Knox Guard 21.03 release notes

Set allow-list for Incoming call on lock screen

There is a new option to configure an allow-list for incoming calls for locked devices.

This configuration is available in the Default lock screen/PAYG lock screen only, but it will also be applied for Remote, SIM, PAYG and Offline lock cases.

This feature allows end users to receive incoming calls from allow-listed numbers even if the device is locked (Customers can add their Customer Support numbers to the allow-list and give guidance/request overdue payment when the device is locked).

Per-device auto-lock

Currently, the auto-lock option is applied by the tenant meaning all devices registered to a given tenant get locked once this option is enabled. For Knox Guard 1.38, auto-lock can be applied to certain devices in the case where the device is missing/stolen.

It is not required to Enable auto-lock again for devices that already have auto-lock applied (the device will continue to have auto-lock applied). This permission is given per Tenant, not device. If a new device is registered, you must select and apply the auto-lock function to that new device manually.

Update the lock messages

With the KG 1.38 release, customers can update the lock message per device without changing the device state.

For normal/AntiTheft tenants, go to Action > Update Lock message.

For PAYG tenant, go to Action > Send Relock timestamp.

This particular feature is available in Bulk Action menu for multiple devices at once.

New information available on ‘Device Tab’ Device upload/accepted/activated Times and client version

There are three device relevant times which are found on the KG customer portal (Device table). These times are:

1. Device uploaded time
2. Device accepted time
3. Device activated time

Each device time is available on the Device table as a separate column

The Agent version is also available on the Device table so customers are now able to view which version is installed on each device.

Inform user of payment complete/Device unlock

Customers can notify device users of status changes for better user experience. Messages can be sent when a payment has successfully been completed and the when the device has been unlocked after an overdue payment has been completed. These messages can be customized.

This feature is available via the KG console and by API calls.

Distinguished enrollment type (URL Enrollment or OOBE)

A new menu is available on the SA portal (Samsung super admins and subsidiary admins can enable/disable this option).

Devices where the tenants have enabled ‘URL enrollment’ permissions can enroll in KG via URL.

For existing KG users, URL Enrollment permissions are pre-configured as ON.

Improvements to the user flow on the SA portal

There have been some usability improvements for the admin side of the KG client:

1. If the admin clicks ‘Go back to customer table’, it returns to the search result rather than the starting page
2. The ability to search a customer by Customer ID has been added

Improve activity log to capture all user actions generated in KG portal

A new event will be logged whenever the ‘Search’ function is used and a detailed description containing the search keywords will be generated in the activity log. A new event will also be recorded in the activity log if the user logs out.

Improve ‘Always show’ option for enrollment notification

The option to set a non-dismissible message for Enrollment Notice worked only when ‘Always show on notification panel’ and ‘Show after completing enrollment’ were selected together. This was not by design because the two options are not dependent on each other.

There are two types of notifications:

1. Persistent Notification: Notifications are always displayed on the notification panel once KG is enrolled and users cannot clear this notification as long as the device is enrolled to KG
2. Dismissible Notification: Configured when the enrollment notification is displayed (After enrollment or Device reboot)

For KG 1.38, users can set each option separately without the two being dependent.

Add customer type for customer analytics

Currently, KG categorizes customers as ‘End Customer’ or ‘Samsung Employee’. However, this does not cover all the KG business cases, especially Partnership model cases.

Samsung Admins can categorize the customer type (Samsung Employee, End Customer or Partner) and add partner information.

1. Samsung Admins can add Customer type when approving the customer request along with a Tenant type
2. Samsung admins can type or select a partner name after selecting the Customer type

Access KG with AD login Credential

Because AD login is available within the Knox Portal, customers can access KG with their AD credentials.

If the AD is configured and the customer is logged in via AD login:

• Customer can launch the KG console from the KP Dashboard with their AD credentials (no additional credential is required to launch the KG console)

If the AD is disconnected in the Knox Portal:

• Only Samsung Account login is available for all admins
• If admins don’t have a Samsung account, then it is required to create a Samsung Account to access the KG portal