Menu

Assign and deploy a profile to a device

Using a web-based console, IT Admins create profiles with the device settings, restrictions, apps, and other content to deploy to groups of devices. After devices have been successfully enrolled into the enterprise, they receive device profiles via Wi-Fi or mobile data.

Once a profile is configured, it can be assigned to specific Knox Configure managed devices. Device assignment is the final step in the configuration process, though devices can be locked by carriers and resellers post deployment. Additionally, each Knox Configure managed device has its own Device details and Device log screens to assess its current configuration and event history. For more information, go to: Review device details and device logs.

Assign devices

Available devices display within the Devices screen, within the DEVICES tab. Unassigned devices available for profile assignment are designated as Unassigned within the STATUS column. To list all devices, regardless of their state, refer to the CLEAR FILTER option at the bottom of the STATUS column drop-down menu. Select target devices to receive a specific profile as needed.

The Devices screen contains the following two tabs:

  • UPLOADS — View devices organized by reseller uploads. Approve uploads and assign profiles as needed for specific deployments. Manage tags for logical sorting and filtering or export device uploads to a CSV file for archive. When needed, devices can now use a maximum of 5 tags each for more refined filtering. If necessary, use the UPLOADS tab Search function to search for individual reseller names. Only the reseller name can be searched within this screen.
  • DEVICES — View all device uploads in their various profile assignment states. Optionally, you can search with various filters. Enterprise edition devices will have an Enterprise Edition tag appended to them. If necessary, use the DEVICES tab Search function to search for individual DEVICE IDs, PROFILES, MODELS and TAGS.
NOTE - The ability to submit and push a profile update is only available to dynamic edition Knox Configure profiles. The device must also be in a configured state.
NOTE - If you would like to leave feedback to the Samsung Knox KC team about your device deployment experience, go to: Providing KC feedback.

Assign automatically on upload by reseller

Profile assignment can be automated if you have created the profiles you need and match them to a reseller and devices. For this purpose, you can create a profile alias which is a user-friendly name for your existing profile. This alias can be shared with the reseller who, on uploading your devices, can match device with the alias. The devices are then auto-assigned the matching profile.

NOTE—If you have created a default profile for the reseller, the profile used by alias takes precedence over that.
NOTE—A profile can be associated with one or more aliases.
NOTE—Profile aliases need not to be unique across resellers (same alias can be used by two or more resellers for different profiles), but it should be unique for a single reseller (the alias can't map to two profiles for a single reseller). For a single reseller, there can be a maximum of 10 aliases.
NOTE—If the license associated with the alias is expired or if its seat count is 0, profile assignment for that alias will be disabled automatically.

Create a profile alias

To create a profile alias:

  1. Go to Resellers tab.
  2. Select a reseller.
  3. In the Manage reseller preferences window, click ⨁ ADD ANOTHER PROFILE TO AUTO ASSIGN.
  4. Select the profile, license, and a corresponding alias. The alias can be any alphanumeric value.
  5. Add more profiles if you want, there can be a maximum of ten.
  6. Click SAVE.

View devices corresponding to an alias

The devices assigned a profile using an alias will have the alias as a tag. To see all the devices for an alias, you can filter the items accordingly in the Devices screen. You can also see it in the Device details screen for an individual device.

Unassign a device from a profile

When unassigning a device from a profile, be aware that an admin is unable to manage the device until after a profile is configured again. An admin is also unable to send push updates until a new profile assignment is made.

A device can be unassigned from its assigned profile when:

  • A customer manually un-assigns the device from its profile
  • The device is using a staggered license, and the service period has ended
  • The device is using a non-staggered license, and the 30-day license expiration grace period has ended

Additionally, when a device is unassigned from its profile, the following now occurs regardless of profile type:

  • The KC server sends a push update to revoke policies
  • The KC client keeps apps and content
  • The KC client will not be uninstalled
  • A factory reset is allowed

Devices can be unassigned from the DEVICES screen when the selected device is in a Profile assigned, Error, Canceled by user, Configured, Failed to configure, or Updates pushed state.

To unassign a device from its current profile assignment from the KME DEVICES screen:

  1. Select Profiles from the left-hand navigation menu.
  2. Select the link of the target profile.
  3. Select DEVICES from the Profile configuration dashboard.
  4. Select the checkbox of the target device you intend to unassign from its current profile.
  5. Select Unassign devices from the ACTIONS drop-down menu.

  6. Review the warning statement within the Unassign profile screen, then click Confirm to proceed.

Delete a profile

To delete a profile from the list available for device assignment:

  1. Select Profiles from the left-hand navigation menu.
  2. Select a target profile to delete from amongst those listed.

  3. Select Delete profile(s) from the ACTIONS drop-down menu.

  4. Review the deletion confirmation message, then select DELETE to proceed with the deletion.
NOTE - If the profile has been selected for auto assignment for reseller uploaded devices, it's a default profile. A prompt will appear in the confirmation message to notify the admin that a default profile is being deleted.

NOTE — If a profile is assigned to a device, the option to delete the profile is unavailable. Ensure the profile isn't assigned to a device prior to deleting.

Change profile assignment

When a configured device profile is changed or updated, a profile push update is made automatically regardless of the profile edition.

An update to Knox Configure now restricts Setup edition profiles from receiving a push update. A Setup edition profile can no longer update another Setup edition profile, nor can a Dynamic edition profile push update a Setup edition profile.

