What happens to the tenant and enrolled devices if the Knox Manage license expires?

Policies configured on the tenant and deployed to devices will remain active. You will, however, not be able to push new command except for the command to unenroll devices. Policies can’t be changed or removed until you’ve extended an expired license or entered a new valid license.