- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Open API reference
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
Manage devices
Device information
The Devices tab in the sidebar of your Knox Asset Intelligence console is where you can perform all device-related actions.
The device list contains the following information. The table can be customized by clicking and selecting table columns to display, up to a maximum of 7.
- DEVICE ID — The device's unique identifier.
- DEVICE GROUP — The name of the group the device belongs to.
- MODEL — The device's model code.
- STATUS — The current status of the device.
-
PERMISSIONS — Indicates whether the device user has granted location permissions. If the device does not have location permissions, you can send a permission notification by clicking ACTIONS > Send permission notification.
IMPORTANT — If your devices are running Android 12 or higher, permissions are granted differently based on your device management mode.
For device owner (DO) deployments, EMMs can pre-grant location permissions during enrollment.
For work profile on company-owned device deployments, device users must manually grant location permissions through an alert in the notification panel before Knox Asset Intelligence can collect location data from the device. If the user denies location permissions, then Wi-Fi and location data can't be collected from their device.
- BATTERY STATUS — The device's current battery status.
- BATTERY SOH — The overall health of the device's battery.
Click a DEVICE ID to bring up a sliding panel with extended details, including a device summary, app, battery, and Wi-Fi connection information, as well as device logs. If a device hasn't reported new data to the Knox servers yet, you might not see some of these details in the console. As an example scenario, app information would be unavailable for a device if said device hasn't reported any app usage data. You can also search for a device or group by entering a device ID or group name in the search bar.
Uploads
The Uploads tab shows any Samsung devices you've purchased from a reseller, after the reseller uploads them to your console. On this tab, you can approve the uploads and add the devices to your device list. Ensure you've registered your reseller in the Knox Asset Intelligence console beforehand.
Device groups
Knox Asset Intelligence offers a GROUPS tab where you can view and manage your device group information.
The GROUPS list displays the following info:
- DEVICE GROUP — The name of the device group. Click a group name to open a sliding panel with fields to edit the group description and the list of managers.
- DESCRIPTION — A short phrase describing the group. For long descriptions, hover over the truncated description to see the full text.
- DEVICE COUNT — The number of devices in the group. Click a number to go to a filtered list of devices belonging to that group.
- MANAGERS — The number of managers assigned to the group, who are admins with permission to manage groups. Managers can receive alert emails when Wi-Fi or app stability events exceed the thresholds set for the device group.
- MODIFIED — The date and time the group was last edited.
There are two ways to upload device group information to Knox Asset Intelligence:
Using existing group IDs from an EMM
For organizations using VMware Workspace ONE UEM
Knox Asset Intelligence supports dynamically-generated group IDs, also referred to as lookup fields, that simplify the group syncing experience between Knox Asset Intelligence and VMware Workspace One UEM. Workspace ONE UEM provides lookup values that can be used instead of static group ID values, which represent an element of the device or user that you might not normally have access to.
For example, you might want to group several Galaxy XCover Pro devices together in Knox Asset Intelligence. Instead of creating a dedicated group in Workspace ONE UEM, you can select device model as a lookup field to find all XCover Pro devices in your fleet, which then auto-syncs to Knox Asset Intelligence as a device group.
Refer to VMware's documentation for a full list of supported lookup values.
On the Workspace ONE UEM console, once you define a standard or custom lookup field for group IDs, enter it in the Application Configuration menu for the Knox Asset Intelligence agent. Doing so sets the lookup field as a dynamically-generated group ID for each device. Note that the application configuration is pushed through Managed Google Play.
Once the application configuration is pushed to the enrolled devices, the Knox Asset Intelligence agent receives the group ID through VMware Hub and automatically assigns the device to the designated group. You can then see the device group and assignment on the Knox Asset Intelligence console.
For organizations using other EMMs
In other EMMs that don't support lookup fields, you can manually enter group IDs in the application configuration section.
Through a CSV upload
If your devices aren't grouped through an EMM or you prefer to manually define your device groups, you can upload a CSV file containing device IDs and group names to the Knox Asset Intelligence console.
To group devices:
- In the left sidebar of your Knox Asset Intelligence console, click Devices.
- On the Devices screen, select the GROUPS tab.
- To the right of the search bar, click GROUP DEVICES.
- On the Device grouping screen, download the CSV template. Enter a device IMEI and a venue name per line in the template (up to a maximum of 10,000 devices), then save your file.
-
Under Select .csv file*, click BROWSE to locate your CSV file in the file explorer.
- After selecting your file, click SUBMIT.
If one or more of your devices can't be enrolled, a notification is shown in the top-right corner with a download link to a CSV file containing error details.
This document was updated for Knox cloud services 23.03 UAT.
