Knox Configure

Audience

This document is intended for:

• IT Admins — Admins create profiles with the device settings, restrictions, apps, and other content to deploy to groups of devices. After devices have been successfully enrolled in the enterprise, they receive the Knox Configure device profile via a Wi-Fi or mobile data connection.
• Resellers — Resellers bulk upload devices on behalf of requesting customers.

About Knox Configure

Knox Configure is available in separate editions:

Prerequisites

Following prerequisites must be satisfied to use Knox Configure:

1. Supported phones, tablets or wearable devices purchased from a participating reseller in the Knox Deployment Program. If you are not sure whether your reseller is participating in the program, contact the reseller or a Samsung Sales Representative for more information.

2. The appropriate Knox licenses purchased from a Knox Reseller (for commercial deployment).

3. A Knox account. For more information, see Sign up for Knox Configure.

4. The correct firewall exemptions needed to extend beyond your local and protected network domain and securely connect to the Knox Configure server. For more information, see Knox Configure firewall exceptions.

5. A supported browser (Edge, Firefox, or Chrome).

The deployment process

Using a web-based console, you can create profiles with the device settings, restrictions, apps, and other content to be deployed to groups of devices. After devices have been successfully enrolled in the enterprise, you receive device profiles via Wi-Fi or mobile data. This following image outlines the deployment flow:

Once a profile is configured, it can be assigned to specific Knox Configure enrolled devices. Device assignment is the final step in the configuration process, though devices can be locked by carriers and resellers post deployment. For more information, see Assign and deploy a profile to device.

See Knox Configure Accessories for more information on how Accessory edition in Normal mode enables a user to configure their device by scanning an accessory.

Device states

Devices that are submitted to Knox Configure progress through the following states when assigned profiles and configurations are pushed to the device:

• Unassigned — The device is uploaded to Knox Configure, but there are no profiles yet assigned or a previously applied profile has been unassigned.

• Profile assigned — A profile was assigned to the device, but the device is yet to be configured. For example, the device may not have been powered on since a profile has been assigned.

• In progress — A device profile assignment has been made and the subsequent device configuration is in progress and pending completion.

• Error — A problem was encountered during device configuration rendering. For more information, see Configuration errors.

• Canceled by user — The device user has skipped the device profile configuration. It must be restarted to configure the device.

• Configured — The device has successfully received Knox Configure profile or the profile update has been pushed successfully.

• Failed to configure — Device has failed to receive the profile, or a profile update was not successfully pushed.

• Updates pushed — A profile update has been pushed to the device, but the device is still processing the update.

• Locked — The device is locked in Knox Configure. Either you can unlock the device or the device user can input the provided password. Locked devices remain in their locked state even after the device’s profile is unassigned.

• Exchanging — The device had its device ID swapped. This device needs its profile re-assigned and updated back to an Assigned state.

• Deactivated temporarily — The device has been temporarily deactivated by the IT admin to review and assess an issue before the device is activated again.