License management

An MSP purchases licenses on behalf of each customer for the Knox cloud services deployed with MSP. The MSP should contact the sales team supporting the requesting customer’s region. An MSP cannot share a single license with different customers, and separate licenses are required for each customer. Once purchased, the MSP enters the license into the portal on behalf of the customer. A license is activated automatically when applied to a device.

NOTE - Upon launch of the MSP program, a Knox Configure license is required to use Knox Configure within the MSP portal. MSP itself requires no license. As other Knox cloud services are added to the MSP portfolio, their unique licenses will also be required. The license state has no impact on the state of a customer account.

Select Licenses from the left-hand navigation menu. The License table shows all licenses of all managed services. Based on the access level of the customer, licenses are shown in the following two tabs:

  • Fully managed customers for the customers that have no access permission
  • Jointly managed customers for the customers that have full access permission

Fully Managed Customers

For fully managed (no access) customers, MSPs can enter a license in the MSP portal and share it with multiple no access customers. If a license type is transferable — like the Knox Configure Dynamic (Per seat) license—license seats from unassigned customer are restored to remaining seats so that MSP can use those seats for other managed customer.

MSP can do following with ACTIONS:

  • Get a license
  • Trial licenses are intended for testing before going live with a customer deployment. MSP can generate a free trial license which is available for three months for 30 seats or devices, depending on type of license. Trial licenses can be migrated to commercial licenses upon expiration by contacting the reseller. Issued licenses are shown in the license table automatically.

    NOTE — Previously, MSP could only generate and assign up to 5 devices or seats per each trial license. Going forward, MSP can generate up to 30 seats for each trial license from MSP portal for fully managed customers and from a customer portal for the jointly managed customer.
  • Enter license key
  • MSPs can purchase commercial license and use them when deploying devices for commercial use. Commercial licenses must be purchased from authorized Knox license resellers supporting the requesting customer’s geographic deployment region.

    MSP can enter a purchased commercial License key and License name. The license name is just a label for the license key, it does not impact the license functionality in any way. The license name must be unique to any other license name used with the specific deployment. MSP can also assign a customer or multiple customers to share the seats for each license.

The License table shows all the licenses of all managed services for fully managed customers with necessary information such as License Name, Service/License Type, Status, (Assigned) Customers, License seats – Purchased, Remaining, Used, and License End Date. For more detail of each license, MSP can select a license from the license table which opens the License details dialog.

On the license details dialog, the following information is available:

  • License Name- Lists the name assigned to license upon creation. The name can be edited if need be. The right side of the screen displays whether this selected license is currently active, registered, or expired.
  • SeatsDisplays the number of seats purchased with this selected license. If needed, contact the reseller to increase the number of seats. The number of remaining seats also displays along with the number of used seats.
  • Customer- Lists the customer’s name and total seats used by the customer. MSP can assign the license to another customer or unassign the customer from the license. License can be unassigned successfully only if there is no customer device using the license seat. MSP can go to the customer portal easily by clicking each customer name to use the assigned license.
  • License KeyDisplays the License Key used as a unique alphanumeric code to activate this specific license.
  • Type- Displays available service and type of the license. The following are available for KCS 1.39.
    • Knox Configure Setup
    • Knox Configure Dynamic
    • Knox Configure Setup (Staggered)
    • Knox Configure Dynamic (Per seat)
  • Activation Start Date- Defines the beginning date and time a license can be activated for device license seat allocation. The Activation Start Date begins the expiration countdown of a trial license activation period.
  • Activation End Date- Lists the end date of the license seat activation period under the terms of this selected license. When a license reaches its activation end date, the assigned count matches the number of remaining devices assigned profiles. After this date, this license cannot be used to assign or activate additional devices. Devices that have already been activated with this license can remain active for the remainder activation period.
  • Activation Period- Lists the activation duration period for the selected license.
  • DELETE- MSP can delete the license when the license has expired and no assigned seats
  • Licenses that were entered in the customer's portal first cannot be shared with another customer.
  • A fully managed customer who is assigned to a shared license key cannot be changed to full access permission.
  • As replacing license is not available in 1.39 release, MSP must first unassign the customer from the license and assign to a new, unique license key. MSP should be careful not to assign customers who expect full access permission or delink to shared license.

Jointly Managed Customers

Licenses for jointly managed (full access) customers are managed by both the MSP and the customer's company, as the customer has full access permission. The customer owns the licenses, and the action button on top right of license table is not available as the actions such as Get a license or Enter license key can be performed only using the customer portal. Click the customer name on the license table to open the customer portal. Each license can only be used for one jointly managed customer and cannot be shared with other managed customers.

The License table shows all the licenses of all managed services for jointly managed customers with necessary information such as License Name, Service/License Type, Status, Customer, License seats – Purchased, Remaining, Used, and License End Date. For more detail of each license, MSP can select a license from the license table to open the License details dialog.

The license details dialog shows all the information as explained in Fully Managed Customers section except Customer. Actions such as Edit license name, Delete license are disabled on the MSP portal, and are available on the customer portal.

NOTE —Currently, this feature is supported for the Knox Configure (KC) service only. Knox E-FOTA licenses can only be viewed and managed inside the respective customer Knox E-FOTA portal.

Attempts to add a license or perform license operations may sometimes fail due to errors. Follow the instructions on the body of the error to troubleshoot the error or try again later. If the problem persists, contact Samsung Knox Support. If the customer rejects management request by MSP, the MSP is denied permission. Contact the customer if this is a mistake.

When a license expires for a particular Knox Cloud service, the customer devices mapped to the expired license are automatically released from MSP control for that service.

License utilization is global, and not restricted by regional device deployment constraints. Once an MSP has uploaded a customer’s purchased devices into Knox Configure, they are required to create a configuration profile, and select a license to ensure a Samsung Knox compliant deployment.

NOTE — For additional information on Knox Configure licensing, go to: Knox Configure License Management.

Share it: