Manage devices with advanced profile settings

For devices assigned profiles with advanced settings, Knox Mobile Enrollment provides the following monitoring capabilities and actions:

• Monitor the device lock, device enrollment, and profile lock statuses on the Advanced profile assigned tab.
• Filter profiles by type on the Advanced profile assigned tab.
• Lock or unlock devices a device in bulk.
• Unlock the device in offline environments.
• Remotely factory reset locked devices.

This page helps you learn how to monitor the different features and settings on devices with advanced settings turned on.

Access the Advanced profile assigned tab

The Advanced profile assigned tab on the Devices page displays a list of all the devices that are assigned profiles with advanced settings.

For active Knox Suite - Enterprise Plan holders, the Advanced profile assigned tab is accessible depending on specific conditions:

• If advanced settings aren’t turned on, the Advanced profile assigned tab is hidden.
• If advanced settings were turned on but the profile isn’t assigned to any devices, then the Advanced profile assigned tab is displayed but is disabled.
• If a profile with advanced settings turned on exists, then the Advanced profile assigned tab is available.

Filter profiles by type

When reviewing all the profiles in your tenant on the Profiles page, you can filter devices by profile type:

1. Click the Profile Type column header to view the profile types available to use as a filter.

2. Select one or more profile types, then click Apply Filters. Only profiles with the selected profile types are now displayed.

Lock devices

On the Advanced profile assigned tab, you can simultaneously lock or unlock one or more devices:

1. Select the devices you want to lock or unlock.
2. Click Actions.
3. Toggle Lock if you want to lock devices, or Unlock if you want to unlock them. The device status updates immediately.

Check the device lock status

On the Advanced profile assigned tab, there are four possible device lock statuses:

• Locked — The device is locked.
• Unlocked — The device is unlocked.
• Locking — The device is in the process of locking.
• Unlocking — The device is in the process of unlocking.

Toggle the Lock or unlock switch

The device lock controls are color-coded to relay status information to you at a glance:

Unlock devices using a PIN

Devices that are assigned profiles with advanced settings can be unlocked in highly secure offline environments using a one-time PIN generated by Knox Mobile Enrollment. On the Devices page, if the device profile status is Unenrolled and the device lock status is Locked:

1. Select a device IMEI and click PIN.

2. In the Unlock device dialog, enter the 8-digit code that is displayed on the device user’s lock screen.

3. Click Continue to generate a one-time 8-digit PIN.

4. Share the generated PIN with the device user. The device user enters this PIN to unlock their device.

Remotely factory reset locked devices

Advanced profile settings offer additional features that help you monitor and manage your devices. One of these features is the ability to remotely factory reset a locked device in situations where the device is suspected or at risk of being compromised.

Before you can use this feature, ensure the following:

• The device is already locked. If it is not, first lock the device.
• You have permissions to manage devices.

To factory reset a remote device:

1. Click Devices from the left navigation pane of the Knox Mobile Enrollment console.
2. Select the device by its IMEI/MEID number.
3. Click ACTIONS > Factory reset device.