Knox Configure 1.14 release notes

Last updated July 26th, 2023

Knox Configure (KC)

Updated KC console UX design

The Samsung Knox team is introducing new versions of our industry-leading Knox Configure (KC), Knox Mobile Enrollment (KME), and Knox Deployment Program (KDP) consoles to provide optimal uniformity among our growing family of device enrollment and configuration solutions.

The central update with each console is the introduction of a collapsible left-hand navigation menu, replacing the previous horizontal menu bar. This provides a visual-hierarchy of key enrollment and configuration console activities and administrator “call-to-actions.”

The new consoles are personalized, with improved status updates from each user’s previous login. Colorized status indicators optimally display “at-a-glance” event severity to administrate with best in class efficiency.

App downloads can now occur in the background

Currently, applications are downloaded in background by default after configuration. However, if some applications are related to other configurations they are downloaded during configuration.

Push update schedule enhancements

To date, a push notification for an update is sent as soon as an IT admin clicks the push button. However, some customers have requested the ability to send push notification updates at a specified, or scheduled time.

With this release, admins can use a new scheduling facility to select the calendar date, time of day, and time zone a push update occurs.

USB configuration enhancements

This feature allows IT admins to define which particular USB restriction classes to enable or disable for a configuration profile. Before this release, the USB interface was either enabled or disabled completely.

This feature is supported on Knox 2.9 and above supported devices, and only using Dynamic edition Knox Configure profiles.

Proxy setting for Wi-Fi now available

To date, there is no proxy Wi-Fi settings for a smart phone or tablet profile. With this release, proxy settings are supported for Wi-Fi with both phones and tablets, and not just wearable devices. A device can now connect to a specified network with credentials delivered by Knox Configure using a proxy to communicate externally.

Profile assignment enhancements

IT admins have requested the ability to assign a profile automatically to devices uploaded by a specific reseller. With this release, customers can now reduce the number of profiles administrated by eliminating device model dependencies, this will help reduce their burden when assigning devices to profiles.

Disable location service capability added

To date, Knox Configure supports an option to disable GPS, but location services can be supported with Wi-Fi and mobile networks. However, some customers have requested the ability to disable location services completely.

With the introduction of this feature, dynamic edition Knox Configure profiles have the option of disabling GPS, Wi-Fi and mobility network location services. This option is supported on mobile devices running Knox version 2.7.1 or later.

Multiple admin invitations within single CSV file

To date, a primary admin can only invite other admins manually, and only one admin at a time. This can be a cumbersome activity when numerous admins require an invitation. With this release, a CSV file can be read into the console to invite additional admins using their name and Email address.

Google Play app shortcut optimizations

Currently, when an IT admin adds a Google play app to a Knox Configure profile, its shortcut is included within the Recommended apps folders by default. This folder’s name and directory can be changed by an IT admin, but customers have requested the ability to add the shortcut to the device’s home screen.

To address this issue, a Google Play application shortcut option has been added. The selected Google Play shortcut will display on the home screen.

Disable specific application updates

Customers have requested a mechanism to disable the update of specifically allowed or blocked applications.

To address this issue, the profile configuration Applications & content screen has been updated to include an Update blocklist/allowlist item where admins can list those specific applications they want to either include or exclude in an update.

Device side configure.samsungknox.com page update

Currently, a device’s configure.samsungknox.com page displays a GET LATEST button that states “Get latest configurations. Please make sure this device is already configured at least once.” Some customers report confusion as to the expected behavior once the button is pressed.

To remedy this confusion, the button name has been changed to RE-ENROLL TO KNOX CONFIGURE. Additionally, the descriptive text displayed on the screen has been updated to the following: “Re-enroll to Knox Configure with latest configurations. This will remove KC agent from this device and enroll it to Knox Configure again. Please make sure this device is already configured at least once.”

Permissions for special access

The Knox team has received requests to remove the installation permission screen when installing and executing applications. To address the issue, an admin can now turn on and off each permission as deployment requirements warrant, and permission exceptions now result in a warning and no longer block Knox Configure enrollment.

Wearable Knox Configure (WKC)

WKC + custom app configuration capability

To date, when the ProKiosk mode is set using a custom app, a failure occurs during KC configuration. However, if previously applied profile and a new profile do not have a ProKiosk mode setting, KC does not have to show a failure for the ProKiosk mode set by the other app.

With this release, IT admins can now create a dynamic edition profile and select an option to prevent a device user from accessing the Settings menu. The UX displays that this feature is only available on Tizen 4.0 and above devices, and the device must be in standalone mode.

WKC enrollment via the Knox Deployment App

To date, WKC enrollment is conducted only during the initial out-of-box network search. An end user needed a factory reset to begin enrollment when the device is already in use. Additionally, wearable devices should be registered to the Reseller Portal RP by resellers, because when the IMEI/SN is not registered by resellers, they can’t use WKC.

With this release with Tizen 4.0 and above devices, an IT admin no longer has to factory reset wearable devices, and can self-verify devices by connecting each wearable device via Bluetooth using the Knox Deployment App. Admins can simply start Knox Configure enrollment using a hidden action in Setting menu.