- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Open API reference
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
License management
A customer must purchase a license to use Knox Configure. As with other Knox Cloud Service (KCS) licenses, a customer can request a Knox Configure license from the sales team in their respective country. Once purchased, the customer enters their license into the Knox Configure console. A license is applied and activated automatically when a device is accepted into Knox Configure.
License utilization is global, and not restricted by regional device deployment constraints. Once you have uploaded your purchased devices into Knox Configure, you are required to create a configuration profile and select a license to ensure a Samsung Knox compliant deployment.
Two following license types are available for utilization with Knox Configure:
- Trial license — Trial licenses are intended for development and testing before going live with your deployment. Trial licenses are valid for 3 months and cannot exceed 30 devices for either Setup or Dynamic edition Knox Configure profile usage. Trial licenses can be migrated to commercial licenses upon expiration by contacting your reseller.
- Commercial license — Use a commercial license when deploying devices for commercial use with either a Setup or Dynamic Knox Configure profile. Commercial licenses must be purchased from a Knox reseller supporting your geographic deployment region.
A Per Device license is the standard license type for the Setup and Dynamic editions of Knox Configure. Per Device licenses include a finite number of non-transferable seats, which means that once a device has been assigned with this license type, the seat can't be reassigned. Per device licenses also have uniform scheduling, so all devices assigned with this license type expire on the same date.
A Setup edition Per Device (Staggered) license enables customers to utilize licenses more efficiently, since a customer might not initially use Knox Configure after it's purchased, or deploy devices at the same time. Using a Per Device (Staggered) license type, a customer creates a Setup edition profile and assigns devices per usual. They then however select the Per Device (Staggered) license type and ensure each activated device has a different expiration date based on the device's activation date.
A Dynamic edition Per Seat license enable customers to revoke a license on one device to use the license, per seat, on another device with the same dynamic edition profile. For example, an IT admin may want to revoke an ex-employee's license so they can utilize that revoked license on a different device using that same Dynamic edition profile. Utilizing the revoked license increases the available license count and improves license provisioning efficiency with the Dynamic edition profile.
The following chart compares the different license types for each edition of Knox Configure:
Setup Edition | Dynamic Edition | |||
---|---|---|---|---|
License name | KC Setup Edition | KC Setup Edition (Staggered) | KC Dynamic Edition | KC Dynamic Edition (Per Seat) |
License type | Per Device | Per Device (Staggered) | Per Device | Per Seat |
Valid license period | All device licenses expire at the same time | License period guaranteed per each device | All device licenses expire at the same time | |
Transferable? | No | Yes | ||
License extension | Available | Not available | Available | |
Increase/decrease number of devices during license period | Increase only | Increase and decrease |
To review existing licenses:
-
Select Licenses from the left-hand navigation menu.
NOTE — Devices no longer consume new license seats when re-assigned to profiles using the same license. However, devices need to be manually selected within the KC console and re-assigned the license. Therefore, you can re-assign an unassigned device to a profile and re-use a renewed license without consuming additional license seats. -
Review the following license utilization information to assess whether an existing license can be used:
- LICENSE NAME — Lists the name assigned to license upon creation or edit. The name displays as a link that can selected to review license data in greater detail. For more information, go to: License details.
- TYPE — Lists the type of license purchased. License types can be filtered as needed to drill-down to particular types, and include Setup Trial, Setup Commercial, Setup (Staggered) Trial, Setup (Staggered), Dynamic Trial, Dynamic Commercial, Dynamic (per seat) Trial, Dynamic (per seat), Dynamic Enterprise, Custom SDK, and Custom SDK (KLM). A single profile can have multiple devices using it, with each device potentially using a different license type. Select CLEAR FILTER as needed to reset the filtering preferences.
- STATUS — Displays the Active, Registered, or Expired status of each listed license. Select CLEAR FILTER as needed to reset the filtering preferences.
- PURCHASED SEATS — Lists the total number of purchased seats that can utilized with this license. This is the number prior to device assignment. With trial licenses, this number will be 30.
- REMAINING SEATS — Displays the number of remaining purchased seats that are not yet assigned to a device and activated. Licenses with no remaining seats still display within the KC Licenses screen, but not in the profile creation flow when selecting a license to assign to a profile.
- ASSIGNED SEATS — The assigned seat count is equal to the number of devices currently assigned a profile using the license. The assign license count increases by the same number of devices assigned a profile using the license, and decreases by the same number of devices unassigned from their profiles and using the license. The number of assigned seats displays as a link that, when selected, navigates to the Devices screen to display the device ID and profile assignments with this license.
- ACTIVATED SEATS — Lists the number of seats out of the total purchased that have been activated for utilization with a deployed device and its profile.
- ACTIVATION END — Displays the end date when license seats can no longer be assigned and activated under the terms of this listed license. When a license reaches its activation end date, the assigned count matches the number of remaining devices assigned profiles. When a license activation end date changes, a console notification informs of the new activation end date.
- Having reviewed the contents of the License screen, either use an existing listed license, Get a license, or Enter a license key.
License details
A listed license can be selected to reviewed in greater detail.
To review license details:
- Select Licenses from the left-hand navigation menu.
-
Refer to the LICENSE NAME column and select the link of an existing license to review it in greater detail.
-
The License details screen displays the following:
- License Name — Lists the name assigned to license upon creation. The name can be edited if need be. The right side of the screen displays whether this selected license is currently active, registered, or expired.
