Server audit events

The following table contains all audit events concerning the Knox Manage server, external requests from devices, and device data collection by the inventory scheduler.

Event Category	Event Name
AD/LDAP Sync	Start external sync work Stop external sync work Add User By Sync Modify User By Sync Delete User By Sync Ignore AD/LDAP Synced User Error Occurred While Synching User Add Organization By Sync Modify Organization By Sync Delete Organization By Sync Ignore AD/LDAP Synced Organization Error Occurred While Synching Organization Initialize Sync Process Finish Sync Start external sync operation Stop external sync operation Automatically send profile to target users after synchronization ends Request managed apps mapping action to target users after synchronization ends Register automatic synchronization schedule Unschedule automatic synchronization
Administrators	Delete the export files that have elapsed the retention period
Android Enterprise	Failed to request the authentication token for Android Enterprise device enrollment Failed to update Google Device ID (Google → Device)
Android Management API	Load User Assignment Data for AMAPI Device Management Insert User Assignment Data for AMAPI Device Management Update User Assignment Data for AMAPI Device Management Assign Users for AMAPI Device Management
Applications	Modify App Status Due To App Service Expiration Date Failed to import the app information from the multiple apps Request the Uninstall App device command in a group or organization Request to transfer App Install Device Command to assigned device App Deployment Scheduler Start App Deployment Scheduler End App Deployment Scheduler Start to Generate Google Play Store iframe token for Chrome OS Request Google API to Generate Google Play Store iframe token for Chrome OS Complete to Generate Google Play Store iframe token for Chrome OS Start to Generate iframe URL about List of Permissions for the App for Chrome OS Request Google API to Generate iframe URL about List of Permissions for the App for Chrome OS Complete to Generate iframe URL about List of Permissions for the App for Chrome OS Start to Approve App Permissions for Chrome OS Request Google API to Approve App Permissions for Chrome OS Complete to Approve App Permissions for Chrome OS Start to Retrieve Schema of Configurable Properties for Chrome OS Request Google API to Retrieve Schema of Configurable Properties for Chrome OS Complete to Retrieve Schema of Configurable Properties for Chrome OS Start to Retrieve Managed Google Play App for Chrome OS Request Google API to Retrieve Managed Google Play App for Chrome OS Complete to Retrieve Managed Google Play App for Chrome OS Start to Retrieve App Details for Chrome OS Request Google API to Retrieve App Details for Chrome OS Complete to Retrieve App Details for Chrome OS Start to Get List of Assigned App by Organization for Chrome OS Request Google API to Get List of Assigned App by Organization for Chrome OS Complete to Get List of Assigned App by Organization for Chrome OS Start to Get List of App Settings Schema Request Google API to Get List of App Settings Schema Complete to Get List of App Settings Schema Start Syncing App Feedback (EMM API) Start Syncing App Feedback (AMAPI) Update App Feedback Start Retrieving List of Kiosk Apps Assigned by Organization (for Chrome OS) Finish Retrieving List of Kiosk Apps Assigned by Organization (for Chrome OS) Start Retrieving List of Kiosk App Settings Schema (for Chrome OS) Finish Retrieving List of Kiosk App Settings Schema (for Chrome OS) Start Getting the List of Assigned Managed Guest Session Apps by Organization for Chrome OS Finish Getting the List of Assigned Managed Guest Session Apps by Organization for Chrome OS Start Getting the List of Managed Guest Session App Settings Schema Finish Getting the List of Managed Guest Session App Settings Schema Start Getting the Detailed Information of Devices for Chrome OS Finish Getting the Detailed Information of Devices for Chrome OS
Compliance	Report policy violation Start Keepalive Check Close Keepalive Check Handle Keepalive violations Check Point MTP Malware detection information Update Device Status (System Block) Run Keepalive task No Keepalive task or not configured Update Device Status (Disconnected) Send email with the expected disconnection time of device(s) by Keepalive
Contents	Request Content List Report Content Status
Device Command	Distribute the latest device management profile/app information (Device control transmit) Distribute the latest device management profile (Device control transmit) Distribute the latest information on internal application (Device control transmit) Implement User-defined event - Activate (Device control transmit) Implement User-defined event - Deactivate (Device control transmit) Implement Gate event - Activate (Device control transmit) Implement Gate event - Deactivate (Device control transmit) Disable Exchange block - Activate (Device control transmit) Disable Exchange block - Deactivate (Device control transmit) Install app (Device control transmit) Implement app (Device control transmit) Close app (Device control transmit) Delete app data (Device control transmit) Delete app (Device control transmit) Allow/Disallow