How to add a device back into Knox Guard

Environment

• Knox Guard
• Devices with hardened security architecture¹

Overview

When you no longer need to use Knox Guard to secure a device, you can remove it from the service by completing device management. This removes all applied policies, deactivates the Knox Guard client, and stops device tracking and oversight. However, in situations where you need to secure these devices again, you can re-activate Knox Guard as needed.

To activate Knox Guard on a device again, you must complete specific steps based on the device’s previous assignment history; depending on the domain the device was originally assigned to, restrictions may apply. This article provides the guidelines and procedures for registering and activating devices previously added to Knox Guard.

Device activation guidelines

Starting with 26.01, customers can select a domain for their account. Once devices with hardened security architecture¹ are assigned to the Device Financing domain, they can’t be added to a non-financing domain in the future, even after device management is complete. You are free to re-upload devices across all other domains, including devices added to legacy tenants without a domain.

How to activate devices previously added to Knox Guard

Activate Knox Guard on financing devices

To activate Knox Guard on a device that’s been re-uploaded to the Device Financing domain:

1. Add the device to your Knox Guard account. If the device was previously uploaded to a different Knox Guard customer’s tenant, ensure it’s been removed from their account.

2. Accept the device in Knox Guard console. The device’s status changes to Activating.

3. To activate Knox Guard on the device, the device user must navigate to guard.samsungknox.com on a browser on the device. If activation is successful, the device’s status changes to Active in the Knox Guard console.

   Activating devices through a URL requires additional permissions. Contact your Samsung admin to obtain the appropriate permissions for your tenant.

Activate Knox Guard on non-financing devices

To activate Knox Guard on any non-financing device that’s been uploaded again:

1. Add the device to your Knox Guard account. If the device was previously uploaded to a different Knox Guard customer’s tenant, ensure it’s been removed from their account.

2. Accept the device in Knox Guard console. The device’s status changes to Activating.

3. Factory reset the device. When the device boots up and connects to a network, Knox Guard activation automatically begins.

   You can also activate a non-financing device by navigating to guard.samsungknox.com on a browser on the device. However, activating devices through a URL requires additional permissions. Contact your Samsung admin to obtain the appropriate permissions for your tenant.

Additional information

If you’re having trouble activating Knox Guard on your device, see How to activate a device in Knox Guard.