Manage profiles
Last updated March 27th, 2025
On this tab
A device profile is a collection of settings that can be used to configure one or more devices with preset settings, restrictions, apps, and other content. You can create device profiles in Knox Configure and then assign them to Knox Configure managed devices.
You can edit a profile at any time and then push those changes to any devices assigned to that profile.
Setup edition profiles are restricted from receiving a push update. A Dynamic profile can push update another Dynamic edition profile, and a Setup edition profile can push update a Dynamic edition profile. However, a Setup edition profile cannot update another Setup edition profile, nor can a Dynamic edition profile push update a Setup edition profile.
To update a profile in Knox Configure:
-
On the Knox Configure console, go to Profiles in the left-hand navigation menu.
-
Select the profile you want to edit.
-
From the navigation bar at the top of the screen, click the section of the profile you want to edit to jump to that section.
For details on the profile wizard, see Configure profile settings.
Save and push profile changes immediately
If the profile is assigned to one or more configured devices, you can save your changes and immediately push them to any devices that the profile is assigned to.
To push the changes immediately, click PUSH UPDATE. You can choose to push the update to all devices associated with the profile, or to the selected devices only. You can also choose to schedule the update to push later.
If you want to force-install the update to the device, select Push update without requesting end user consent. If this option is left unselected, the device user can schedule the update to be installed overnight.
The update notification sent to the device shows the total download size of the update to help the device user make an informed decision about when to apply it.
If an update is scheduled for overnight installation, the device attempts to apply the update between 2:00 AM and 5:00 AM according to the current time zone. If the device is in active operation by the device user during that time, it attempts to apply the update the next night during the same period. If the device fails to apply the update overnight for four consecutive days, the device will attempt to apply the update when the device is turned on and a network connection is available the next day.
Click PUSH NOW to push the profile update.
Save and push profile changes later
Alternatively, you can save your changes and push the update later. Click SAVE to save your changes and close the profile.
To push the changes later:
-
Go to Profiles.
-
Select one or more target devices to receive the profile push update.
-
Click ACTIONS, then click Push profile update to devices.
You can choose to push the update to all devices associated with the profile, or to the selected devices only. You can also choose to schedule the update to push later.
If you want to force-install the update to the device, select Push update without requesting end user consent. If this option is left unselected, the device user can schedule the update to install overnight.
The update notification sent to the device shows the total download size of the update to help the device user make an informed decision about when to apply it.
If an update is scheduled for overnight installation, the device attempts to apply the update between 2:00 AM and 5:00 AM according to the current time zone. If the device is in active operation by the device user during that time, it attempts to apply the update the next night during the same period. If the device fails to apply the update overnight for four consecutive days, the device will attempt to apply the update when the device is turned on and a network connection is available the next day.
Click PUSH NOW to push the profile update.
Pull a profile update to a device
In addition to having updates pushed to their device, the device user can also pull the latest version of their profile to their device.
For devices running Android 13 or higher, the device user can pull a profile update from their device by opening Settings and tapping Advanced features > Configuration service > Profile information > Update.
For devices running lower versions of Android, the device user can pull profile update from their device by opening Settings and tapping About phone > Software information > Knox Configure > Apply latest profile.
This document was updated for the Knox cloud services 25.04 UAT.
On this tab
The Profiles page lists all your profiles, separated into two tabs: Setup/Dynamic profiles and Accessory profiles. By default, you’ll land on the Setup/Dynamic tab when you visit this page.