running an app - Allow (Device control transmit) Allow/Disallow running an app - Disallow (Device control transmit) Lock/Unlock the device - Lock (Device control transmit) Lock/Unlock the device - Unlock (Device control transmit) Reset screen password (Device control transmit) Factory reset (Device control transmit) Power off the device (Device control transmit) Reboot the device (Device control transmit) Initialize external SD card (Device control transmit) Activate/Deactivate CC mode - Activate (Device control transmit) Activate/Deactivate CC mode - Deactivate (Device control transmit) Lock screen (Device control transmit) Attestation (Device control transmit) Initialize information on blocking (Device control transmit) Deactivate service (Device control transmit) Collect Audit log -Agent (Device control transmit) Collect log -Agent (Device control transmit) Collect diagnosis information (Device control transmit) Update License (Device control transmit) Update System app (Device control transmit) H/W status (Device control transmit) List of apps installed (Device control transmit) Location (Device control transmit) SIM verification (Device control transmit) Report the status (Device control transmit) Lock/Unlock container - Lock (Device control transmit) Lock/Unlock container - Unlock (Device control transmit) Reset container lock passcode (Device control transmit) Delete container (Device control transmit) Install container app (Device control transmit) Run container app (Device control transmit) Close container app (Device control transmit) Delete container app data (Device control transmit) Delete container app (Device control transmit) Apply security policy (Device control transmit) Distribute the latest app management profile (Device control transmit) Check if a device has been rooted (Device control transmit) Unlock EMM Client (Device control transmit) Send a message (Device control transmit) Delete an account (Device control transmit) Lock screen (Device control transmit) Collect Audit log - Client (Device control transmit) Collect log -Client (Device control transmit) Collect diagnosis information (Device control transmit) Update user information (Device control transmit) Update system app (Device control transmit) Location (Device control transmit) Apply security policy (Device control transmit) Apply security policy - Deactivate (Device control transmit) Transfer event information (Device control transmit) Install AndroidForWork app (Device control transmit) Delete AndroidForWork app (Device control transmit) Deactivate service (Device control transmit) Invite program (Device control transmit) Invite To Program (Response) Check if an app has been installed (Device control transmit) Activate event to time - Deactivate (Device control transmit) Activate event to time - Activate (Device control transmit) Notice of a fail to activate service (Device control transmit) Request to activate visitor policy request (Device control transmit) Deactivate visitor policy request (Device control transmit) Agent Invalid protocol Agent Invalid request Agent Request to distribute device management profile (Device → Server) Agent Respond to the request to distribute device management profile (Server → Device) Agent Request to enable/disable event (Device → Server) Agent Respond to the request to enable/disable event (Server → Device) Agent Request to block Exchange (Device → Server) Agent Respond to the request to block Exchange (Server → Device) Agent Request to disable blocking Exchange (Device → Server) Agent Respond to the request to disable blocking Exchange (Device → Server) Agent Request to install app (Device → Server) Agent Respond to the request to install app (Server → Device) Agent Request to run app (Device → Server) Agent Respond to the request to run app (Server → Device) Agent Request to close app (Device → Server) Agent Respond to the request to close app (Server → Device) Agent Request to delete app data (Device → Server) Agent Respond to the request to delete app data (Server → Device) Agent Request to delete app (Device → Server) Agent Respond to the request to delete app (Server → Device) Agent Request to allow running app (Device → Server) Agent Respond to the request to allow running app (Server → Device) Agent Request to disallow running app (Device → Server) Agent Respond to the request to disallow running app (Server → Device) Agent Request to lock screen (Device → Server) Agent Respond to the request to lock device (Server → Device) Agent Request to unlock device (Device → Server) Agent Respond to the request to unlock device (Server → Device) Agent Request to reset lock device password (Device → Server) Agent Respond to the request to reset lock device password (Server → Device) Agent Request factory reset (Device → Server) Agent Respond to the request for factory reset (Server → Device) Agent Request to power off device (Device → Server) Agent Respond to the request to power off device (Server → Device) Agent Request to reboot device (Device → Server) Agent Respond to the request to reboot device (Server → Device) Agent Request to initialize external SD card (Device → Server) Agent Respond to the request to initialize external SD card (Server → Device) Agent