Create a Setup or Dynamic profile

Before creating a Knox Configure profile, decide which edition to use: Setup or Dynamic. After you choose the profile type, you can customize the settings in the Knox Configure dashboard. Ensure you have correctly specified the correct device type, as phones and tablets utilize different licenses and somewhat different settings than Knox wearable devices.

Select an edition

NOTE — If you want to use a profile template (recommended configurations) instead of creating one from scratch, then Dynamic Edition is set by default.

Select the profile edition type to utilize with the phone or tablet. If unsure of the features and benefits of selecting setup versus dynamic edition profiles, select the Feature Comparison Table link at the bottom of the screen for a full listing of the features available within each profile edition.

When considering between Dynamic and Setup edition profiles, keep in mind device-side factory resets and reboots can only be enabled on Dynamic edition Knox Configure profiles, and only when the device is in a Configured, Update pushed or Failed to configure state.

Knox Configure select edition

To set the Knox Configure profile type:

  1. In the Knox Configure console, select Profiles from the left-hand navigation menu.
  2. Select the CREATE A PROFILE button on the upper right-hand side of the screen.
  3. Specify whether the profile is intended for a phone or tablet or will be used with a wearable device.

    NOTE — If you want to use a template based on your industry such as education, healthcare, or finance, click RECOMMENDED CONFIGURATIONS and select your industry. If the industry you selected during the Samsung Knox Account sign-up is in one of the options, it will be highlighted as the biggest box. After entering your company name and contact details, it will take you directly to Step 4: Assign and deploy a profile to a device. For more information on this feature, see Use a profile template.

    Select device type

  4. You are prompted to choose a SETUP EDITION or DYNAMIC EDITION profile type.
  5. When you have made your choice, click the SELECT button.
NOTE — Setup edition profiles are restricted from receiving a push update. A Dynamic profile can push update another Dynamic edition profile, and a Setup edition profile can push update a Dynamic edition profile. However, a Setup edition profile cannot update another Setup edition profile, nor can a Dynamic edition profile push update a Setup edition profile.

Setup edition

The setup edition is primarily designed for marketing admins to stage devices for re-branding for their customer's out-of-box deployments. The Setup edition features:

  • Purpose built appliance — Transform an off-the-shelf device into a business Kiosk by locking down the device to specific apps. Users are prevented from accessing the Settings menu. System notifications can be optionally hidden. Users can return to normal mode at any time using a predefined passcode.
  • Advance device configuration capability — Change regional settings such as country, language, time zone, and auto-time during initial setup or profile update. Enable/disable network settings such as Wi-Fi Bluetooth, GPS, and airplane mode.
  • Robust device updates — Remove unnecessary preloaded apps. Periodically push profile updates seamlessly, over-the-air.

The Setup edition allows you to deploy settings and profiles once with no additional incremental updates. To change a device configuration after initial policies are set, devices must be factory reset and the new policies must be re-applied. The Setup addition includes:

  • Options to customize the device home screen and lock screen
  • The ability to deploy company-branded booting and shutdown animation files.
  • DeX support on supported device platforms
  • APN support for creating a gateway between a carrier providing 2G, 3G, or 4G mobile network service and the mobile device
  • Connectivity settings including:

    • Wi-Fi
    • Bluetooth
    • GPS
    • NFC
    • Airplane mode
NOTE — A lock menu is now available for devices configured with a dynamic edition Knox Configure profile, and is no longer available for setup edition profiles. If some of the selected target devices are currently assigned a Setup edition profile, the lock menu is disabled until just Dynamic edition devices are selected for update.

Dynamic edition

The Dynamic edition is mainly designed for marketing admins to stage devices for re-branding their own customers out-of-the box. The Dynamic edition features:

  • Over-the-air configuration — Devices turn on automatically when connected to power and receive their configuration profiles over-the-air.
  • Out-of-the-box profile activation experience — Automatically provision, enroll, and configure corporate devices during initial setup and again after a factory reset.
  • Rebranded software — Install specific applications automatically over-the-air and prevent users from removing specific apps. Seamlessly change app icons and names. Launch specific apps when a device boots.

The Dynamic edition allows you to dynamically push updates for settings, content, and apps. In addition to the all features in the Setup edition, the Dynamic edition also includes:

  • ProKiosk mode — Create a special-purpose device by managing the following settings:

    • Status bar — Show or hide the entire status bar, clock, or system icons.
    • Input method — Prevent the user from changing the input method.
    • Power dialog exit UI — Determine the menu items that appear when the user long presses the power button.
  • Allow and block apps — Allow or deny users from installing specific apps.
  • Shared devices — Allows multiple users to use the same device without sharing data and files.