- Seats — Displays the number of seats purchased with this selected license. If needed, contact your reseller to increase the number of seats. The number of remaining seats also displays along with the number both assigned and activated with a device and its profile.
- License Key — Displays the License Key used as a unique alphanumeric code to activate this specific license. Before you enter a Commercial key you should ensure the Trial key is deleted.
- Type — Displays whether the selected license is a Setup/Dynamic Trial or Commercial license. Trial licenses are temporary and subject to expiration upon the Activation End Date. Commercial licenses are perpetual and not subject to expiration. Trial licenses can also be deleted from the Knox Configure console when they are no longer required for device testing. A single profile can have multiple devices using it, with each device potentially using a different license type.
- Owner — Lists the owner email address of the enterprise using Knox Configure to configure and deploy devices using this license.
- Activation Start Date — Defines the beginning date and time a license can be activated for device license seat allocation. The Activation Start Date begins the expiration countdown of a trial license activation period.
- Activation End Date — Lists the end date of the license seat activation period under the terms of this selected license. When a license reaches its activation end date, the assigned count matches the number of remaining devices assigned profiles. After this date, this license cannot be used to assign or activate additional devices. Devices that have already been activated with this license can remain active for the remainder activation period.
- Activation Period — Lists the activation duration period for the selected license.
- Select OK if needed to save the updates to the License Name and return to the Licenses screen.
Get a license
To obtain a Trial (temporary) or Commercial (permanent) Knox Configure license:
- Select Licenses from the left-hand navigation menu.
-
Select the GET A LICENSE button from the top, right-hand side, of the screen.
- Select GENERATE TRIAL LICENSE and one of the enabled options to use a trial license with either your Setup or Dynamic edition profile.
- Select FIND RESELLER to search for a Knox reseller in you specific geographic region that supports your intended Knox Configure device and profile feature set deployment.
Enter a license key
To enter a license key in order to add a license to a profile:
To determine whether a device model is eligible for EE, you can now check to see if it has an Eligible for Enterprise Edition tag. On the Device Details panel, devices are now auto-tagged to differentiate between old and new EE devices. Old EE devices are tagged with Enterprise Edition and 1 more. When you hover over the 1 more tag, it displays Eligible for Enterprise Edition. New EE devices are only tagged with Enterprise Edition. The EE tags are displayed first, followed by other tags in alphabetical order. For more information on tags, see Device details and logs.
- Within Knox Configure, select Licenses from the left-hand navigation menu.
-
If you don't already have a license, select the GET A LICENSE button from the top, right-hand side, of the screen.
- To test your profiles, select Dynamic or Setup and select GENERATE TRIAL LICENSE.
- To deploy profiles to your users, select FIND RESELLER to purchase a production license from a reseller in your geographic region.
- If you already have a license, select the ENTER LICENSE KEY button from the top, right-hand side, of the screen.
-
Enter a License name and License key. The license name is just a label for the license key, it does not impact the license functionality in any way. The license name must be unique to any other license name used with your specific deployment.
- Click ADD.
License expiry
Per Device, Per Device (Staggered), and Per Seat licenses all include a 30-day grace period to accommodate license renewal delays. During the grace period, you can't reboot, factory reset, or push profile updates and lock/unlock commands to associated devices. Any previously scheduled pushes will also fail.
After the 30-day grace period, device behavior depends on the license the device was set up with:
- Per Device and Per Device (Staggered) — The device is automatically unassigned, but all policies added to the device remain on the device. Device policies remain active until the device undergoes a factory reset or its profile is synced.
- Per Seat — The device is automatically unassigned and all policies are revoked, which removes all restrictions from the device. All content, apps, and non-restrictive configurations such as boot animations and hardware key remaps remain on the device after the device is unassigned.
Replace a license
Complete the following steps if you are:
- Switching all devices on one license to another (useful when replacing licenses that are about to expire)
- Select the license you would like to replace
- On the Licenses screen, select Replace license
- Select the new license to replace the previous license
Switch configured devices to a different license
Complete the following steps if you are:
- Switching from a trial license to a commercial license
- Switching from a commercial license to a different commercial license
- From within the Licenses screen, select the ENTER LICENSE KEY button. Add the new license key to the list of available licenses.
-
Select the name of the profile to utilize with your devices.
NOTE — If configuring the device to the same profile it used previously, you will need to clone the profile, as it is not possible to change licenses using the same profile. To clone a profile, navigate to the Profiles screen and select the checkbox beside the profile name you would like to clone. Select Clone to edit from the ACTIONS drop-down menu. - Navigate to the Profiles screen and select specific devices. Select Assign devices from the ACTIONS drop-menu.
- From the Select devices screen, select the devices you want to assign. If you cannot find a particular device, ensure you are not filtering the devices by status.
- Select the ASSIGN button once all the devices you intend to assign are selected.
- Select NO when the Change assigned profile screen prompts whether you want to continue using the existing license.
Knox Deployment App (KDA) license utilization
A license can also be assigned for use in the KDA within the Knox Configure console, as an optional step at the bottom of the Profile information screen. Only one license can be designated for the KDA, so if it consumed or expired, an admin will need to assign another one from the Knox Configure console.
If there are no listed licenses available within License drop-down menu, select the Enter License Key option from the drop-down menu. From the displayed Enter license key screen, provide a License name and License key, then select the ADD button. The newly created license is then available for selection from within KNOX DEPLOYMENT APP SETTINGS License drop-down menu.