How to find the Offline Unenrollment Code in Knox Manage

Environment

• Knox Manage

Overview

This knowledge base article guides you through the steps on how to find the Offline Unenrollment Code for enrolled devices and devices that were deleted from the Knox Manage console.

Knox Manage offers a feature that allows you to unenroll any devices stuck in a non-connectivity state. The user is required to enter an Offline Unenrollment Code on the device to complete the unenrollment process.

As a Knox Manage admin, you may require the Offline Unenrollment Code of deleted devices in the following situations:

• The Offline Unenrollment Code was lost and the device was deleted from the Knox Manage console, causing it to be locked. As the device is controlled by Knox Manage, the user can’t remove the policies or unenroll the device.
• The device was unenrolled using Force Unenroll without noting the Offline Unenrollment Code. The device never received the command due to a connectivity issue, so it’s no longer under Knox Manage control.

How do I find the Offline Unenrollment Code in Knox Manage if the device is still enrolled?

To get the Offline Unenrollment Code for an enrolled device:

1. On the Device page, select the devices you want to unenroll.

2. Click Unenroll. The Unenroll dialog opens and the Offline Unenrollment Code displays.

   

If the device is already unenrolled or deleted, the code doesn’t appear in the dialog box. There are two ways to get the Offline Unenrollment Code for a deleted device:

Deleted Devices menu (only for deleted devices)

Knox Manage 20.11 introduced the Deleted Devices menu to provide a more convenient way to retrieve the Offline Unenrollment and Exit Kiosk codes, along with unlimited device history and filtering options. To access this menu, click Deleted Devices on the Devices page. You can view the Offline Unenrollment Code(s) in the Unerollment Code column.

Audit Log (only for deleted devices)

To view the Offline Unenrollment Code through the Audit Log:

1. On the navigation pane, click History > Audit Log.
2. In the Log Date & Time field, select a date range that includes when the device was deleted.
3. In the Event field, enter “Offline Unenrollment Code & Exit Kiosk”.
4. To search for a specific device’s unenrollment code, enter the User ID or Device Name in the filter parameters.
5. Click the expand icon to view the device’s Offline Unenrollment Code.

You can then share the code with the user to successfully unenroll the disconnected device.

History (for unenrolled devices)

On the Device page, click See History in the Status Last Updated column. The See History dialog opens and the Offline Unenrollment Code displays.

How do I use the Offline Unenrollment Code in the Knox Manage Agent?

1. Open the left menu and tap Settings > Offline Unenrollment.

2. Enter the Offline Unenrollment Code.

3. Tap End.

   

Related articles

For more information on how to unenroll devices, see the Knox Manage admin guide.