Provide profile information

In this section, provide some basic device profile information.

NOTE — The Knox Configure portal does not support these special characters (# / $ * % ^ & \ ( ) + ? { } [ ]). Ensure they are not utilized when inputting characters during profile creation.

General information

  • Knox version number — To locate a device's version number on the device itself, go to Settings > About device > Software info. It is important to select the correct version, as newer features are introduced frequently.


  • Profile name — Enter a name not already used by an existing profile within your organization.
  • Profile description — Use the optional field to provide an extended profile description to further distinguish this profile from others that may contain similar attributes.
NOTE — When defining a profile name, keep in mind the name is searchable parameter within the Profile screen's Search field.

Additional terms and conditions

Add additional terms and conditions

Enter the following information:

  • Title
  • Body
NOTE — Ensure you review the terms and conditions before submitting your profile. Once you've submitted your profile, you cannot edit the terms and conditions, even when deploying profile updates.

Enrollment screen

  • Company name
  • Address 1
  • Address 2
  • City
  • State
  • Country
  • Zip Code
  • Support phone number
  • Email

Enrollment settings

  • Skip Google, Samsung and Carrier setup screens — Ensures Google Android factory reset protection is removed and users cannot cancel enrollment.
  • Allow end users to cancel customization — If you don't select this option, devices automatically enroll in Knox Configure after the device profile has been approved.

Submitting profile information

Submitting a profile saves the changes to a profile's configuration on the Knox Configure portal. Submitting and pushing a profile saves the profile's configuration within the Knox Configure portal and then automatically pushing the profile update to applicable devices.

NOTE — The ability to submit and push a profile update is only available to dynamic edition profiles.
NOTE — Keep in mind when using additional services with Knox Configure — such as Knox Mobile Enrollment (KME) — if a device upload is approved for Knox Configure it is also automatically approved in KME, regardless of the KME upload approval setting.

If the EDIT button is selected to modify a profile configuration, but no updates are actually made, only the SUBMIT button will display because there are no changes to actually "push" to the device.

Select applications

Select relevant applications to utilize with your device profile.

  1. Highlight the applications you need.
  2. Click NEXT.
NOTE — For more information on selecting applications for a Setup, Dynamic or Kiosk based profile, refer to the following:
NOTE — For information on updating and replacing an existing device profile, go to:Updating an existing device profile.

QR code enrollment

An admin can enroll a device into KC using a QR code, in manner closely resembling how KME supports QR code enrollment currently, using either a reseller or via a direct upload.

  • Reseller upload flow — IMEIs need to be uploaded by the reseller and be assigned to a profile that has a QR code associated with it. This is the default method, but an but can also utilize the non-validated QR code enrollment option if needed.
  • Direct upload flow — For non-validated QR code enrollments, the device does not require a previous reseller upload. Devices can be directly enrolled without a primary device and KDA app.

Once configured and associated with a profile, a QR icon displays to the right of a listed profile within the KC profiles screen. When selected, additional QR code enrollment options can be defined. Refer to the following:

  • Also allow QR code enrollment for devices not uploaded by a reseller — Select this option if you anticipate the need to upload devices from non-resellers. Do not select if there are concerns about unauthorized usage of the QR code data to manipulate Wi-Fi connection data.

QR code enrollment is supported on both mobile devices and tablets, but wearable devices are not supported. Both Setup and Dynamic edition KC profiles are supported. No special license is required for QR code enrollment support in KC.

Use a profile template

IT admins in specific sectors, such as Education, Finance, and Healthcare, sometimes need to set up and configure devices and user profiles with more ease than currently offered in KC. Profile Template offers recommended configurations with default settings for a particular industry The profile template offered in KC is intended as a starting point for creating a profile and explains how to apply specific features in the KC console to configure the device's status. Using the profile template as a starting point, IT admins can test features and configuration settings before creating custom profiles to meet their specific requirements.

Select configuration and industry

Some of the settings prepopulated for each industry are as follows:

  • Education — Setup devices quickly for students or teachers by configuring recommended education settings to enhance their learning and teaching experience as well as restricting harmful information.
  • Healthcare — Setup devices quickly for medical workers or B2B2C subscribers by configuring recommended healthcare settings to have your customized branded devices secure and stable.
  • Finance — Setup devices quickly for finance workers by configuring recommended finance settings to keep devices secure and stable.

Select wallpaper

For step by step instructions on creating a profile, see Select an edition.