To change a device's existing profile assignment:

  1. Select Profiles from the left-hand navigation menu.
  2. Select the check box of an existing profile to update the device's current profile assignment. Keep in mind, the selected replacement profile needs to support the same device model.
  3. Select Assign devices from the ACTIONS drop-down menu.
  4. NOTE — The Assign devices with Profile screen displays devices with the same model number as those utilizing the profile. By default, the Status column has a filter applied and only devices with an Unassigned status display. If there are no unassigned devices, the table lists devices with other statuses, but only with the same valid model number.
  5. Select the checkboxes of the target device(s) intended to receive the profile push update.

  6. Select the SUBMIT button from the Assign Devices With Profile screen to proceed with the device profile update.

  7. NOTE — A Change assigned profile screen may display stating a portion of the selected devices are currently assigned a different profile, or a different version of the same profile. The screen states these selected devices will unassigned from their previous profiles and updated with your selected the selected profile upon confirmation.
  8. If displayed, optionally select the Push update without requesting end user consent to push the updates directly to the assigned devices without consent from the device end user. Leave this option unselected affords the device user the ability to approve the profile update before its pushed to their device.
  9. Select Confirm to proceed with the device push update and profile overwrite. Select Back to move back to the previous Assign devices with profiles screen.
NOTE — A profile upload could potentially contain devices with different model numbers and statuses. In this case, profiles supporting the different model numbers can be selected from separate device model drop-down menus. Each drop-down menu contains only relevant profiles for the listed device model. Select Submit once profiles are selected for all device models.

Push a profile update

To push an update to an existing profile:

NOTE — Keep in mind when using additional services with Knox Configure—such as Knox Mobile Enrollment (KME)— if a device upload is approved for Knox Configure it is also automatically approved in KME, regardless of the KME upload approval setting.
  1. Select Profiles from the left-hand navigation menu.
  2. Select the check boxes of the target device(s) to receive the profile push update.
  3. Select Push update from the ACTIONS drop-down menu.
  4. Select Push update without requesting end user consent to push updates directly to the assigned devices without consent from the device user.
  5. Select the PUSH NOW button to proceed with the device profile update.

Push an update without requesting end user consent

When an IT admin wants to push a profile to update an application or to change a configuration, they may do so by selecting the silent update option. By using this option, the user can still keep using their device while the IT admin makes the change or update. Once the update is made, IT admins can also check the status of the update without having to configure the user interface.

Background push updates

This enhancement enables an IT admin or system integrator to push an updated profile or application to devices without any related UI displaying on the target device. This enables the device user to continue to use their device without interruption, as profile or application updates occur in the background.

Enroll devices using the Knox Configure portal

To enroll devices using Knox Configure:

NOTE - To reduce the labor required with large deployments, a device profile push can be completed by the end user pressing FINISH on their device, or after a 5 second auto-timer expiration. The device FINISH and RESTART buttons still display, but there is a 5 second timer to complete the action with less user input. If there is no user input after the 5 second timer countdown, the device screen automatically moves to the device home screen or restarts.
  1. Turn on the device and go through the device setup procedures.
  2. If you have not done so already, connect to a Wi-Fi network. Knox Configure prompts you to begin the device enrollment process.
  3. Tap Continue. Read the EULA and tap Agree to enroll the device.
  4. The following processes occur:
    • The device downloads the Knox Configure profile
    • If apps are in the profile, the device downloads and installs those apps
    • Knox Configure activates a license
    • The device downloads other required content
  5. When the device is successfully enrolled, a confirmation screen displays. If the device has been configured as a ProKiosk, a device reboot is required.

Push a reboot/factory reset command

IT admins can push a reboot or factory reset command to devices from the Knox Configure portal. This feature is available to both Setup and Dynamic profiles, and can be pushed to specified devices selected by an admin, or as a bulk action using a CSV file. A reboot push command can be triggered by an admin without the device user's consent.

Reboot/factory reset a single device

  1. Select Profiles from the left-hand navigation menu.
  2. Click on the target profile.
  3. Select DEVICES from the Profile configuration dashboard.
  4. Select the checkboxes of the target device(s) intended to receive the reboot/factory reset command push.
  5. Select Reboot or factory reset device(s) from the ACTIONS drop-down menu.
  6. Select one of the following two options:
    • Reboot devices(s) — The device will be reset and maintain configurations previously set by the IT admin.
    • Factory reset device(s) — The device will be reset to factory standard specifications. This means that the device will have no restrictions or customization once reset and will need to be configured again.
  7. Select CONFIRM.

Bulk reboot/factory reset

  1. Select BULK ACTIONS from the left-hand navigation menu.
  2. Select REBOOT/FACTORY RESET DEVICES from the Bulk actions menu.
  3. Follow the directions for STEP 1:
    • Upload the device list using the CSV file template.
    • Click Browse and select the target CSV file for upload.
  4. For STEP 2, select one of the following two options:
    • Reboot devices(s) — The device will be reset and maintain configurations previously set by the IT admin.
    • Factory reset device(s) — The device will be reset to factory standard specifications. The device will have no restrictions or customization once reset and will need to be configured again.
  5. Select SUBMIT.
  6. Select CONFIRM after reviewing the content of the warning notification window.