Error KMA_D9001 — Can’t push APN configuration to devices

Environment

• Knox Manage
• Android devices
• APN configuration

Overview

When trying to push a profile with an Access Point Name (APN) configuration to Android devices, the deployment can fail with the error:

[Error][KMA_D9001]

Configuration Installation Failed

Configured items cannot be installed on the device. Please contact your administrator to check the profile or certificate settings.

Cause

Defining more than one APN configuration across different policy sources within the same Android profile causes conflicts. There are three separate policy sources that can define an APN configuration:

• Android Enterprise
• Knox Service Plugin
• Samsung Knox for Android Enterprise

If your Android profile configures APNs in more than one of these sources, the configuration won’t deploy to your devices.

Workaround

When configuring the APN, use only one policy source. The appropriate policy source for your needs depends on the devices being managed:

• Devices without a dialer running Android 12 or higher — Knox Service Plugin
• Devices with a dialer running Android 12 or higher — Android Enterprise

Additional information

For more information about APN configuration, refer to the Knox Service Plugin policy reference.