View profile information
Regardless of which tab you land on, you’ll see a table providing details of every profile in your account. The following table information is available:
| Availability | Column | Description |
|---|---|---|
| Common | PROFILE | The name of the profile. Click to update the profile details. |
| Common | KNOX VERSION | The version of Knox that the profile was intended for. If the profile is assigned to devices with a lower Knox version, the devices will still receive the configuration, but some settings may not work as intended. |
| Common | VERSION |
The version of the profile, based on the number of changes made. For Setup/Dynamic profiles only, you can click the version number to view a history of the profile’s changes. From the pop-up window, you can:
|
| Setup/Dynamic profiles only | PROFILE TYPE | The type of profile created, either Dynamic or Setup. |
| Setup/Dynamic profiles only | TOTAL DEVICES |
The number of devices that have this profile assigned. Click the link to view the total number of devices at each stage of the profile assignment process. The following stages are shown:
|
| Accessory profiles only | TOTAL ACCESSORIES | The number of unique accessory IDs associated with this profile. |
| Common | UPDATED | The date the profile last received an update. If this is a new profile (V1), then this is the date of profile creation. |
| Common | SIZE | The total size of the profile in MB. |
Perform profile actions
Select any profile in the list, then click ACTIONS to view a list of available profile-related actions you can take. The following actions are available:
| Availability | Column | Description |
|---|---|---|
| Setup/Dynamic profiles only | Assign devices | Opens the ASSIGN DEVICES window showing devices that don’t already have a profile assigned. To assign the profile:
|
| Common | Delete profiles | Delete a profile. If profile is currently assigned to devices, you must unassign the devices, or assign a different profile to the devices before deleting this profile. |
| Common | Clone to edit | Create a copy of the current profile. The profile wizard opens, populated with the previous profile’s info and settings. |
| Setup/Dynamic profiles only | Download profiles as a CSV | Download a CSV version of the profile table for offline viewing. |
| Setup/Dynamic profiles only | Push update to devices |
Push the latest version of a profile to your devices, provided you didn’t already push the update in the profile wizard. NOTE—This action can only be taken if devices associated with the profile are in the following states:
|
Update profiles
Once a profile is created, it can be edited by simply clicking the profile’s name in the table. Depending on how the profile was created (whether it is a Setup or Dynamic edition profile), devices will receive the update differently.
Setup edition profiles
When you make updates to a Setup edition profile, your changes cannot be applied to devices that already have the profile assigned. However, if you have new devices, or devices that don’t already have a profile applied, then your changes will be applied to those devices.
If you want to push updates to devices that already have the (Setup edition) profile applied, then those devices must go through a factory reset in order for the settings to take effect.
Dynamic edition profiles
When you make updates to a Dynamic edition profile, you have the options to either push the updates immediately, schedule an update, or push the update at a later time.
Push updates immediately or schedule an update
After you make your updates in the profile wizard and click SAVE, you’ll see an option to push the update. Click PUSH, then in the pop-up window, you’ll have the following options:
-
You can choose whether you want to push a partial (only changed items) or full (all settings) update either to all devices associated with this profile, or to only specific devices.
- If you choose to push to only specific devices, you’ll need to specify the devices on the next screen.
-
You can choose whether you want to inform the users of this update or allow users to provide consent before updating.
- Select Request consent from device user if you want the profile to download only after the user agrees to the update.
- Select Request consent and show custom notification if you want to add a custom message (up to 400 characters) to inform users of the update before they give consent.
- Select Send update without requesting device user consent if you want to force the device to download the profile without user consent.
Once you select your update options, you can click PUSH NOW to immediately push the update to your associated devices, or click SCHEDULE to select the date and time for the system to push the updates.
If you previously chose to push updates to specific devices, click SELECT DEVICES, then on the next page, select your devices and either click PUSH NOW to immediately push the update to your devices, or click SCHEDULE to select the date and time for the system to push the updates.
Push updates at a later time
If you make updates to your profile, you can choose to not push or schedule the update right away. This can be useful for when you want make several profile changes, but not commit to pushing those changes until you’re ready to do so.
To push updates at a later time, simply make your changes, then click SAVE and close your profile wizard. When you’re ready to push the profile to your devices, do the following:
- Go to the Profiles page, then select the profile that you want to push.
- Click ACTIONS > Push profile update to devices.
- Select how you want to push the update.
Delete profiles
Before you can delete a profile, you must first ensure that it isn’t currently assigned to any devices. If the profile is assigned, you’ll have to either unassign it, or assign a different profile in order to proceed.
To delete a profile from Knox Configure, simply go to the Profiles page, select the profile, then click ACTIONS > Delete profiles.
Is this page helpful?