This section describes how to use the tools in the EMM groups tab to manage your EMM device groups.

Add or remove device groups

You can change which device groups are synced with your EMM at any time

To add or remove device groups:

1. On the EMM groups tab, click MANAGE EMM GROUPS.

   

2. On the next page:

   • Select the device groups you want to add to Knox E-FOTA.
   • Deselect the device groups you want to remove from Knox E-FOTA.

3. Click UPDATE E-FOTA GROUPS.

4. In the confirmation pop up, click UPDATE.

Enroll devices by EMM group

Perform this procedure if you want to enroll one or more device groups to Knox E-FOTA. This means that all devices in the device groups you select will be enrolled.

1. In the EMM groups tab, select the device groups you want to enroll.

2. Click Actions > Enroll devices in groups.

   The Select license popup shows the active licenses that have enough seats to accommodate all devices in you selected device group(s). If you want to see all licenses, click Clear Filters.

3. Select the license you want to use, and click Done.

Assign a device group to a campaign

Perform this procedure if you want to assign all devices in a device group to a campaign.

1. In the EMM groups tab, select the device groups you want to assign to a campaign.

2. Click Actions > Assign campaign.

   The Select campaign popup shows only the active and scheduled campaigns. If you want to see all campaigns (including expired ones), click Clear Filters.

   The Select license popup shows the active licenses that have enough seats to accommodate all devices in you selected device group(s). If you want to see all licenses, click Clear Filters.

3. Select the campaign to assign, and click Done.

Push a campaign to a device group

Perform this procedure if you want to push a campaign update to a device group. This is useful if you've modified an existing campaign and want to immediately apply the update to a device group.

1. In the EMM groups tab, select the device groups you want to push a campaign to.

2. Click Actions > Push campaign.

3. Click Push Now in the confirmation popup.

Manage group priority

Managing group priority is useful in cases where a device is included in multiple EMM groups. Assigning group priority allows you to specify which device group takes precedence in the event of a campaign conflict.

For example, device A is in both group1 and group2. If group1 is assigned to campaign1 and group2 is assigned to campaign2, which campaign is device A assigned to? The answer depends on which group has a higher priority.

To manage group priority:

1. On the EMM groups page:
• Click Actions > Manage group priority, or
• Click Manage all group priority.
2. Click one or more groups and reassign their priority using the upward or downward arrow.
3. Optionally click Move to Top or Move to Bottom actions on the top right to reassign the priority of one or more groups in one swift action.
4. Click Update groups priority.

EMM group auto-sync

As an IT admin, you can configure Knox E-FOTA to automatically sync any changes made to EMM groups. To do so, on the EMM groups tab:

1. Switch on the Auto-sync switch to immediately send a group sync request to your EMM.
2. Switch off the Auto-sync switch to disable the auto-sync process. EMM groups are no longer updated based on the pre-defined sync interval.

Moreover, the Auto-sync switch is switched off by default. The EMM group information is updated automatically, based on the sync interval shown beside the Next sync field. The interval defaults to 24 hours.

If the group sync is pending or if it fails, the switch is switched off and you must manually switch it on again to enable auto-sync.

EMM re-authentication

A banner at the top of your Knox E-FOTA console will notify you when devices fail to sync with the EMM. To reconnect them with the EMM:

1. Reset your client secret on the EMM console.
2. Click RECONNECT in the banner at the top of your Knox E-FOTA console.

   

3. Enter your new client secret to connect with your EMM, then click CONNECT AND SYNC DEVICES.

Also, as an IT admin, you can update your EMM connection credentials anytime:

1. On the EMM groups page, click Actions > Reconnect EMM > Click Connect if all the details are correct. Doing so initiates the EMM reconnection.
2. A toast notification confirms the outcome of the reconnection.

Policies to prevent accidental status changes when syncing from an EMM

Knox E-FOTA follows the following policies to ensure that any device you add individually is properly managed if you later sync that device through an EMM group:

1. When you add a device to Knox E-FOTA and then add its device group from an EMM to Knox E-FOTA, that device will keep its current status until the EMM group's initial status changes from Synced to something else.

   Example: You enrolled Device A to Knox E-FOTA and assigned it to Campaign A. On the EMM side, Device A is also a member of Group 1. When you add Group 1 to Knox E-FOTA, it will get the status Synced. Device A, however, will retain its Assigned status.

2. When an EMM group's status changes from the initial Synced status to something else, all its members will follow the new status.

   Example: Continuing the example above — if you assign Group 1 to Campaign B, all its members, including Device A, will also be assigned to Campaign B.

3. If an EMM group is explicitly unenrolled, all its members will also be unenrolled.

   Example: Continuing the example above — if you unenroll Group 1, all its members, including Device A, will also be unenrolled.

4. When you add a device to Knox E-FOTA and then add its device groups (multiple groups) from an EMM to Knox E-FOTA, the device will follow the policy of the group with the higher priority. Group priority is set in Knox E-FOTA.

   Example: You enrolled Device A to Knox E-FOTA and assigned it to Campaign A. On the EMM side, Device A is also a member of Group 1 and Group 2. When you add Group 1 and Group 2 to Knox E-FOTA, they will both get the initial status, Synced. Device A, however, will retain its Assigned status (following the first policy above).

   In this example, Group 1 has a higher priority than Group 2, so Device A will follow Group 1's policy. If you enroll Group 2 and assign it to Campaign B, Device A is unaffected. Since Group 1 is still in its initial Synced status, Device A will continue to retain its Assigned status.

   When you enroll Group 1 and assign it to Campaign C, Device A will also be assigned to Campaign C (following the second policy above).