Assign and deploy a profile to a device

Using a web-based console, IT Admins create profiles with the device settings, restrictions, apps, and other content to deploy to groups of devices. After devices have been successfully enrolled into the enterprise, they receive device profiles via Wi-Fi or mobile data.

Once a profile is configured, it can be assigned to specific Knox Configure managed devices. Device assignment is the final step in the configuration process, though devices can be locked by carriers and resellers post deployment. Additionally, each Knox Configure managed device has its own Device details and Device log screens to assess its current configuration and event history. For more information, go to: Review device details and device logs.

Assign devices

Available devices display within the Devices screen, within the DEVICES tab. Unassigned devices available for profile assignment are designated as Unassigned within the STATUS column. To list all devices, regardless of their state, refer to the CLEAR FILTER option at the bottom of the STATUS column drop-down menu. Select target devices to receive a specific profile as needed.

The Devices screen contains the following two tabs:

• UPLOADS — View devices organized by reseller uploads. Approve uploads and assign profiles as needed for specific deployments. Manage tags for logical sorting and filtering or export device uploads to a CSV file for archive. When needed, devices can now use a maximum of 5 tags each for more refined filtering. If necessary, use the UPLOADS tab Search function to search for individual reseller names. Only the reseller name can be searched within this screen.
• DEVICES — View all device uploads in their various profile assignment states. Optionally, you can search with various filters. Enterprise edition devices will have an Enterprise Edition tag appended to them. If necessary, use the DEVICES tab Search function to search for individual DEVICE IDs, PROFILES, MODELS and TAGS.

Assign automatically on upload by reseller

Profile assignment can be automated if you have created the profiles you need and match them to a reseller and devices. For this purpose, you can create a profile alias which is a user-friendly name for your existing profile. This alias can be shared with the reseller who, on uploading your devices, can match device with the alias. The devices are then auto-assigned the matching profile.

Create a profile alias

To create a profile alias:

1. Go to Resellers tab.
2. Select a reseller.

3. In the Manage reseller preferences window, click ⨁ADD ANOTHER PROFILE TO AUTO ASSIGN.

   

4. Select the profile, license, and a corresponding alias. The alias can be any alphanumeric value.
5. Add more profiles if you want, there can be a maximum of ten.
6. Click SAVE.

View devices corresponding to an alias

The devices assigned a profile using an alias will have the alias as a tag. To see all the devices for an alias, you can filter the items accordingly in the Devices screen. You can also see it in the Device details screen for an individual device.

Unassign a device from a profile

When unassigning a device from a profile, be aware that an admin is unable to manage the device until after a profile is configured again. An admin is also unable to send push updates until a new profile assignment is made.

A device can be unassigned from its assigned profile when:

• A customer manually un-assigns the device from its profile.
• The device is using a staggered license, and the service period has ended.
• The device is using a non-staggered license, and the 30-day license expiration grace period has ended.

Additionally, when a device is unassigned from its profile, the following now occurs regardless of profile type:

• The KC server sends a push update to revoke policies.
• The KC client keeps apps and content.
• The KC client will not be uninstalled.
• A factory reset is allowed.

Devices can be unassigned from the DEVICES screen when the selected device is in a Profile assigned, Error, Canceled by user, Configured, Failed to configure, or Updates pushed state.

To unassign a device from its current profile assignment from the KME DEVICES screen:

1. Select Profiles from the left-hand navigation menu.
2. Select the link of the target profile.
3. Select DEVICES from the Profile configuration dashboard.
4. Select the checkbox of the target device you intend to unassign from its current profile.

5. Select Unassign devices from the ACTIONS drop-down menu.

   

6. Review the warning statement within the Unassign profile screen, then click Confirm to proceed.

Delete a profile

To delete a profile from the list available for device assignment:

1. Select Profiles from the left-hand navigation menu.

2. Select a target profile to delete from amongst those listed.

   

3. Select Delete profile(s) from the ACTIONS drop-down menu.

   

4. Review the deletion confirmation message, then select DELETE to proceed with the deletion.

Change profile assignment

When a configured device profile is changed or updated, a profile push update is made automatically regardless of the profile edition.

An update to Knox Configure now restricts Setup edition profiles from receiving a push update. A Setup edition profile can no longer update another Setup edition profile, nor can a Dynamic edition profile push update a Setup edition profile.

To change a device's existing profile assignment:

1. Select Profiles from the left-hand navigation menu.
2. Select the check box of an existing profile to update the device's current profile assignment. Keep in mind, the selected replacement profile needs to support the same device model.
3. Select Assign devices from the ACTIONS drop-down menu.
NOTE — The Assign devices with Profile screen displays devices with the same model number as those utilizing the profile. By default, the Status column has a filter applied and only devices with an Unassigned status display. If there are no unassigned devices, the table lists devices with other statuses, but only with the same valid model number.

4. Select the checkboxes of the target device(s) intended to receive the profile push update.

   

5. Select the SUBMIT button from the Assign Devices With Profile screen to proceed with the device profile update.

   

NOTE — A Change assigned profile screen may display stating a portion of the selected devices are currently assigned a different profile, or a different version of the same profile. The screen states these selected devices will unassigned from their previous profiles and updated with your selected the selected profile upon confirmation.
6. If displayed, optionally select the Push update without requesting end user consent to push the updates directly to the assigned devices without consent from the device end user. Leave this option unselected affords the device user the ability to approve the profile update before its pushed to their device.
7. Select Confirm to proceed with the device push update and profile overwrite. Select Back to move back to the previous Assign devices with profiles screen.

Push a profile update

To push an update to an existing profile:

1. Select Profiles from the left-hand navigation menu.
2. Select the check boxes of the target device(s) to receive the profile push update.
3. Select Push update from the ACTIONS drop-down menu.

4. Select Push update without requesting end user consent to push updates directly to the assigned devices without consent from the device user.

   

5. Select the PUSH NOW button to proceed with the device profile update.

Push an update without requesting end user consent

When an IT admin wants to push a profile to update an application or to change a configuration, they may do so by selecting the silent update option. By using this option, the user can still keep using their device while the IT admin makes the change or update. Once the update is made, IT admins can also check the status of the update without having to configure the user interface.

Background push updates

This enhancement enables an IT admin or system integrator to push an updated profile or application to devices without any related UI displaying on the target device. This enables the device user to continue to use their device without interruption, as profile or application updates occur in the background.

Enroll devices using the Knox Configure portal

To enroll devices using Knox Configure:

1. Turn on the device and go through the device setup procedures.
2. If you have not done so already, connect to a Wi-Fi network. Knox Configure prompts you to begin the device enrollment process.
3. Tap Continue. Read the EULA and tap Agree to enroll the device.
4. The following processes occur:
   • The device downloads the Knox Configure profile.
   • If apps are in the profile, the device downloads and installs those apps.
   • Knox Configure activates a license.
   • The device downloads other required content.
5. When the device is successfully enrolled, a confirmation screen displays. If the device has been configured as a ProKiosk, a device reboot is required.

Push a reboot/factory reset command

IT admins can push a reboot or factory reset command to devices from the Knox Configure portal. This feature is available to both Setup and Dynamic profiles, and can be pushed to specified devices selected by an admin, or as a bulk action using a CSV file. A reboot push command can be triggered by an admin without the device user's consent.