Licensing

Last updated March 31st, 2026

Licenses for Knox Manage can be purchased on a monthly, yearly, or biennial basis. You can increase or decrease the number of licenses and extend or shorten each license’s validity period.

When purchasing licenses on a yearly basis, you can only increase the number of licenses and extend their validity periods. For more information about purchasing licenses, contact the regional sales team.
Licenses are granted and revoked in the order in which devices were enrolled with them.
Attempting to register devices in excess of the available assignments count will result in failure.

Getting and managing licenses

Starting with version 25.01, license names and key prefixes have been updated as follows to align with Knox Admin Portal’s new multi-plan license offering:

Previous		25.01 onwards
License name	Key prefix	License name	Key prefix	Can be upgraded?
Knox Manage	KLM12	Knox Suite Essentials Plan	KLM12	Yes — upgradable to Knox Suite Enterprise Plan (KLM12).
-	-	Knox Suite Enterprise Plan	KLM12	Highest license tier — upgradable from Knox Suite Essentials Plan by SKU change.
Knox Suite	KLM11	Knox Suite Enterprise Plan	KLM11	No — license type is only relevant to existing issued customers. However, you can replace it in Knox Admin Portal with a Knox Suite Enterprise Plan (KLM12) license.
Knox Platform for Enterprise	KLM09	Knox Platform for Enterprise	KLM09	N/A — this license is used with existing Legacy Knox Manage license keys to enable additional Knox features. It cannot be used separately, and cannot be used for upgrades.
Legacy Knox Manage	KLM09	Knox Manage	KLM09	No — this license type is going to be discontinued in the future. However, starting from 25.07, customers can replace a single KLM09 license in Knox Manage with a new Knox Suite Essentials Plan (KLM12) or a Knox Suite Enterprise Plan (KLM12) license.

All licenses are auto-assigned, generated, and managed from the Knox Admin Portal. Existing KLM09 licenses can still be managed in the original console, but this is a temporary workaround as customers transition to KLM12 licenses.

What happens to an expired license

Expired licenses retain some functionality, such as basic communication between a device with an expired license and Knox Manage. This lets you, for instance, unenroll a device or update its license.

However, you can’t deploy new settings, apps, profiles, or content to a device with an expired license. Additionally, the device user can’t download new configurations or content using the Knox Manage agent on their device.

View the following table to learn more about what happens when licenses expire:

Expired license type	Restrictions
Knox Manage	Console: A pop up explains that the license expired. Device controls are restricted. Available device commands: Unenroll Device Update license Update Knox Manage Agent Factory Reset Collect audit logs Collect device logs Collect diagnosis information Device: Access to the Knox Manage agent is restricted. The existing policies still apply.
Knox Suite	Console: A pop up explains that the license expired. Device controls are restricted. Available device commands: Unenroll Device Update license Update Knox Manage Agent Factory Reset Collect audit logs Collect device logs Collect diagnosis information Device: Access to the Knox Manage agent is restricted. The existing policies still apply.

Expired license type

Restrictions

Knox Manage

Console:

A pop up explains that the license expired.
Device controls are restricted.
Available device commands:
- Unenroll Device
- Update license
- Update Knox Manage Agent
- Factory Reset
- Collect audit logs
- Collect device logs
- Collect diagnosis information

Device:

Access to the Knox Manage agent is restricted.
The existing policies still apply.

Knox Suite