License management

You can purchase licenses on behalf of each customer for the Knox cloud services deployed with MSP. You should contact the sales team supporting the requesting customer's region. You can't share licenses with different customers — separate licenses are required for each customer. Once purchased, you enter the license key into the Knox MSP Portal on behalf of the customer. A license is activated automatically when applied to a device.

NOTE — Upon launch of the Knox MSP program, a Knox Configure license is required to use Knox Configure within the Knox MSP portal. Knox MSP Program itself doesn't require a license. As other Knox cloud services are added to the Knox MSP Program, their unique licenses will also be required. The license state has no impact on the state of a customer account.

Go to Licenses from the navigation pane. The License table shows all licenses of all managed Knox cloud services. Licenses are shown on the following two tabs based on customer management type:

  • Fully managed customers for the customers who have no access permission
  • Jointly managed customers for the customers who have full access permission

The Licenses page

Manage Knox Suite licenses for Enterprise Edition devices

You can issue free of charge commercial Knox Suite licenses to customers who have purchased Enterprise Edition (EE) devices. You can select a customer who has purchased an EE device and generate a Knox Suite EE license on their behalf.

  1. Go to Licenses.
  3. Select a customer to generate a Knox Suite license for.
  4. Click Confirm.

Fully Managed Customers

For fully managed customers, you can enter a license on the Knox MSP portal and share it with multiple fully managed customers. If a license type is transferable — like the Knox Configure Dynamic (Per seat) license — then license seats from the unassigned customer are restored to remaining seats so the MSP can use those seats for other managed customers.

Under the Actions dropdown, you can do the following:

  • Get a license get a license

    Trial licenses are intended for testing before going live with a customer deployment. You can generate a free trial license which is available for three months with 30 seats, depending on the type of license. Trial licenses can be migrated to commercial licenses upon expiration by contacting the reseller. Issued licenses are shown in the license table automatically. You can only have one trial license of each type. If a trial license of that type already exists, then you can't generate another one.

    NOTE — Previously, MSPs could only generate and assign up to 5 devices or seats for each trial license. Going forward, MSPs can generate up to 30 seats for each trial license on the Knox MSP Portal for fully managed customers and from a customer portal for the jointly managed customer.

    You can generate a Knox Platform for Enterprise license for fully managed customers. Select Get a license, then select the customer to generate the KPE license for and click GENERATE KPE LICENSE.

    NOTE — KPE Licenses can't be shared with other customers.
  • Enter license key
  • You can purchase commercial license and use them when deploying devices for commercial use. Commercial licenses must be purchased from authorized Knox license resellers supporting the requesting customer's geographic deployment region.

    You can enter a purchased commercial License key and License name. The license name is just a label for the license key, it does not impact the license functionality in any way. The license name must be unique to any other license name used with the specific deployment. You can also assign a customer or multiple customers to share the seats for each license.

  • Replace a license
  • You can replace licenses for fully managed customers.

    1. Select the license you want to replace.
    2. Select ACTIONS > Replace license.
    3. Select all customers you want to replace license for.
    4. NOTE — If a Knox Suite EE license generated under customer ID was selected, only the customer for whom the KS EE license was created will appear in the customer list.
    5. Select the license to replace the existing license.

The License table shows all the licenses of all managed services for fully managed customers with necessary information such as License Name, Service/License Type, Status, (Assigned) Customers, License seats – Purchased, Remaining, Used, and License End Date.

Click on the license name to view the following information about the license:

  • License Name - Lists the name assigned to license upon creation. The name can be edited if need be. The right side of the screen displays whether this selected license is currently active, registered, or expired.
  • Seats - Displays the number of seats purchased with this selected license. If needed, contact the reseller to increase the number of seats. The number of remaining seats also displays along with the number of used seats.
  • Customer - Lists the customer's name and total seats used by the customer. MSP can assign the license to another customer or unassign the customer from the license. License can be unassigned successfully only if there is no customer device using the license seat. MSP can go to the customer portal easily by clicking each customer name to use the assigned license.
  • License Key - Displays the License Key used as a unique alphanumeric code to activate this specific license.
  • Type - Displays available service and type of the license. The following are available for KCS 1.39.
    • Knox Configure Setup
    • Knox Configure Dynamic
    • Knox Configure Setup (Staggered)
    • Knox Configure Dynamic (Per seat)
  • Activation Start Date - Defines the beginning date and time a license can be activated for device license seat allocation. The Activation Start Date begins the expiration countdown of a trial license activation period.
  • Activation End Date - Lists the end date of the license seat activation period under the terms of this selected license. When a license reaches its activation end date, the assigned count matches the number of remaining devices assigned profiles. After this date, this license cannot be used to assign or activate additional devices. Devices that have already been activated with this license can remain active for the remainder activation period.
  • Activation Period - Lists the activation duration period for the selected license.
  • DELETE - MSP can delete the license when the license has expired and no assigned seats
  • Licenses that were entered in the customer's portal first cannot be shared with another customer.
  • A fully managed customer who is assigned to a shared license key cannot be changed to full access permission.

Jointly Managed Customers

Licenses for jointly managed (full access) customers are managed by both the MSP and the customer's company, as the customer has full access permission. The customer owns the licenses, and actions such as Get a license or Enter license key can only be performed through the customer portal. Click the customer name on the license table to open the customer portal. Each license can only be used for one jointly managed customer and cannot be shared with other managed customers.

The License table shows all the licenses of all managed services for jointly managed customers with necessary information such as License Name, Service/License Type, Status, Customer, License seats – Purchased, Remaining, Used, and License End Date. For more details of each license, you can click on the license name to open the License details dialog.

The license details dialog shows all the information as explained in Fully Managed Customers section except Customer. Actions such as Edit license name, Delete license are disabled on the MSP portal, and are available on the customer portal.

NOTE — Currently, this feature is supported for the Knox Configure (KC) service only. Knox E-FOTA licenses can only be viewed and managed inside the respective customer Knox E-FOTA portal.

Attempts to add a license or perform license operations may sometimes fail due to errors. Follow the instructions on the body of the error to troubleshoot the error or try again later. If the problem persists, contact Samsung Knox Support. If the customer rejects management request by MSP, the MSP is denied permission. Contact the customer if this is a mistake.

When a license expires for a particular Knox Cloud service, the customer devices mapped to the expired license are automatically released from MSP control for that service.

License utilization is global, and not restricted by regional device deployment constraints. Once an MSP has uploaded a customer's purchased devices into Knox Configure, they are required to create a configuration profile, and select a license to ensure a Samsung Knox compliant deployment.

For additional information on Knox Configure licensing, see Knox Configure License Management.