- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Knox Mobile Enrollment
- Knox Configure
- Introduction
- Get started
- How to guides
- Manage licenses
- Release notes
- Provide feedback
- Troubleshoot
- Wearables
- FAQ
- KBAs
- Knox Capture
- Welcome
- Overview
- How-to guides
- Manage licenses
- Scanning profiles
- Apps and activities
- Scan engine settings
- Keystroke output and data formatting
- Export configuration and deploy through EMM
- Set the camera scan trigger
- Connect a hardware scanner
- Configure the output path
- Check a configuration in test mode
- Use intent output
- Knox Capture AR
- Get started
- How-to videos
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Capture Scandit Edition
- Introduction
- How it works
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Complete device management
- Delete devices
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- Start and stop blinking reminder
- Lock and unlock devices
- Send relock timestamp
- Update or disable offline lock policy
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Knox Guard REST API
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
Knox Configure is a cloud-based service that empowers enterprises to customize and automate the enrollment of Samsung devices purchased from authorized Samsung resellers.
Knox Configure simplifies the out-of-box experience and enables a large range of configuration options.
Audience
This document is intended for:
- IT Admins — Admins create profiles with the device settings, restrictions, apps, and other content to deploy to groups of devices. After devices have been successfully enrolled into the enterprise, they receive the Knox Configure device profile via a Wi-Fi or mobile data connection.
- Resellers — Resellers bulk upload devices on behalf of requesting customers.
Try the solution
Promote and embed company branding, including animated boot screens and personalized business apps. Use this guide to apply data access restrictions as needed based on your organization's application update, notification and URL requirements
START TUTORIALAbout Knox Configure
Knox Configure is available in separate editions: Setup and Dynamic editions.
Setup edition
Setup edition supports one-time configuration of enrolled devices and settings. To change a device configuration after initial policies are set, devices must be factory resettled and new policies must be re-applied. Setup edition includes a select subset of the policies and settings available in the Dynamic edition's normal mode.
Dynamic edition
Knox Configure Dynamic edition allows you to deploy and update enrolled device policies as many times as needed without a factory reset. Supported features include ProKiosk mode, Enterprise Billing, Knox Shared Devices and numerous other enhancements. Dynamic edition includes all the policies and settings available in the Setup edition, plus many more.
Prerequisites
Following prerequisites must be satisfied to use Knox Configure:
- Supported phones, tablets or wearable devices purchased from a participating reseller in the Knox Deployment Program. If you are not sure whether your reseller is participating in the program, contact the reseller or a Samsung Sales Representative for more information.
- The appropriate Knox licenses purchased from a Knox Reseller (for commercial deployment).
- A Knox account. For more information, see Sign up for Knox Configure.
- The correct firewall exemptions needed to extend beyond your local and protected network domain and securely connect to the Knox Configure server. For more information, see Knox Configure firewall exceptions.
- A supported browser (Edge, Firefox, or Chrome).
The deployment process
Using a web-based console, IT admins create profiles with the device settings, restrictions, apps, and other content to be deployed to groups of devices. After devices have been successfully enrolled into the enterprise, they receive device profiles via Wi-Fi or mobile data. This image below outlines the Knox Configure deployment process flow:
Once a profile is configured, it can be assigned to specific Knox Configure managed devices. Device assignment is the final step in the configuration process, though devices can be locked by carriers and resellers post deployment. For more information, see Assign and deploy a profile to device.
Device states
Devices are submitted into Knox Configure progress through the following states when assigned profiles and configurations are pushed to the device:
- Unassigned — The device is uploaded into Knox Configure, but there are no profiles yet assigned or a previously applied profile has been unassigned.
- Profile assigned — A profile was assigned to the device, but the device is yet to be configured. For example, the device may not have been powered on since a profile has been assigned.
- In progress — A device profile assignment has been made and the subsequent device configuration is in progress and pending completion.
- Error — A problem was encountered during device configuration rendering. For more information, see Configuration errors.
- Canceled by user — The end user has skipped the device profile configuration. It must be restarted to configure the device.
- Configured — The device has successfully received Knox Configure profile or the profile update has been pushed successfully.
- Failed to configure — Device has failed to receive the profile, or a profile update was not successfully pushed.
- Updates pushed — A profile update has been pushed to the device, but the device is still processing the update.
- Locked — The device is locked in Knox Configure. Either IT admin can unlock the device or the device end user can input the provided password. Locked devices remain in their locked state even after the device's profile is unassigned.
- Exchanging — The device had its device ID swapped. This device needs its profile re-assigned and updated back to an Assigned state.
- Deactivated temporarily — The device has been temporarily deactivated by the IT admin to review and assess an issue before the device is activated again.