Knox Manage 24.09 release notes

New

Samsung Knox Manage (Companion) app for Android Management API devices with a work profile

Previously, the Knox Manage app was used for enrolling devices on all platforms. Knox Manage 24.09 introduces a new app specifically for Android Management API devices with a work profile called Samsung Knox Manage (Companion).

Like the existing app, the Samsung Knox Manage (Companion) app is automatically installed when you enroll an Android Management API device with a work profile. However, unlike the existing app, the Samsung Knox Manage (Companion) app must run in the foreground to be able to install certificates and collect device location data.

On signing in on the device, the device user is shown a work checklist, which includes installing work apps, and is prompted to complete the enrollment. After enrollment, the device user can use the app to view detailed information and can configure the app, if required. They can also use the app to find contact information for Support and send activity logs for troubleshooting.

Once enrolled, you can use the app to:

• Locate devices using a device command. Device users are prompted to enable location tracking and the Google location accuracy setting.
• Configure and push certificates to devices. Device users can tap a notification to install the certificate, or can manually install a certificate in the app.
• Send device commands: Collect Audit Log, Collect Device Log, Reset Push Token, and Collect Current Location.

For more information see Manage Android devices with the Android Management API.

Ability to configure Windows updates

With Knox Manage 24.09, you can now set up an Update configuration to manage the Windows versions on your devices. Some key settings are:

For a complete list of settings available to you, see Windows policies.

Improvements to the VPN policy

Knox Manage 24.09 includes the following improvements to VPN setup for Android devices:

See VPN settings for Android Enterprise for a comprehensive list.

Updates for the sub-admin role

Knox Manage 24.09 provides new and updated Permission and Restriction settings when adding a sub-admin:

For more information about the admin settings, see Menu access permissions.

Enhancements to Assign App pages on original and new consoles

Starting with Knox Manage 24.09, the Auto-run after Installation (Non-Android Management API) setting on the App Assign page is renamed to Automatically Run Apps (Non-Android Management API). See Assign internal Android, iOS, macOS, and Windows apps for more information.

Additionally, you can now select from the following values:

• After installation
• After installation and every app update. The previous Yes option is mapped to this value.
• Don’t automatically run app. The previous No option is mapped to this value.

Wear OS policy updates

With Knox Manage 24.09, the following updates are available:

• A new System policy is added for Wear OS devices in Knox Manage 24.09:

• Each policy now displays information about the supported Wear OS version in the tooltip.
• Applying the Key Remapping policy disables the Settings menu on the smartwatch to prevent device users from changing the setting.

Android Management API policy additions

With Knox Manage 24.09, the following Android Management API policies are added:

iOS policy additions

With Knox Manage 24.09, the following System policy is added:

API enhancements

Knox Manage 24.09 provides the following API related updates:

• A new Notification to device operation to send notifications to Android and iOS devices
• The Get Device Location operation now returns information about date and time in the ISO format using the new parameter stdFormatUpdated.

For more information on API updates in this release, see the Knox Manage 24.09 release notes in the developer guide.

Support for Device location map on the new console

Starting with Knox Manage 24.09, you can enable location tracking for devices in the new console and view the device locations on the Dashboard and the Devices page.

To view device location map:

1. On the Dashboard, click Customize and select Device location map. This displays the Devices by location card on the dashboard. You can search devices by device name, IMEI/SN, and user ID.
2. On the Devices page, select a device and click Actions > View device location to see the device’s location on a map.
3. Ensure that at least one profile is assigned to the group containing the devices, and the profile’s Location Settings > Allow collection of location data policy is enabled. Otherwise, the Devices by location card shows a Location tracking disabled notification.

Improvements to app management on the new console

Knox Manage 24.09 provides the following app updates.

Manual update of Managed Google Play apps

You can now manually update older versions of Managed Google Play, Managed Google Play private, or Managed Google Play web apps.

To update an app to the latest available version, click the app, and in the sliding panel, click the ellipsis (…) > Update app.

Modify Managed Google Play private or web apps

The new console now supports modifications to Managed Google Play private and web apps.

To update the apps:

1. Go to App library > Actions > Modify private or web apps.
2. Select an option for private or web app, and click Next:
   • Managed Google Play private — you can modify the app name and file.
   • Managed Google Play web — you can modify the app name, URL, display, and icon.
3. Select the app and modify its details.

Enhancements to the Assign app page on the new console

Knox Manage 24.09 provides the following updates on the Assign app page.

Scheduled installation of Managed Google Play apps

You can now specify the installation start time when you assign Managed Google Play, Managed Google Play private, or Manage Google Play web apps.

