Error KMA_D9001 — Configuration Installation Failed

Environment

• Knox Manage
• 802.1xEAP Wi-Fi configuration
• Devices manufactured with Android 12 OS and lower

Overview

When using Knox Manage and applying an 802.1xEAP security type Wi-Fi configuration to your devices, you may encounter the following error:

[ERROR] [KMA_D9001]
Configuration Installation Failed
Configured items cannot be installed on the device. Please contact your administrator to check the profile or certificate settings.

Cause

On devices manufactured with Android 13 and higher, when applying a Wi-Fi configuration with 802.1xEAP security and the Trust on First Use policy set to Do Not Use, the CA Certificate and Domain fields are required. The error occurs when the device fails to find a certificate.

If the Trust on First Use policy is set to Use, a CA Certificate and Domain configuration isn’t required. However, on devices manufactured with Android 12 and lower, the Trust on First Use feature is unavailable on the device. This results in an error, even if the OS has been upgraded to Android 13 or higher.

Workaround

On devices manufactured with Android 12 and lower, you must configure your 802.1xEAP Wi-Fi profile with a CA Certificate and Domain. To do this in the Knox Manage console, see How to configure a Wi-Fi network with EAP-PEAP authentication.

On devices manufactured with Android 13 and higher, ensure Trust on First Use is enabled if there is no CA Certificate and Domain configuration.

If you’re still encountering an issue after configuration, please submit a support ticket for more information about supplicant HAL and Trust on First Use on your device model.