the details are correct. Doing so initiates the EMM reconnection.
- A toast notification confirms the outcome of the reconnection.
Policies to prevent accidental status changes when syncing from an EMM
Knox E-FOTA follows the following policies to ensure that any device you add individually is properly managed if you later sync that device through an EMM group:
-
When you add a device to Knox E-FOTA and then add its device group from an EMM to Knox E-FOTA, that device will keep its current status until the EMM group's initial status changes from Synced to something else.
Example: You enrolled Device A to Knox E-FOTA and assigned it to Campaign A. On the EMM side, Device A is also a member of Group 1. When you add Group 1 to Knox E-FOTA, it will get the status Synced. Device A, however, will retain its Assigned status.
-
When an EMM group's status changes from the initial Synced status to something else, all its members will follow the new status.
Example: Continuing the example above — if you assign Group 1 to Campaign B, all its members, including Device A, will also be assigned to Campaign B.
-
If an EMM group is explicitly unenrolled, all its members will also be unenrolled.
Example: Continuing the example above — if you unenroll Group 1, all its members, including Device A, will also be unenrolled.
-
When you add a device to Knox E-FOTA and then add its device groups (multiple groups) from an EMM to Knox E-FOTA, the device will follow the policy of the group with the higher priority. Group priority is set in Knox E-FOTA.
Example: You enrolled Device A to Knox E-FOTA and assigned it to Campaign A. On the EMM side, Device A is also a member of Group 1 and Group 2. When you add Group 1 and Group 2 to Knox E-FOTA, they will both get the initial status, Synced. Device A, however, will retain its Assigned status (following the first policy above).
In this example, Group 1 has a higher priority than Group 2, so Device A will follow Group 1's policy. If you enroll Group 2 and assign it to Campaign B, Device A is unaffected. Since Group 1 is still in its initial Synced status, Device A will continue to retain its Assigned status.
When you enroll Group 1 and assign it to Campaign C, Device A will also be assigned to Campaign C (following the second policy above).