Device information
The Devices tab in the sidebar of your Knox Asset Intelligence console is where you can perform all device-related actions.
The device list contains the following information. The table can be customized by clicking and selecting table columns to display, up to a maximum of 7.
- DEVICE ID — The device's unique identifier. If the device supports two SIMs, only the primary IMEI (IMEI1) is shown, but you can search for the device using either IMEI.
- DEVICE GROUP — The name of the group the device belongs to.
- MODEL — The device's model code.
- STATUS — The current status of the device.
-
PERMISSIONS — Indicates whether the device user has granted location permissions. If the device does not have location permissions, you can send a permission notification by clicking ACTIONS > Send permission notification.
IMPORTANT — If your devices are running Android 12 or higher, permissions are granted differently based on your device management mode.
For device owner (DO) deployments, EMMs can pre-grant location permissions during enrollment.
For work profile on company-owned device deployments, device users must manually grant location permissions through an alert in the notification panel before Knox Asset Intelligence can collect location data from the device. If the user denies location permissions, then Wi-Fi and location data can't be collected from their device.
- BATTERY STATUS — The device's current battery status.
- BATTERY SOH — The overall health of the device's battery.
Click a DEVICE ID to bring up a sliding panel with extended details, including a device summary, app, battery, and Wi-Fi connection information, as well as device logs. If a device hasn't reported new data to the Knox servers yet, you might not see some of these details in the console. As an example scenario, app information would be unavailable for a device if said device hasn't reported any app usage data. You can also search for a device or group by entering a device ID or group name in the search bar.
Uploads
The Uploads tab shows any Samsung devices you've purchased from a reseller, after the reseller uploads them to your console. On this tab, you can approve the uploads and add the devices to your device list. Ensure you've registered your reseller in the Knox Asset Intelligence console beforehand.
Device groups
Knox Asset Intelligence offers a GROUPS tab where you can view and manage your device group information.
The GROUPS list displays the following info:
- DEVICE GROUP — The name of the device group. Click a group name to open a sliding panel with fields to edit the group description and the list of managers.
- DESCRIPTION — A short phrase describing the group. For long descriptions, hover over the truncated description to see the full text.
- DEVICE COUNT — The number of devices in the group. Click a number to go to a filtered list of devices belonging to that group.
- MANAGERS — The number of managers assigned to the group, who are admins with permission to manage groups. Managers can receive alert emails when Wi-Fi or app stability events exceed the thresholds set for the device group.
- MODIFIED — The date and time the group was last edited.
There are two ways to upload device group information to Knox Asset Intelligence:
Using existing group IDs from an EMM
For organizations using VMware Workspace ONE UEM
Knox Asset Intelligence supports dynamically-generated group IDs, also referred to as lookup fields, that simplify the group syncing experience between Knox Asset Intelligence and VMware Workspace One UEM. Workspace ONE UEM provides lookup values that can be used instead of static group ID values, which represent an element of the device or user that you might not normally have access to.
For example, you might want to group several Galaxy XCover Pro devices together in Knox Asset Intelligence. Instead of creating a dedicated group in Workspace ONE UEM, you can select device model as a lookup field to find all XCover Pro devices in your fleet, which then auto-syncs to Knox Asset Intelligence as a device group.
Refer to VMware's documentation for a full list of supported lookup values.
On the Workspace ONE UEM console, once you define a standard or custom lookup field for group IDs, enter it in the Application Configuration menu for the Knox Asset Intelligence agent. Doing so sets the lookup field as a dynamically-generated group ID for each device. Note that the application configuration is pushed through Managed Google Play.
Once the application configuration is pushed to the enrolled devices, the Knox Asset Intelligence agent receives the group ID through VMware Hub and automatically assigns the device to the designated group. You can then see the device group and assignment on the Knox Asset Intelligence console.
For organizations using other EMMs
In other EMMs that don't support lookup fields, you can manually enter group IDs in the application configuration section.
Through a CSV upload
If your devices aren't grouped through an EMM or you prefer to manually define your device groups, you can upload a CSV file containing device IDs and group names to the Knox Asset Intelligence console.
To group devices:
- In the left sidebar of your Knox Asset Intelligence console, click Devices.
- On the Devices screen, select the GROUPS tab.
- To the right of the search bar, click GROUP DEVICES.
- On the Device grouping screen, download the CSV template. Enter a device IMEI and a venue name per line in the template (up to a maximum of 10,000 devices), then save your file.
-
Under Select .csv file*, click BROWSE to locate your CSV file in the file explorer.
- After selecting your file, click SUBMIT.
If one or more of your devices can't be enrolled, a notification is shown in the top-right corner with a download link to a CSV file containing error details.