Request to set CC mode (Device → Server) Agent Respond to the request to set CC mode (Server → Device) Agent Request to turn off CC mode (Device → Server) Agent Respond to request to turn off CC mode (Server → Device) Agent Request to collect device information (Device → Server) Agent Respond to the request to collect device information (Server → Device) Multiple devices distributed sending Agent Request to update license (Device → Server) Agent Respond to the request to update license (Server → Device) Agent Request to update system app (Device → Server) Agent Respond to the request to update system app (Server → Device) Agent Request for SIM verification (Device → Server) Agent Respond to the request for SIM verification (Server → Device) Agent Request to lock container (Device → Server) Agent Respond to the request to lock container (Server → Device) Agent Request to unlock container (Device → Server) Agent Respond to the request to unlock container (Server → Device) Agent Request to reset lock container password (Device → Server) Agent Respond to the request to reset container password (Server → Device) Agent Request to delete container (Device → Server) Agent Respond to the request to delete container (Server → Device) Agent Request to install container app (Device → Server) Agent Respond to the request to install container app (Server → Device) Agent Request to run container app (Device → Server) Agent Respond to the request to run container app (Server → Device) Agent Request to close container app (Device → Server) Agent Respond to the request to close container app (Server → Device) Agent Request to delete container app (Device → Server) Agent Respond to the request to delete container app (Server → Device) Agent Request to delete container app (Device → Server) Agent Respond to the request to delete container app (Server → Device) Agent Request to report policy violation (Device → Server) Agent Respond to the request to report policy violation (Server → Device) Agent Request to reissue code to disable service (Device → Server) Agent Respond to the request to reissue code to disable service (Server → Device) Agent Request for Attestation Nonce (Device → Server) Agent Respond to the request for Attestation Nonce (Server → Device) Agent Request for Attestation verification (Device → Server) Agent Respond to the request for Attestation verification (Server → Device) Agent Request for app information (Device → Server) Agent Respond to the request for app information (Server → Device) Agent Request to collect diagnosis information (Device → Server) Agent Respond to the request to collect diagnosis information (Server → Device) Agent Request for work report (Device → Server) Agent Respond to the request for work report (Server → Device) Agent Request for command (Device → Server) Agent Install profile (Server → Device) Agent Delete profile (Server → Device) Agent Search information on apps installed (Server → Device) Agent Search device information (Server → Device) Agent Search security information (Server → Device) Agent Device lock (Server → Device) Agent Reset password (Server → Device) Agent Factory reset (Server → Device) Agent Install app (Server → Device) Agent Information on apps installed through MDM Agent Delete app (Server → Device) Agent Set app properties (Server → Device) Agent Set the items included in app settings (Server → Device) Agent Information on Settings of apps installed through MDM (Server → Device) Agent Information on properties of apps installed through MDM (Server → Device) Agent Feedback on settings of apps installed through MDM (Server → Device) Agent Initialize information on blocking (Server → Device) Agent Report status (Server → Device) Agent Respond to the request to handle command (Device → Server) Reset data usage (Device control transmit) Reset number of calls (Device control transmit) Agent Request to collect device and reset data usage (Device → Server) Agent Respond to the request to collect device and reset data usage (Server → Device) Agent Request to collect device and reset number of calls (Device → Server) Agent Respond to the request to collect device and reset number of calls (Server → Device) Client Perform Server Init logic (Device → Server) Client Request to distribute the latest app management profile (Device → Server) Client Respond to the request to distribute the latest app management profile (Server → Device) Client Request for work report (Device → Server) Client Respond to the request for work report (Server → Device) Client Request to activate application of security policy (Device → Server) Client Respond to the request to activate application of security policy (Server → Device) Client Request to deactivate application of security policy (Device → Server) Client Respond to the request to deactivate application of security policy (Server → Device) Client Request to delete security policy profile (Device → Server) Client Respond to the request to delete security policy profile (Server → Device) Client Request to backup bookmarks (Device → Server) Client Respond to the request to backup bookmarks (Server → Device) Client Request to backup homepages (Device → Server) Client Respond to the request to backup homepages (Server → Device) Client Request to send Device control (EMM Agent) (Device → Server) Client Respond to the request to send Device control (EMM Agent) (Server → Device) Handle multiple devices by sending device control Device command transmission for each area in multiple devices. Insert command Select command Delete command Update command Command queue retransmission is in progress. No target for command queue retransmission Command queue retransmission Command queue retransmission has started. Command queue retransmission is finished. Delete commands left due to unenrollment command Duplicated Command Delete records of policy violation (Device → Server) Delete records of policy violation (Server → Device) Agent Request for command (Device → Server) Agent Request for command (Server → Device) Client Request for command (Device → Server) Client Request for command (Server → Device) Custom device control (Send device control) Request for command (Device → Server) Distribute device management profile (Server → Device) Collect device information (Server → Device) Device lock (Server → Device) Factory reset (Server → Device) Custom device control (Server → Device) Respond to the request to handle command (Device → Server) Start SyncML Session (Device → Server) Close SyncML Session (Server → Device) Register Push (WNS PFN) (Server → Device) Collect device and app information (Device control transmit) Collect device information (Device control transmit) Collect app information (Device control transmit) Collect current location information (Device control transmit) Collect audit information (Device control transmit) Collect log information (Device control transmit) Download content (Device control transmit) Update E-FOTA Firmware Version (Device control transmit) Agent Request to collect device and app information (Device → Server) Agent Respond to the request to collect device and app information (Server → Device) Agent Request to collect device information (Device → Server) Agent Respond to the request to collect device information (Server → Device) Agent Request to collect app information (Device → Server) Agent Respond to the request to collect app information (Server → Device) Agent Request to collect device and current location information (Device → Server) Agent Respond to the request to collect device and current location information (Server → Device) Agent Request to collect device and audit information (Device → Server) Agent Respond to the request to collect device and audit information (Server → Device) Agent Request to collect device and log information (Device → Server) Agent Respond to the request to collect device and log information (Server → Device) Agent Request to download content (Device → Server) Agent Respond to the request to download content (Server → Device) Agent Request to update fota firmware version (Device → Server) Agent Respond to the request to update fota firmware version (Server → Device) Deactivate MDM agent for synchronization between server and device Flush command queue (Device control transmit) H/W status (Device control transmit) List of apps installed (Device control transmit) Apply security policy (Device control transmit) Send an INI File (Device → Server) Get device status (Device → Server) Send an INI File (Server → Device) Get device status (Server → Device) Collect Audit log - Client (Device control transmit) Collect log -Client (Device control transmit) Location (Device control transmit) Check if a device has been rooted (Device control transmit) Agent Report status (Server → Device) Agent Invalid protocol Agent Invalid request Agent Request to distribute device management profile (Device → Server) Agent Respond to the request to distribute device management profile (Server → Device) Agent Request to install app (Device → Server) Agent Respond to the request to install app (Server → Device) Agent Request to run app (Device → Server) Agent Respond to the request to run app (Server → Device) Agent Request to close app (Device → Server) Agent Respond to the request to close app (Server → Device) Agent Request to delete app (Device → Server) Agent Respond to the request to delete app (Server → Device) Agent Request to lock screen (Device → Server) Agent Respond to the request to lock device (Server → Device) Agent Request factory reset (Device → Server) Agent Respond to the request for factory reset (Server → Device) Agent Request to power off device (Device → Server) Agent Respond to the request to power off device (Server → Device) Agent Request to reboot device (Device → Server) Agent Respond to the request to reboot device (Server → Device) Agent Request to collect device information (Device → Server) Agent Respond to the request to collect device information (Server → Device) Agent Request to update license (Device → Server) Agent Respond to the request to update license (Server → Device) Agent Request to update system app (Device → Server) Agent Respond to the request to update system app (Server → Device) Agent Request to reissue code to deactive service (Device → Server) Agent Respond to the request to reissue code to deactive service (Server → Device) Agent Request for app information (Device → Server) Agent Respond to the request for app