Manage devices with advanced profile settings

For devices assigned profiles with advanced settings, Knox Mobile Enrollment provides the following monitoring capabilities and actions:

• Monitor the device lock, device enrollment, and profile lock statuses.
• Lock or unlock devices in bulk.
• Unlock the device in offline environments.
• Remotely factory reset locked devices.

Access the ADVANCED PROFILE ASSIGNED tab

The ADVANCED PROFILE ASSIGNED tab on the Devices page displays a list of all the devices that are assigned profiles with advanced settings.

For active Knox Suite - Enterprise Plan holders, the ADVANCED PROFILE ASSIGNED tab is accessible depending on specific conditions:

• If advanced settings aren’t turned on, the tab is hidden.
• If advanced settings were turned on but the profile isn’t assigned to any devices, the tab is displayed but is disabled.
• If a profile with advanced settings turned on exists, the tab is available.

You can access advanced profile functionalities on both the ALL DEVICES and ADVANCED PROFILE ASSIGNED tab. For more details, see View and manage devices.

Lock or unlock devices

To lock or unlock one or more devices:

1. In the Knox Mobile Enrollment console, click Devices. The Devices page displays.
2. Select the devices you want to lock or unlock.
3. Click Actions > Lock or Unlock.

The device status of the selected devices is updated on the page.

Device lock status

There are four possible device lock statuses:

• Locked — The device is locked.
• Unlocked — The device is unlocked.
• Locking — The device is in the process of locking.
• Unlocking — The device is in the process of unlocking.

The device lock controls are color-coded to relay status information to you at a glance:

Unlock devices using a PIN

You can unlock a locked device using a one-time PIN generated by Knox Mobile Enrollment:

1. On the Devices page, select the IMEI/MEID of the device you want to unlock. The device details panel opens.
2. Click PIN. The Unlock device dialog displays.
3. Enter the 8-digit code that is displayed on the device user’s lock screen.
4. Click Continue to generate a one-time 8-digit PIN.
5. Share the generated PIN with the device user. The device user enters this PIN to unlock their device.

Remotely factory reset locked devices

You can remotely factory reset locked devices. This is useful if a locked device is at risk of being compromised, or if a device user is unable to perform a factory reset on their own. Before you use this feature, ensure the following:

• The device is locked. If it is not, first lock the device.
• You have the required permission to manage devices.

To factory reset a remote device:

1. On the Devices page, select the device you wish to factory reset.
2. Click ACTIONS > Factory reset device.