To set an installation schedule:

1. On the Assign app page, select one of the following installation types:
   • Auto-installed (can be removed by the user)
   • Auto-installed (can’t be removed by the user)
2. Click Schedule installation start time and set the following:
   • Select Set a time for all apps to start installing automatically.
   • Specify a date and time for app installation.
3. Click Save.

Version tracking of Managed Google Play private apps

When you now assign a Managed Google Play private app, you can also track the app’s versions.

On the Assign app page, select Use app track and select the app version to be installed. If the selected app version is higher than the app already installed on the device and their package names are the same, the app on the device is updated. If the app isn’t updated on the device, you must delete and reinstall it.

Improvements to the Devices page in the new console

Knox Manage 24.09 includes the following changes on the Devices page.

Manage device tags and nicknames

• The Manage device tags page now shows a new Overwrite existing tags option to overwrite device tags in bulk.
• You can now update device nicknames individually or in bulk. For individual device nicknames, update the Device nickname field in the sliding panel. For devices in bulk, use the MANAGE DEVICE NICKNAMES option on the BULK ACTIONS tab.

Additional device list columns

The following additional columns are now available to view information in the device list: Firmware version, Manufacturer, MAC Address, Agent version, Profile name & version, Last Device Command, Lock Status, ICCID information, and Roaming.

Updates to the device sliding panel

The sliding panel of a device shows the following additions:

• The Tags, Status last updated, Device details last updated and Location last updated fields under SUMMARY.
• The SECURITY, NETWORK, and DEVICE INFORMATION categories for improved navigation.
• The APPS > VIEW ALL option that opens the App Library page to view all installed and assigned apps.

Additions to the ACTIONS menu

Furthermore, the Devices page features the following new actions:

Support for Android device commands in new console

With Knox Manage 24.09, you can now use Android device commands to perform actions on selected devices.

• To access device commands in the new console, select the required devices and click ACTIONS > Perform action on device option on the Devices page.
• You can also add commonly-used device commands to FAVORITES.

Android policy additions on the new console

Knox Manage 24.09 provides the following changes to Android policies on the new console.

Terminology updates for Android policies in the new console

With Knox Manage 24.09, the following Android policies have been renamed in the original console for a more intuitive user experience:

Improvement to assignment settings for ChromeOS apps

Knox Manage 24.09 now supports new Incognito mode and Policy for extensions settings while assigning apps to ChromeOS devices. The Incognito mode setting prevents apps from saving certain information.

To use the new settings when assigning an app to the ChromeOS device:

1. On the Assign Application dialog, select Users & browsers and click OK. The Select Users & Browsers Application page displays.
2. Select the app and click Assign.
3. To allow use of the Incognito mode, set it to Locally applied and Yes. If you set it to No, the device user can’t use Incognito mode.
4. Set the Policy for extensions to Inherited from Google Default.
5. Click Assign & Update to Google to save your changes.

Support for Managed Configuration for Android apps on ChromeOS

With Knox Manage 24.09, you can now set Managed Configuration when assigning Android apps to ChromeOS devices.

To use this feature, during app assignment select Users & browsers mode, then select the app. Proceed to use the Manage Configuration field to specify configuration values.

1. On the Assign Application dialog, select Users & browsers and click OK. The Select Users & Browsers Application page displays.
2. Select the Android app and click Assign.
3. Set Managed Configuration to Inherited from Google Default.
4. Click Assign & Update to Google to save your changes.

Updates to ChromeOS device commands

The following ChromeOS device commands are newly added in Knox Manage 24.09:

The Capture logs and Export logs commands are supported on the following ChromeOS versions:

Updates

Enhancements to the Device page

Starting with Knox Manage 24.09, the Device page supports the following changes:

• When exporting device lists to Excel (Device > Export to Excel), the Device Nickname (Alias) is now also included.
• For iOS devices:
  • A new Advance Search filter called MDM Profile Removed(iOS). You can use this filter to search for iOS devices that are no longer connected to the Knox Manage server because their MDM profile was deleted. After you identify the devices, you can re-enroll them to reestablish their connection to the Knox Manage server.
  • In the search results, a tooltip MDM Profile Removed is shown in the Device Name column for devices not connected to the Knox Manage server.

Enhancements to the Group Details page

Knox Manage 24.09 includes the following updates to the Group Details page:

• New Advance Search for more effective search of devices in a group. The advanced options include a variety of device conditions.
• New column options to view additional information on the Device tab. You can choose from the following new options: Status, Last Seen, Device Name, IMEI / MEID, Serial Number, User Name, Device Tag, Platform & Management Type, Mobile Number, Enrollment Type, and Status Last Updated.

