View device states
Last updated July 25th, 2025
The Knox Admin Portal dashboard includes the Device alerts module, which provides you with insight into which devices in the portal may need your attention.
The following table describes the possible states your device can be in, separated by service.
| Knox service | Device state | Description |
|---|---|---|
| Knox Mobile Enrollment | Unassigned | No profile is assigned to the device. |
| Failed to assign | The profile couldn't be assigned to a device. Review the profile details and try to assign it to the device again. | |
| Profile assigned | A profile is assigned to the device, but the device user hasn't completed the enrollment process yet. Unassigning the profile changes the device state back to Unassigned. | |
| Cancelled by user | The device wasn't enrolled because the device user cancelled the process. | |
| Failed to provision | After you assigned a profile, the device wasn't enrolled for a reason other than the device user canceling the enrollment. | |
| Provisioned | The device is successfully enrolled by the device user. In case of an Advanced Profile, the profile's EMM enrollment and device settings are applied, and Advanced Profile functionality is available. If an enrollment profile does not include an EMM — only includes Knox E-FOTA or Knox Asset Intelligence — the final status shown for the device is Profile assigned. To further check if the device is successfully provisioned into Knox E-FOTA or Knox Asset Intelligence, refer to the Devices page for the respective service |
|
| Provision (restricted) | If the device you assigned the Advanced Profile to doesn't have an active Knox Suite - Enterprise Plan, or its license has no available seats left, only the profile's EMM enrollment and device settings are applied. Advanced Profile functionality isn't available. | |
| License expired | If your Knox Suite - Enterprise Plan has expired, the device will lose all access to the advanced settings. | |
| Knox Manage | Disconnected | If a device enrolled in Knox Manage doesn't connect to the server for the specified period, the device's status is set to Disconnected. Use this status to find devices that are lost or out of EMM control. |
| Profile not applied | The profile wasn't applied to the device correctly. Check whether a profile is assigned to the device, or submit a support ticket if the error continues. | |
| Screen lock not compliant | The device's screen lock doesn't comply with your policy setting. Set a screen lock policy in Profile > Android Enterprise > Password. | |
| Knox E-FOTA | Awaiting download | Knox E-FOTA is waiting for firmware download conditions to be met. This can be due to firmware download timeframe, download network restrictions, or insufficient device storage. |
| Awaiting install | Firmware has successfully downloaded, and Knox E-FOTA is waiting for installation conditions to be met. This can be due to firmware install timeframe, charging and battery restrictions, or insufficient device storage. | |
| Campaign error | An unexpected error occurred when the latest campaign was applied. Try to force a client refresh, then apply the campaign again. | |
| Enrolled | The device is enrolled, but no active campaign is assigned to it. | |
| Failed to download | The firmware wasn't downloaded to the device, possibly due to network issues. Check the device's status and force a client refresh if needed. | |
| Failed to enroll | Device couldn't enroll to Knox E-FOTA, check that your license is valid. | |
| Failed to install | The firmware wasn't installed on the device. Check the status of the device and force a client refresh if needed. | |
| Higher firmware version | The device's current firmware version is already higher than the firmware assigned to it in the campaign. | |
| In-progress (downloading) | The firmware is currently downloading on the device. | |
| In-progress (installing) | The firmware is currently installing on the device. | |
| Invalid firmware version | The assigned target firmware is invalid and wasn't downloaded to the device. Check the status of the device and force a client refresh if needed. | |
| Locked firmware version | A campaign is active and the device is locked to its current firmware version. | |
| Client not enrolled | Device is not enrolled. Either client is not installed or license is invalid. | |
| Reverting | After a test campaign, the device is reverting from the dummy firmware back to the regular firmware. | |
| Updated | Device update has completed. | |
| Knox Asset Intelligence | Active | The device is enrolled and currently communicating with the Knox Asset Intelligence server. |
| Expired | The license expired, so the device is not reporting any data. | |
| Failed to enroll | The device encountered an error during enrollment. Check whether the license is valid and if the device's Knox version is supported. For more information, see the device details. | |
| Inactive | The device stopped communicating with the server for more than 7 days in a row. Check whether the device is powered off or disconnected from a network. | |
| Client not enrolled | The device was uploaded to the console, but is not yet enrolled in Knox Asset Intelligence. Try enrolling the device. | |
| Knox Configure | Cancelled by user | The device user skipped the device profile configuration. It must be restarted to configure the device. |
| Configured | The configuration was successfully applied to the device. | |
| Deactivated temporarily | The device has been temporarily deactivated by the IT admin to review and assess an issue before the device is activated again. | |
| Error | A problem was encountered during device configuration rendering. For more information, see Configuration errors. | |
| Exchanging | The device had its device ID swapped. This device needs its profile re-assigned and updated back to an Assigned state. | |
| Failed | The device configuration failed. | |
| Failed to configure | The configuration wasn't applied to the device. Try again, or submit a support ticket if the error continues. | |
| In Progress | A device profile assignment has been made and the subsequent device configuration is in progress and pending completion. | |
| Locked | The device is locked in Knox Configure. Either you can unlock the device or the device user can input the provided password. Locked devices remain in their locked state even after the device’s profile is unassigned. | |
| Profile assigned | A profile was assigned to the device, but the device is yet to be configured. For example, the device may not have been powered on since a profile has been assigned. | |
| Unassigned | The device is uploaded to Knox Configure, but there are no profiles yet assigned or a previously applied profile has been unassigned. | |
| Updates pushed | A profile update has been pushed to the device, but the device is still processing the update. | |
| Knox Guard | Locked | The device was successfully locked by an admin. |
| Samsung Care+ for Business | Active | The device is registed with the insurer. |
| Active Pending | The device is being registered to the insurer's system. You'll receive a notification once the registration is complete. | |
| Approved | The device was approved, but you still need to assign it a license for Samsung Care+ for Business coverage. | |
| Pending | A reseller uploaded a device that's awaiting your approval. | |
| Cancelled | The license is cancelled. | |
| Expired | The license is expired. | |
| Failed | The license couldn't be applied to an approved device. |
Is this page helpful?