Create a Setup or Dynamic profile

Before creating a Knox Configure profile, decide which edition to use: Setup or Dynamic. After you choose the profile type, you can customize the settings in the Knox Configure dashboard. Ensure you have correctly specified the correct device type, as phones and tablets utilize different licenses and somewhat different settings than Knox wearable devices.

To create a new profile, click Profiles in the navigation menu on the Knox Configure console, then click CREATE PROFILE in the upper-right corner of the screen.

Select a device type

First, select the type of device you want to create a profile for. The available configurations for phone and tablets are different from those available for wearable devices, so ensure you've chosen the correct device type.

Select an edition

Select the profile edition type to use with the phone or tablet. To learn more about the difference between Setup and Dynamic edition profiles, click Feature Comparison Table at the bottom of the screen for a full list of the features available with each profile edition.

When choosing between Setup and Dynamic edition profiles, keep in mind that device-side factory resets and reboots can only be enabled on Dynamic edition Knox Configure profiles and only when the device is in a Configured, Update pushed, or Failed to configure state.

Setup edition

The setup edition is primarily designed for marketing admins to stage devices for re-branding for their customer's out-of-box deployments. The Setup edition features:

• Over-the-air configuration — Devices turn on automatically when connected to power and receive their configuration profiles over-the-air.
• Out-of-the-box profile activation experience — Automatically provision, enroll, and configure corporate devices during initial setup and again after a factory reset.
• Rebranded software — Install specific applications automatically over-the-air and prevent users from removing specific apps. Seamlessly change app icons and names. Launch specific apps when a device boots.

The Setup edition allows you to deploy settings and profiles once with no additional incremental updates. To change a device configuration after initial policies are set, devices must be factory reset and the new policies must be reapplied. The Setup edition includes:

• Options to customize the device home screen and lock screen.
• The ability to deploy company-branded booting and shutdown animation files.
• DeX support on supported device platforms.
• APN support for creating a gateway between a carrier providing 2G, 3G, or 4G mobile network service and the mobile device.

• Connectivity settings including:

  • Wi-Fi
  • Bluetooth
  • Location
  • NFC
  • Airplane mode
  • Mobile Data
  • USB Connection
  • Advanced Wi-Fi

Self-uninstall the Knox Configure agent

When creating or setting up profiles in the Setup edition of Knox Configure (KC), you can choose to set a self-uninstall flag that allows the KC agent to automatically uninstall after profile configuration is complete. You can specify whether this functionality is available on the device when you set up or modify the profile. This feature primarily helps minimal use cases where a full set of permissions is not needed, such as rebranding or minor configuration changes. The process works as follows:

1. On the KC console, when setting up a new profile, select Self-uninstall. If this option is selected, the KC console only shows reduced options in the console.
2. Depending upon the options selected, KC applies the device configuration to the target device.
3. Upon successful implementation of the device configuration, the KC agent is automatically uninstalled.
4. For devices that require a factory reset as part of device configuration prior to the license expiration, the KC agent uninstalls itself after the device resets and successfully includes the device configuration options.

Dynamic edition

The Dynamic edition is mainly designed for marketing admins to stage devices for re-branding their own customers out-of-the box. The Dynamic edition features:

• Purpose-built appliance — Transform an off-the-shelf device into a business Kiosk by locking down the device to specific apps. Users are prevented from accessing Settings. System notifications can be optionally hidden. Users can return to normal mode at any time using a predefined passcode.
• Advanced device configuration capability — Disable specific functionality such as factory resets, using the camera, capturing the screen, and accessing Settings during the initial setup or profile update process. Specific applications or specific URLs from apps can be allowed or disallowed.
• Robust device updates — Periodically push profile updates seamlessly over-the-air.

The Dynamic edition allows you to dynamically push updates for settings, content, and apps. In addition to all of the features in the Setup edition, the Dynamic edition also includes:

• ProKiosk mode — Create a special-purpose device by managing the following settings:

  • Status bar — Show or hide the entire status bar, clock, or system icons.
  • Input method — Prevent the user from changing the input method.
  • Power dialog exit UI — Determine the menu items that appear when the user long presses the power button.
• Allow and block apps — Allow or deny users from installing specific apps.
• Shared devices — Allows multiple users to use the same device without sharing data and files.

Select a configuration

After selecting which edition of Knox Configure you want to use, select a Configuration to determine which features are made available when setting up the device.

Normal mode

Normal mode allows the device to run as a phone or tablet as intended, but with specific settings applied by Knox Configure. Normal mode is the configuration option with the most robust feature set.

For more information, see Setup edition or Dynamic edition: Normal mode.

ProKiosk mode

ProKiosk mode restricts the device to a specific set of preselected applications. Designed for business use cases where access to the entire system is unnecessary or undesired, ProKiosk mode devices can also be configured to restrict access to Settings and hide system notifications from users.

ProKiosk mode is only available for Dynamic edition profiles. For more information, see ProKiosk mode.

Samsung Kids mode

Samsung Kids mode makes the device kid-friendly by allowing parents to block content, set time limits on device usage, and limit access to contacts and apps. As a built-in configuration on all Samsung devices running Android 9 and higher, this mode can be enabled through the Quick Panel dropdown and disabled by a parental control password.

For more information, see Samsung Kids mode.

Use a profile template

IT admins in specific sectors, such as education, finance, and healthcare, sometimes need to set up and configure devices and user profiles on a large scale. By using a profile template, you can create your profile with the recommended configurations for your particular industry preset to save time. Using the profile template as a starting point, IT admins can test features and configuration settings before creating custom profiles to meet their specific requirements.

To use a profile template, select Use recommended configurations below the configuration you've selected, then click Next. If the industry you selected when you signed up for your Samsung Knox account is available as one of the options, that industry is highlighted as the largest box.

Some of the settings prepopulated for each industry are as follows:

• Education — Set up devices quickly for students or teachers by configuring recommended education settings to enhance their learning and teaching experience as well as restricting harmful information.
• Healthcare — Set up devices quickly for medical workers or B2B2C subscribers by configuring recommended healthcare settings to ensure your customized branded devices are secure and stable.
• Finance — Set up devices quickly for finance workers by configuring recommended finance settings to keep devices secure and stable.

If you choose to use a profile template, the Profile summary screen opens, where you can review the preconfigured settings you selected. Enter your Company name, as well as a support Phone number and Email address for users to reach out to if they run into any issues. Once you're finished, click SUBMIT to save the new profile.

If you don't use a profile template, you'll need to set up the device profile manually. Depending on the configuration you've selected, follow the configuration instructions for Setup edition, Normal mode, or ProKiosk mode.