List of environment settings

Select the response of the Knox Manage server when there are successive failed login attempts.

• Deactivate account until an upper level admin unlocks
• Disable login for 10 mins
• No action

Enter the maximum number of failed sign-in attempts. When users exceed the maximum, their accounts are locked.

You can enter a value from 3 to 10.

Enter an inactivity limit for admin accounts. If sub-admins or read-only admins don't sign in for longer than the limit you set, their accounts are locked. To unlock their accounts, they must ask the super admin.

You can enter a value from 10 to 9999.

Enter the maximum session time limit for the Knox Manage console. If the limit is exceeded, you are signed out automatically.

You can enter a value from 1 to 60.

Specify the method for updating the Knox Manage Agent on Android devices. You can choose from the following options:

• Manual. The device user can manually update the Knox Manage Agent on the device.
• User consent. The Knox Manage Agent can be automatically updated on the device, but the device user is shown a prompt asking for their permission to update the Knox Manage Agent. The device user can opt out of the update process.
• Force update. The Knox Manage Agent is automatically updated once a day using a background process. The device user cannot opt out of the update process.

Enter the standard time gap for connection of the device and server. This standard is used for displaying information in the Last Seen column of the device list in the Device menu.

• If the gap between the current time and the last connected time of a device does not exceed the standard, the Last Seen information of the device is displayed in green.
• If the gap between the current time and the last connected time of a device exceeds the standard, the Last Seen information of the device is displayed in red.

The value is entered in hours.

Enter the number of days to store location data (defaults to 30 days; minimum: 5 days; maximum: 180 days).

You will only be able to view device locations from within your specified timeframe – for example, if you enter 45, you can view device locations over the previous 45 days (including the day of your query).

When you register an APNs certificate on the console, this value is automatically entered.

If the value is different from the value in the Current Subject Name field in Setting > iOS > APNs Setting:

1. Open a command prompt on your PC.
2. Run C:/> keytool -v -list -storetype pkcs12 -keystore {APNS certificate filename}.p12 | find "UID".
3. Change the APNs Topic value to the value appearing after UID=.

Select how many notifications you will receive per day to send device commands which are sent but not applied successfully.

• 0. You receive no notification.
• 1. You receive a notification at 11 PM local time per tenant.
• 2. You receive a notification at 10 AM and 10 PM local time per tenant.

Unapplied device commands are listed in History > Device Command in Request.

For target devices that content sensitive or confidential date that is compromised if the device is unenrolled or unassigned, IT admins can use this option to automatically delete content upon unassignment. Content can be unassigned from a device in the following ways:

• The device is unenrolled from Knox Manage.
• The content is unassigned to the device's group or organization.
• The content is deleted on the Knox Manage console.

Set the polling cycle to send the Knox Manage command for Android devices.

If the polling interval is 0, polling will not be performed. However, polling is executed once after the Knox Manage Agent is started.

Enter the interval for collecting the inventory information for Android devices.

You can enter a value from 4 to 24 or 0 (the device inventory is not collected).

Enter the interval for collecting the inventory information for iOS devices.

You can enter a value from 4 to 24 or 0 (the device inventory is not collected).

Enter the interval for collecting the inventory information for Windows devices.

You can enter a value from 4 to 24 or 0 (the device inventory is not collected).

Configures where you can delete apps from. Available options are:

• Console (deletes apps from the console app list)
• Console + Device (deletes apps from the app list, and from devices in assigned groups and organizations)

Allows device users to rate apps and write app reviews in the Knox Manage agent's app store. Options are:

• Yes
• No

Lets you configure whether to allow or disallow uploading content files depending on the file extension. Available options are:

• Allow (allows all file extensions)
• Allowlist (only allows the file extensions you specify, denies all other types)
• Denylist (only denies the file extensions you specify, allows all other types)