information (Server → Device) Agent Request for work report (Device → Server) Agent Respond to the request for work report (Server → Device) Agent Request for command (Device → Server) Agent Request for command (Server → Device) Agent Request to collect device information (Device → Server) Agent Respond to the request to collect device information (Server → Device) Agent Request to collect app information (Device → Server) Agent Respond to the request to collect app information (Server → Device) Agent Request to collect device and current location information (Device → Server) Agent Respond to the request to collect device and current location information (Server → Device) Agent Request to collect device and log information (Device → Server) Agent Respond to the request to collect device and log information (Server → Device) Deactivate MDM agent for synchronization between server and device Request for property sync of app auto deletion when deactivating (Device → Server) Respond to property sync of app auto deletion when deactivating (Server → Device) Request for profile deletion (Device → Server) Respond to profile deletion (Server → Device) Synchronize property of app auto deletion when deactivating (Device Command) Request for custom control (Device → Server) Respond to custom control (Server → Device) Respond to Agent command (Server → Device) Request for external SD card authentication (Device → Server) Respond to external SD card authentication (Server → Device) Authenticate external SD card (Device Command) Uninstall Application (MTP) (Device → Server) Uninstall Application (MTP) (Server → Device) Uninstall Application (MTP) (Device control transmit) Activate-Exception Profile Deactivate-Exception Profile Update event time (Device control transmit) Device command transmission for each area in one device Device command transmission for each area in multiple devices CSM deactivate (Device control transmit) CSM deactivation request (Server → Device) CSM deactivation response (Device → Server) Client Request for policy summary (Device → Server) Client Respond for policy summary (Server → Device) Collect EMM Client information (Server → Device) Update Agent User information (Server → Device) Agent Device Control Fail on a Device Client Device Control Fail on a Device Agent Device Control Success on a Device Client Device Control Success on a Device Request for Google managed app permission (Server → Google) Request for Management configuration of Google managed app (Server → Google) Request for Google managed app installation (Server → Google) Request for Google managed app uninstallation (Server → Google) Request for user authentication password reset (Device → Server) Response to user authentication password reset (Server → Device) Contents deployment (Send device control) Request for Agent contents deployment (Device → Server) Response to Agent contents deployment (Server → Device) Delete the audit logs elapsed over the retention period. Collect Profile ID (Device → Server) Collect Profile ID (Server → Device) Collect Profile ID (Send device control) Contents transfer Factory Reset (only) (Send Device Command) Agent Factory Reset (Only) request (Device → Server) Lock screen (Device → Server) Lock screen (Server → Device) Lock screen (Device control transmit) SafetyNet Attestation Nonce Request (Device → Server) SafetyNet Attestation Nonce Request (Server → Device) SafetyNet Attestation Nonce Request (Device command transfer) SafetyNet Attestation Verification Request (Device → Server) SafetyNet Attestation Verification Request (Server → Device) SafetyNet Attestation Verification Request (Device command transfer) Delete User Certificate (Device → Server) Delete User Certificate (Server → Device) Delete User Certificate (Device command transfer) Delete CA Certificate (Device → Server) Delete CA Certificate (Server → Device) Delete CA Certificate (Device command transfer) Delete CA Certificates for All Users (Device → Server) Delete CA Certificates for All Users (Server → Device) Delete CA Certificates for All Users (Device command transfer) Delete User Certificate for Work Profile (Device → Server) Delete User Certificate for Work Profile (Server → Device) Delete User Certificate for Work Profile (Device command transfer) Delete CA Certificate for Work Profile (Device → Server) Delete CA Certificate for Work Profile (Server → Device) Delete CA Certificate for Work Profile (Device command transfer) Delete All Users' CA Certificates for Work Profile (Device → Server) Delete All Users' CA Certificates for Work Profile (Server → Device) Delete All Users' CA Certificates for Work Profile (Device command transfer) Push token initialization Unlock Knox Manage agent (Device control transmit) Lock Screen of Knox Manage agent (Device control transmit) Exit Kiosk (Device → Server) Exit Kiosk (Server → Device) Exit Kiosk (Device command transfer) Change License (Device → Server) Change License (Server → Device) Change License (Device command transfer) Request Knox Service Plugin feedback (Device → Server) Response Knox Service Plugin feedback (Server → Device) Switch to Fully Managed (Remove Work Profile; Device → Server) Switch to Fully Managed (Remove Work Profile; Server → Device) Switch