*BASICS*
The Knox Ecosystem
White Paper
- Introduction
  - The Samsung Knox Platform
  - Feature Summary
- Core Platform Security
- Network Security
  - Virtual Private Networks
  - Network Platform Analytics
- Certificate Management
- Device Management
- User Authentication
  - Biometric Authentication
- App and Data Protection
- Appendix
Samsung Knox Portal
Knox Cloud Services
- Sign in with SSO
General Knox Support
Knox Licenses
*FOR IT ADMINS*
Knox Admin Portal
- About
- Introduction
  - Select Knox services
- Features
- Knox Remote Support
- Release notes
Knox Suite
- Introduction
- How-to videos
- Get started
- Learn more about Knox Suite
- Enterprise Edition devices
- FAQs
- KBAs
Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
  - Before you begin
- Get started with UEMs
- Knox Service Plugin
- Release notes
- Migrate to Android 11
  - Device management modes
  - Prepare Knox for Android 11
- FAQs
- Troubleshoot
  - Get device logs
- KBAs
Knox Mobile Enrollment
- Introduction
- How-to videos
- Get started
- Features
- Release notes
- FAQs
- Troubleshoot
  - Get support
- KBAs
- On-Premise
Knox Configure
- Mobile
- Wearables
- Shared Device
- KBAs
Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- End users: Get started
  - Getting started with Knox Capture
- Features
- Release notes
- FAQs
- Troubleshoot
Knox Asset Intelligence
- Introduction
- How-to videos
- Get started
- Set up reported device data
- Features
- Troubleshoot
  - Device-side errors
  - Portal-side errors
- Release notes
- FAQs
- KBAs
Knox Manage
- Introduction
- How-to videos
- Get started
- Configure
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQs
- KBAs
Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
  - Install an app to devices through an EMM
  - EMM compatibility matrix
- Release notes
- FAQs
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
  - Knox E-FOTA Advanced
  - Knox E-FOTA on MDM
Knox Guard
- Introduction
- How-to video
- Get started
  - Get access to the portal
  - Knox Guard status flow
- Using Knox Guard
- Release notes
- FAQs
- KBAs
- Support
Samsung Care+ for Business
- Introduction
- Get started
- Submit claim
- Features
- Release notes
- FAQs
*FOR RESELLERS*
Knox Deployment Program
- Introduction
- Get started
  - Get access to the Reseller Portal
  - Buy from a reseller
- Features
- Release notes
- FAQs
- KBAs
*FOR MANAGED SERVICE PROVIDERS*
Knox MSP Program
- Introduction
- How-to video
- Get started
  - Firewall exceptions
  - Before you begin
- Features
- Release notes
- FAQs
- KBAs
- Glossary

Android Legacy/Knox Workspace commands

The available device commands vary depending on device manage type. For Android Legacy with Knox Workspace devices, you can select either the General or KNOX area to send the device command to.

Device

Device command	Description
Apply Latest Profiles	Sends the latest profile and app information to the device and controls the device with the profile and information.
Enable EAS (Samsung Email App Only)	Allows using Exchange ActiveSync for Samsung Email app.
Disable EAS (Samsung Email App Only)	Disallows using Exchange ActiveSync for Samsung Email app.
Lock Device	Locks a device. You can enter a reason for locking the device and a phone number to contact when the device is lost. The entered information appears on the locked device screen. IT admins can now use special characters—with the exception of \, ", [, and ]—in the messages that show on locked device screens. NOTE — For non-Samsung Android devices, only Android 8.0 and lower are supported. Android 10 devices are not supported.
Unlock Device	Unlocks a device. NOTE — For non-Samsung Android devices, only Android 8.0 and lower are supported. Android 10 devices are not supported.
Lock Screen	Locks the device screen. If the device's screen is password-locked, then the user needs to enter the password to access the screen again.
Lock SIM PIN	Places a lock on the SIM card's PIN to prevent the use of the SIM card on another device. To lock a SIM PIN, enter the current SIM PIN and then enter a new PIN. If the locked SIM card is registered to another device, the device is locked and the user must enter the new PIN to unlock it.
Unlock SIM PIN	Removes the lock placed on a SIM card's PIN. To unlock a SIM PIN, enter the current PIN that was applied through KM, and then enter the initial (default) SIM PIN. You can find the current PIN next to SIM PIN applied by KM in the Network tab of the Device Detail page.
Factory Reset	Performs factory reset and changes the device status to Unenrolled.
Power Off Device	Turns off the device. NOTE — Android 10 devices are not supported.
Reboot Device	Reboots the device.
Reset Screen Password	Resets the device's screen lock password and creates a temporary password. After sending the device command, the temporary password found on the device's detailed information page is delivered to the user. For more information, see the Knox password in Viewing the device details. NOTE — Android 9.0 and higher devices are not supported.
Reset SD Card	Initializes the external SD card of the device. NOTE — For devices whose External SD Card policy is set to Disallowed in the profile, you cannot reset the SD card using the device command, because the policy takes a higher priority than the device command.
Reset Data Usage	Resets data usage among the Android device's inventory information. Wi-Fi transfer data (in/out) Network transfer data (in/out) NOTE — Android 10 devices are not supported.
Reset Number of Calls	Resets the number of calls and number of missed calls among Android device's inventory information. Number of calls Number of missed calls

Application

Device command	Description
Install or Update App	Installs or updates apps on a device. In the Request Command window, select an app to be installed or updated. NOTE — The app installation blocklist/allowlist policies take a higher priority than device commands.
Run App	Runs app on a device. In the Request Command window, select an app to be run. NOTE — The app running blocklist/allowlist policies take a higher priority than device commands.
Stop App	Stops app on a device. In the Request Command window, select an app to be stopped.
Delete App data	Deletes data from apps. In the Request Command window, select an app to be deleted.
Uninstall App	Deletes apps from a device. In the Request Command window, select an app to be uninstalled. NOTE — The app uninstallation prevention list setting policy takes a higher priority than device commands.
Apply Latest internal App Information	Sends the latest internal app information and updates the device according to the information.