License update for Knox Browser

Knox Browser was a premium feature that required a Knox Suite license. With Knox Manage 24.09, Knox Browser is now available to all tenants, irrespective of the license type.

Windows OS improvements

Knox Manage 24.09 includes the following enhancements for Windows OS devices:

• Windows OS version information is now synced between Knox Admin Portal and Windows settings to show consistent version information.
• You can now install Knox Manage in Windows environments where the Microsoft Store app is not available.

Enhancements to file uploads

Knox Manage 24.09 includes the following enhancements to file uploads:

• Scanning of apps and content files for malware — previously, uploading apps and content files to the Knox Manage console didn’t involve checking them for malicious software.
  • Starting with Knox Manage 24.09, when you upload an APK file or a content file to the console, the files are automatically scanned for malware. If the scan is successfully completed, the file is uploaded and you can use it as required.
• Maximum file size for content uploads — you can now upload content files of up to 4 GB. Previously, the maximum file size allowed for upload was 2 GB.

Improvement to limited enrollment of Android Enterprise devices

Previously, you could set up limited enrollment for either Devices or KME Devices. With Knox Manage 24.09, you can now set up limited enrollment based on Management Types as well.

Consider the following when using the Management Types option:

• Device users belonging to one or more groups can enroll using a management type allowed for those groups.
• Device users that do not belong to any group can enroll using any management type.
• If a device user tries to enroll with a management type that is not allowed, a Mismatched Management Type error — with error code KMA_F9002 — displays on the device screen.

Persistent content sorting on Knox Manage agent

Previously, the Knox Manage agent’s Content screen didn’t retain its Ascending or Descending sort order if the device user navigated away from the screen. Starting with Knox Manage 24.09, the sort order on the Content screen persists even after the device user returns to the screen.

Improvements to API Client Log page

With Knox Manage 24.09, you can now search for API Client Logs using API names and view logs from a specific Log Date & Time range. The API Client Log page displays up to 500 rows of logs. You can use the new Load More button to view additional logs.

Support to prevent backup of VPP app data to iCloud

Previously, for Apple Volume Purchase Program (VPP) apps assigned to iOS or MacOS devices, the app data was automatically backed up to iCloud.

With Knox Manage 24.09, you can now disable the automatic backup of data for VPP apps assigned to iOS or macOS devices. To use this setting, on the Assign Application page, set Prevent iCloud App Backup to Yes.

Enhancements to Google server and sync settings for ChromeOS

Previously, Sync New Chrome OS Enrollments under Server Setting displayed a Sync Google option.

With Knox Manage 24.09, the Server Setting section is updated as follows:

Terminology updates for Android Enterprise policies

With Knox Manage 24.09, the following Android Enterprise policies have been renamed in the original console for a more intuitive user experience:

Mapping of custom wallpaper values

The existing Custom Wallpaper values are mapped to the new Set Customer Wallpaper settings as follows:

Platform updates

Latest supported platform versions

Knox Manage 24.09 supports the following latest platform versions:

Changes to minimum supported platform versions

Improvement to Wear OS enrollment

With 24.09, the enrollment process of Wear OS devices is improved to ensure faster enrollment. For information about how to enroll smartwatches, see Enroll a Wear OS device.

Miscellaneous updates to the new console

With Knox Manage 24.09, the new console includes the following miscellaneous updates:

• You can now view an app’s version code in the tooltip available on the Version field, which shows on the Add app and Edit app pages and on an app’s sliding panel.
• The Type field on an app’s sliding panel is now removed, since the information is available in App source details.
• Clicking the device count on the Devices issues card on the dashboard opens the Devices page to view details.
• The confirmation message on the Delete app(s) dialog is updated and the color of the Delete button is changed to red.
• The Profiles page now shows policies under following categories for improved navigation: System, Connectivity, Wi-Fi, Lock screen, Location, App restrictions, and Kiosk.
• The menu structure and policy settings structure on the Create policy page are updated for better user experience.
• You can now find settings on the Create profile and Create policy pages using search.
• Policy names are now editable. Previously, policy names couldn’t be edited once saved.
• The Created In column on the Profiles page is now shown only when the profile list contains a profile created in the original console.
• You can now no longer create a profile without defining settings. The Create and Review buttons on the Create policy page are enabled only if you define settings for the profile.

Change to tenant behavior regarding default organizations

Previously, a Default Organization was automatically created for all tenants. The Default Organization got assigned to users not added to any organization.

Starting with Knox Manage 24.09, the Default Organization is no longer automatically created for new tenants. Additionally, users are not required to be assigned to an organization, allowing greater flexibility to manage them using either a group or an organization.

Back to release notes