to Fully Managed (Remove Work Profile; Device command transfer) Device Status Change Result OS Update (Device Control Transfer) Enable Agent Lost Mode (Server → Device) Enable Lost Mode (Device Control Transfer) Disable Agent Lost Mode (Server → Device) Disable Lost Mode (Device Control Transfer) Successfully added a geofencing event Scan Available OS Update (Server → Device) Schedule OS Update (Server → Device) Collect Location Info (Server → Device) Exit Shared Device Mode (Device → Server) Exit Shared Device Mode (Server → Device) Exit Shared Device Mode (Device command transfer) Delete User Data (Device → Server) Delete User Data (Server → Device) Delete User Data (Device command transfer) Check User Out (Device → Server) Check User Out (Server → Device) Check User Out (Device command transfer) Reset Managed Google Account (Device → Server) Reset Managed Google Account (Server → Device) Reset Managed Google Account (Device command transfer) Enroll Duplicate Device (Android) Enroll Duplicate Device (iOS) Update the KM Client user information Update the KM Client user information (Server → Device) Request KM Client installation (Server → Device) Request KM Client installation status (Server → Device) Request the reason for app installation failure (Server → Device) Request the Agent activity report (Install App) (Device → Server) Request the Agent activity report (Install App) (Device → Server) Request the Agent activity report (Uninstall App) (Device → Server) Request the Agent activity report (Uninstall App) (Device → Server) Request the Agent activity report (Attestation) (Device → Server) Request the Agent activity report (Apply Latest Profile) (Device → Server) Request the Agent activity report (Configuration) (Device → Server) Request the Agent activity report (Install App) (Device → Server) Request the Agent activity report (KeepAlive) (Device → Server) Request the Agent activity report (Location) (Device → Server) Respond to the Agent activity report (Event Profile) (Server → Device) Respond to the Agent activity report (Update License) (Server → Device) Respond to the Agent activity report (Change License) (Server → Device) Respond to the Agent activity report (Change License) (Device → Server) Respond to the Agent activity report (Unenroll) (Server → Device) Respond to the Agent activity report (Install App) (Server → Device) Respond to the Agent activity report (Install App) (Server → Device) Respond to the Agent activity report (Install App) (Server → Device) Respond to the Agent activity report (Uninstall App) (Server → Device) Respond to the Agent activity report (Uninstall App) (Server → Device) Respond to the Agent activity report (Attestation) (Server → Device) Respond to the Agent activity report (Apply Latest Profile) (Server → Device) Respond to the Agent activity report (Configuration) (Server → Device) Respond to the Agent activity report (Install App) (Server → Device) Respond to the Agent activity report (KeepAlive) (Server → Device) Respond to the Agent activity report (Location) (Server → Device) Request the Agent activity report (Event Profile) (Device → Server) Request the Agent activity report (Update License) (Device → Server) Request the Agent activity report (Change License) (Device → Server) Request the Agent activity report (Change License) (Server → Device) Request the Agent activity report (Unenroll) (Device → Server) Request the Agent activity report (Install App) (Device → Server) Request the Agent activity report (Knox Workspace) (Device → Server) Respond to the Agent activity report (Knox Workspace) (Server → Device) Delete Unauthorized Container (Device → Server) Delete Unauthorized Container (Server → Device) Delete Unauthorized Container (Device command transfer) Notification of application installation result (Device → Server) Assigned Application Install Request (Server → Device) Play Alarm Sound (Device → Server) Play Alarm Sound (Server → Device) Play Alarm Sound (Device command transfer) Assigned Application Update Request (Server → Device) Assigned Application Update Request (Device → Server) Assigned Application Update Request (Device command transfer) Request to install the app (Server → Device) Request to delete the app (Server → Device) Notification of application deletion result (Device → Server) Save User Information (Device → Server) Save User Information (Server → Device) Save User Information (Device command transfer) Check User Out (Device → Server) Check User Out (Server → Device) Update User Information (Device → Server) Update User Information (Server → Device) Update User Information (Device → Server) Update User Information (Server → Device) Update User Information (Device → Server) Update User Information (Server → Device) Request to device command (Apply Latest Profile) (Server → Google) Request to device command (Unenroll Device) (Server → Google) Request to device command (Reset Screen Password) (Server → Google) Request to device command (Lock Screen) (Server → Google) Request to device command (Apply Latest Profile) (Server → Google) Request to device command (Unenroll Device) (Server → Google) Request to device command (Reset Screen Password) (Server → Google) Request to device command (Lock Screen) (Server → Google) Request to device command (Reboot Device) (Server → Google) Shared iPad Settings (Device Command Transfer) Agent Shared iPad Settings (Server → Device) Agent Shared iPad Passcode Grace Period Settings (Server → Device) Request Azure AD User Settings Information (Server → Device) Set Device Name (Server → Device) Run Time Event - Activate (Server → Google) Run Time Event - Deactivate (Server → Google) Reapply KSP Wi-Fi Configurations (Device → Server) Reapply KSP Wi-Fi Configurations (Server → Device) Reapply KSP Wi-Fi Configurations (Device Command Transfer) Request Device Command (Reset Screen Password) (Device → Server) Request Device Command (Lock Screen) (Device → Server) Request Device Command (Reboot Device) (Device → Server) Request Device Command (Apply Latest Profile) (Device → Server) Request Device Command (Unenroll Device) (Device → Server) Request Device Command (Reset Screen Password) (Device → Server) Request Device Command (Lock Screen) (Device → Server) Request Device Command (Reboot Device) (Device → Server) Request Device Command (Apply Latest Profile) (Device → Server) Request Device Command (Unenroll Device) (Device → Server) Setting App Configuration (Server → Device) Request to apply the latest profiles (Device → Server) Request factory reset (Device → Server) Respond to factory reset request (Server → Device) Request to reboot device (Device → Server) Request to reset screen password (Device → Server) Request to deactivate device (Device → Server) Respond to device deactivation request (Server → Device) Request to update Knox Manage Agent (Device → Server) Respond to Knox Manage Agent update request (Server → Device) Request to collect audit log (Device → Server) Respond to audit log collection request (Server → Device) Request device log collection (Device → Server) Respond to device log collection request (Server → Device) Request bug report collection (Device → Server) Respond to bug report collection request (Server → Device) Request to reset push token (Device → Server) Respond to push token reset request (Server → Device) Request to sync device information (Device → Server) Respond to device information sync request (Server → Device) Request to sync installed app list (Device → Server) Respond to installed app list sync request (Server → Device) Agent Request to install app (Device → Server) Agent Respond to the request to install app (Server→ Device) Agent Request to delete app(Device→ Server) Agent Respond to the request to delete app (Server→ Device) Agent Request to collect device information (Device → Server) Agent Respond to the request to collect device information (Server→ Device) Agent Request to update license (Device → Server) Agent Respond to the request to update license (Server→ Device) Agent Request for app information (Device→ Server) Agent Respond to the request for app information(Server→ Device) Agent Request for work report (Device→ Server) Agent Respond to the request for work report (Server→ Device) Agent Request for command (Device → Server) Agent Request for command (Server → Device) Request hardware status collection (Device → Server) Respond to hardware status collection request (Server → Device) Convert License (Device → Server) Convert License (Server → Device) Create Public Key (Device → Server) Create Public Key (Server → Device) Request the Agent activity report (Uninstall App) (Device → Server) Request the Agent activity report (Apply Latest Profile) (Device → Server) Request the Agent activity report (Configuration) (Device → Server) Request the Agent activity report (Install App) (Device → Server) Respond to the Agent activity report (Update License) (Server → Device) Respond to the Agent activity report (Convert License) (Server → Device) Respond to the Agent activity report (Unenroll) (Server → Device) Respond to the Agent activity report (Install App) (Server → Device) Respond to the Agent activity report (Uninstall App) (Server → Device) Respond to the Agent activity report (Apply Latest Profile) (Server → Device) Respond to the Agent activity report (Configuration) (Server → Device) Respond to the Agent activity report (Install App) (Server → Device) Request the Agent activity report (Update License) (Device → Server) Request the Agent activity report (Convert License) (Device → Server) Request the Agent activity report (Unenroll) (Device → Server) Request the Agent activity report (Install App) (Device → Server) Contents deployment (send device control) Request to exit dedicated device mode (Device → Server) Respond to exit dedicated device mode (Server → Device) Exit Dedicated Device Mode (Device Command Transfer)
Device	Insert Device Push Token Register Device License (Server) Update Device License (Server) Convert Device License (Server)
Devices
Device Enrollment Program	Start DEP Device Sync Scheduler End DEP Device Sync Scheduler DEP Device Sync (Server) Request create MDM Profile Response create MDM profile Request DEP device information Response DEP device information
E-FOTA	E-FOTA API - Get Token E-FOTA API - Register CorpID E-FOTA API - Get Firmware List E-FOTA API - Restrict Firmware E-FOTA API - check group version E-FOTA API - view product, model, and agency E-FOTA API - network error E-FOTA API - Get License Information E-FOTA history - Create Group E-FOTA History - Edit Group E-FOTA history - Delete group