Knox Manage

Device command	Description
Push Notification	Sends an emergency message to the device. The message icon shows on the status bar of the device. You can set a push notification message of up to 80 characters. On the Push Notification page, enter the title and content of the message. You can also select between Notification and Pop up for the send type. NOTE — If the device is locked, you must unlock it to view popup pages. Popup pages may not show on Work Profile devices running Android 10 and higher.
Unenroll Device	Unenrolls a selected device on the device list.
Update License	Updates the license of a selected device on the device list.
Update Knox Manage	Updates the Knox Manage agent on the device for a new patch or version. The agent information registered in the KM server is sent to the device, which then selects the appropriate agent to request installation files from the server.
Update User Information	Updates the device user information, such as the user activation status/username/user settings (Knox Browser website URL information, bookmark information) and license information. If the user is logged out from the enrolled device, you can send this device command to enable the user to log in to Knox Manage automatically.
Lock Screen of Knox Manage agent	Locks the Knox Manage agent. When the agent is locked, the device user must enter the agent's password that was configured during enrollment. If the user forgets the password, you can send the Delete Account command to sign the user out. Then, they can reset the password upon sign in.
Unlock Knox Manage agent	Unlocks the Knox Manage agent.
Delete Account	Deletes the account registered in the Knox Manage agent.
Exit Kiosk	Exits the Kiosk mode without unenrollment. You can find the status of the Kiosk mode on the Device Detail page > Security tab.
Convert License	Convert the device's Knox Manage license to a Knox Suite license.
Collect Audit Log	Collects the Knox Manage audit logs of the device. When the log size exceeds the maximum size, logs are automatically sent to the server, but the log file may be lost. For more detailed information, see View the audit list.
Collect Device Log	Collects the logs of devices.
Collect Diagnosis Information	Collects the device log to diagnose the cause of device lock. NOTE — Personally identifiable or sensitive information is data masked.
Collect Bug Report	Collect the device's bug report, also known as dumpstate logs. The device user is then prompted to send the report, and they can choose whether to send it. You can view the bug report by selecting the device and viewing its device log. Alternatively, you can go to History > Device Log and select the relevant device.
Reset Push Token	Creates and registers a new Firebase Cloud Messaging (FCM) token for the KM agent on the device. Use this command in scenarios where the device can't receive push notifications, which typically occurs when the token changed on the KM server and the device was unable to sync it.
Register Managed Google Play Account	Assigns the Managed Google Play Account associated with your tenant to the device. Use this command if the Managed Google Play Account wasn't registered on the device during enrollment.
Play Alarm Sound	Sounds an alarm on the device until the device user takes action. On non-kiosk devices, the alarm is accompanied by a push notification from the KM agent, and on kiosk devices it is accompanied by a pop up. The alarm sounds regardless of the device's mute and vibration settings.
Reapply KSP Wi-Fi Configurations	Syncs all Wi-Fi configurations defined by Knox Service Plugin policies. This command is helpful in situations where the device user has removed a configured Wi-Fi network from the network settings.

Device Info.

Device command	Description
Collect current location	Shows the current location of the device. To view the location of a device after sending a device command, navigate to Device, click the check box for the device, and then click Check Location.
Sync Device Information	Updates the inventory and app information on the device. To view the updated information after sending the device command, navigate to Device, click a device name or tag, and view the information on the Device Detail page. NOTE — For iOS devices, only the hardware status is updated.
Sync Installed App List	Updates the information of installed apps. To view the list of installed apps after sending a device command, navigate to Device, click a device name or tag, and click the Application tab.
Authenticate SIM Card	Authenticates the SIM card on a device.
Authenticate SD Card	Authenticates the external SD card on a device.
Attestation	Checks if a device's OS has been compromised. The result can be found from the device details.

Container

Only the Workspace area of Knox Workspace is supported.

Device command	Description
Lock Knox Workspace	Locks the Knox Workspace. Users cannot access the Knox Workspace unless you unlock it by sending this command.
Unlock Knox Workspace	Unlocks the Knox Workspace.
Reset Knox Workspace Password	Resets the Knox Workspace password. When the user forgets the Knox Workspace password, this command is sent to reset the password. NOTE — Depending on the Android OS version, the process to re-configure the new password may differ. For Android 8.0 and higher, the user receives a temporary password after KM authentication. And then, the user can re-configure the new Knox Workspace password. For operating systems lower than Android 8.0, the user can re-configure the Knox Workspace password directly after KM authentication.
Uninstall Knox Workspace	Deletes the selected Knox Workspace. Inventory information is updated on the server upon deletion.