Create an advanced profile

Advanced profiles offer supplementary features that provide additional controls to conditionally allow automatic device enrollment locking and information theft protection.

You can create an advanced profile in a process similar to that for regular profiles:

1. On the Knox Mobile Enrollment console, go to Profiles, then click Create Profile.

2. Click Android Enterprise (Advanced) as the profile type.

   

3. Enter the Android Enterprise (Advanced) profile settings for the advanced profile. For more information, repeat steps 1 through 9 in Android Enterprise profiles.

4. Click Continue to configure the profile settings page. To set the EMM configuration and device settings, repeat steps 10 through 16 in Android Enterprise profiles.

5. Click Continue to configure advanced settings:

   1. The Lock unenrolled devices feature allows you to automatically lock a device if it isn’t enrolled in an EMM within a window of time specified in the Lock device field and prevent device users from bypassing enrollment. This feature is turned on by default.

   2. Set a time window in the Lock device field by setting the time window to be 1 to 30 days (default is 7 days) after a profile is pushed to a device. The enrollment status is checked once per day, until the time window is reached.

   3. Click Immediately lock a device to immediately lock a device if it becomes rooted or starts running unofficial firmware.

   4. (Optional) Enter a Lock Message to show to the device user when the device is locked.

   5. Enter a 10-digit phone number that the device user can contact you on, if the device is locked. The number must contain hyphens (-) separating the number sequences. For example, 408-555-1234 is a well-formed phone number.

   

6. Click Create to finish creating the profile.

Congratulations! You have successfully created an advanced profile, and it’s now available in the list of profiles on the Profiles page. The Profile Type column marks it as Android Enterprise (Advanced).

Clone a profile

You can clone an existing profile and then customize it as needed. To do so:

1. Select the profile you’d like to clone. You can clone one profile at a time.
2. Click Actions > Clone to edit > Confirm.
3. Rename the clone to avoid a naming conflict with the source profile.
4. (Optional) Override the clone’s settings, as needed.

To learn how to assign the profile to an uploaded device, see assign advanced profiles. Furthermore, to learn how to monitor the profile and its settings, see monitor advanced profiles.