Menu

List of environment settings

The environment settings by category are as follows. All options have default values and the values can be modified.

Preferences

Country/Time

Option Description
Default Country Code Select the country of the Admin Portal. The country code and the corresponding language are used for user agreements, privacy policy, administrator/user enrollment, and public application enrollment on user devices.
Time Zone Select the time zone of the Knox Manage server. Based on the time zone, the information in the Admin Portal is displayed, tasks and events scheduled by administrators are performed, and user and device statistics are collected.
Date Format Set the date format to be applied to all screens that show dates, such as the Last updated field.

Logo

For more information about setting the log, see Setting the logo.

Option Description
Logo Image Click Select Image and upload the image file of your company logo. The image must be a GIF, JPG, PNG, or BMP file. The file cannot be larger than 190 x 33 and must be 1 MB or lower. Click Default to use the default image as your company logo.
Header Color Click the color box and set a color for the header.
Header Font Color Click the color box and set a color for the header text.
Preview Preview the company logo.

Authentication/Login

Configure the settings about the login environment and the administrator account.

Option Description
Two-Factor Authentication Enable the use of OTP authentication as well as an account ID and password when administrators sign in to the Admin Portal. For OTP authentication, the administrator’s mobile phone number or email address is required.
Allow Multi-point Logins Allow concurrent logins to the Admin Portal.
Action When Admin Login Fails

Select the response of the Knox Manage server when there are successive failed login attempts.

  • Deactivate account until an upper level admin unlocks
  • Disable login for 10 mins
  • No action
Maximum Failed Login Attempts

Enter the maximum number of failed login attempts. When users exceed the maximum, their accounts are locked.

You can enter a value from 3 to 10.

Inactivity Limit on Admin Accounts (days)

Enter an inactivity limit for administrator accounts. If sub-administrators or read-only administrators do not sign in for longer than the limit you set, their accounts are locked. To unlock their accounts, they must ask the super administrator.

You can enter a value from 10 to 9999.

Maximum Session Timeout (min)

Enter the maximum session time limit for the Admin Portal. If the limit is exceeded, you will be signed out automatically.

You can enter a value from 1 to 60.

Device

Device

Configure the device management settings.

Option
Description
Based on Last Seen (time)
Enter the standard time gap for connection of the device and server. This standard is used for displaying information in the Last Seen column of the device list in the Device menu.
  • If the gap between the current time and the last connected time of a device does not exceed the standard, the Last Seen information of the device is displayed in green.
  • If the gap between the current time and the last connected time of a device exceeds the standard, the Last Seen information of the device is displayed in red.
The value is entered in hours.
Limited Enrollment
Enable enrollment of mobile devices using their IMEI or serial numbers.
Device Location View Period (days)
Enter the period for saving device location data. You can view the location of devices saved during that time period.
Maximum Number of Active Devices per User
Select the number of devices that can be enrolled per user.
APNs Topic for iOS
When you register an APNs certificate in the Admin Portal, this value is automatically entered.
If the value is different from the value in the Current Subject Name field in Setting > iOS > APNs Setting, complete the following steps:
  1. Start the command prompt on your PC.
  1. Enter C:/> keytool -v -list -storetype pkcs12 –keystore {APNS certificate filename}.p12 | find “UID“.
  2. Change the APNs Topic value to the value appearing after “UID=”.
Daily retries for device commands in queue
Select how many notifications you will receive per day to send device commands which have been sent but not applied successfully.
  • 0: You will receive no notification.
  • 1: You will receive a notification at 11 PM local time per tenant.
  • 2: You will receive a notification at 10 AM and 10 PM local time per tenant.
Unapplied device commands are listed in History > Device Command in Request.
Camera Option from Lock Screen for iOS
Enable the camera feature on iOS devices when the device screen is locked.
Delete App upon Unenrollment
Enable the applications installed on a device to be deleted when the device is unenrolled. The deletion targets are internal applications for Android devices and all applications installed through Knox Manage for iOS devices.
Notification that policy is not applied
Enable sending a notification to the device when no profile is applied to a group or organization. When the user turns off the alarm in the device's setting menu, notifications on whether the profile is applied will not appear.
Direct boot command polling interval for Android (min)
Set the polling cycle to send the Knox Manage command for Android devices.
If the polling interval is 0, polling will not be performed. However, polling is executed once after the Knox Manage Agent is started.

Inventory Scheduler

Configure the interval to collect the device inventory by mobile OS.

Option Description
Inventory Collection Interval for Android (hr)

Enter the interval for collecting the inventory information for Android devices.

You can enter a value from 4 to 24 or 0 (the device inventory is not collected).

NOTE— To set an interval for collecting the location data of Android devices, navigate to Profile. Click a profile name and click Modify Policy > Android Enterprise or Android (Legacy) > Location > Report device location interval. For more information, see Location (Android Enterprise) or Location (Android Legacy).

Inventory Collection Interval for iOS (hr) Inventory Collection Interval for Windows (hr)

Enter the interval for collecting the inventory information for iOS devices.

You can enter a value from 4 to 24 or 0 (the device inventory is not collected).

Inventory Collection Interval for Windows (hr)

Enter the interval for collecting the inventory information for Windows devices.

You can enter a value from 4 to 24 or 0 (the device inventory is not collected).

App & Service Desk

Application

Configure the application deletion setting.

Option Description
Manage Deletion

Select the area to delete applications from.

  • Console: Deletes applications only from the application list in the Admin Portal.
  • Console + Device: Deletes applications from the application list and also from the devices in the assigned groups/organizations.

Knox Manage App Store

Configure the activation of the review feature in the Knox Manage App Store.

Option Description
Knox Manage App Store Review Enable users to evaluate and write a review about applications in the Knox Manage App Store.

Service Desk

Enter the service desk information displayed on user devices.

Option Description
Service Desk Email Enter the service desk email address.
Service Desk Phone Enter the service desk phone number.