Email	Send Mail To Admin (Async) Send Mail To Device (Async) Send Mail To User (Async)
Enrollment	Prevent reactivation (Device → Server) Prevent reactivation (Server → Device) EMM Enrollment Spec (Device → Server) EMM Enrollment Spec (Server → Device) Update KLM/ELM license during activation (Device → Server) Update KLM/ELM license during activation (Server → Device) Disable service -Android (Device → Server) Disable service -Android (Server → Device) Confirm Enrollment (Knox) (Device → Server) Confirm Enrollment (Knox) (Server → Device) Agent Request to activate MDM (Device → Server) Agent Request to activate MDM (Server → Device) Agent Request for SCEP profile (Device → Server) Agent Request for SCEP profile (Server → Device) Agent Request for MDM profile (Device → Server) Agent Request for MDM profile (Server → Device) Agent Request for check-in (Device → Server) Agent Request for check-in (Server → Device) Agent Request for token update (Device → Server) Agent Request for token update (Server → Device) Agent Request for check-out (Device → Server) Agent Request for check-out (Server → Device) Deactivate service (Device → Server) Deactivate service (Server → Device) Request SOAP message Respond to SOAP message Request for discovery URL (Device → Server) Respond to the request for discovery URL (Server → Device) Request for spec to issue certificate (Device → Server) Respond to the request for spec to issue certificate (Server → Device) Request to verify On-premis equipment (Device → Server) Respond to the request to verify On-premise equipment (Server → Device) Request to verify Federated equipment (Device → Server) Respond to the request to verify Federated equipment (Server → Device) Verify Security token Request to issue certificate (Device → Server) Respond to request to issue certificate (Server → Device) Respond to the request to set DM Client Generate OTP Code Azure AD Device Sync Request Request to activate Agent User Enrollment MDM (Device → Server) Request to activate Agent User Enrollment MDM (Server → Device) EMM Enrollment Spec (Device→ Server) EMM Enrollment Spec (Server→ Device) EMM Enrollment (Device → Server) EMM Enrollment (Server → Device)
Exception Profile per User	Start Scheduler for Exception Policy per User Terminate Scheduler for Exception Policy per User
InventoryScheduler	Start InventoryScheduler Monitoring Terminate InventoryScheduler Monitoring Start Inventory Collection Scheduler for iOS Terminate Inventory Collection Scheduler for iOS
License Management	Add Knox License Revision Knox License Delete Knox License Sync Knox License Interface Knox License License Name Update
LMS Interface	Deactivate Serial Number (16 Digits)
Logs	Delete the audit logs elapsed over the retention period. audit event white list change audit event white list receive
Profiles	The result of applying Agent device policy Agent Policy Apply Success on a Device Failed to Apply Agent Policy on Device Start profile update Terminate profile update Save Knox Service Plugin feedback
Provision	Request for public key Activate provisioning Deactivate provisioning Activate Knox provisioning Request To Changing Device Status To Provisioning Activate Status Request To Changing Device Status To Provisioning Deactivate Status Activate Work Profile provisioning Provisioning for Re-enrolled Device SCIM Provisioning request SCIM Provisioning response
Schedule	Execute Mail Scheduler Execute Mail Schedule Job Generate OTP Code
SEG Profile	Add SEG profile automatically Delete SEG profile automatically Renew SEG profile automatically Send SEG Rest API Response SEG Rest API
Service Profiles	Eula Download Profile Download
Settings	Upload IDP Metadata to server Azure AD Admin Approval Result Renewal Complete to Bind Managed Google Play for Chrome OS Start to Enroll Enterprise for Chrome OS Request Google API to Enroll Enterprise for Chrome OS Complete to Enroll Enterprise for Chrome OS Start to Get ESA for Chrome OS Request Google API to Get ESA for Chrome OS Complete to Get ESA for Chrome OS Start to Set Account to authenticate as the Enterprise for Chrome OS Request Google API to Set Account to authenticate as the Enterprise for Chrome OS Complete to Set Account to authenticate as the Enterprise for Chrome OS Complete to Unbind Managed Google Play for Chrome OS Start to Unenroll Enterprise for Chrome OS Request Google API to Unenroll Enterprise for Chrome OS Complete to Unenroll Enterprise for Chrome OS Request Azure AD Information (Server → CRS)
SMS	Send SMS To Admin (Async) Send SMS To Device (Async) Send SMS To User (Async)
Time Trigger	Start registration of Time Trigger when server operates Close registration of Time Trigger when server operates Start Time Trigger sync Close Time Trigger sync
TxHistory	Error (Device command queue)
User Login	User Authentication Failed User Logged In User Logged Out User Checked In to the Shared Device User Checked Out from the Shared Device Create Shared Device Relation Info Delete Shared Device Relation Info Sign In to the AMAPI Device Assign Stage (Dedicated) device to the user's device via user login
VPP Management	VPP Sync start VPP Sync is terminated