Configure advanced settings

For profiles with EMM configuration settings, Advanced settings give you more control over your devices — you can lock devices if their security is compromised, and install apps prior to EMM enrollment. Before you configure advanced settings, ensure you’ve already set up your basic profile and EMM information.

To use advanced settings, you’ll need:

• A Knox Suite - Enterprise Plan. If you don’t have a Knox Suite plan, you can still enroll your devices into the EMM, but advanced settings can’t be used.
• Samsung devices that aren’t currently enrolled in Knox Guard. To avoid locking conflicts, a device enrolled in Knox Guard can’t be assigned a profile with advanced settings enabled. To resolve this conflict, you must unenroll the device from Knox Guard.

Once you’ve met the prerequisites to enable these settings, simply click the Advanced settings toggle at the bottom of the Create profile page and configure settings in the following sections.

Lock compromised devices

To prevent information security leaks in the event of device loss or theft, you can define settings to remotely lock your devices:

• Lock device: Locks the device if it isn’t enrolled in an EMM by a specified date. You can select a timeframe between 1 — 30 days (default is 7 days).
• Immediately lock device if it’s rooted or running unofficial firmware
• Immediately lock device if user does not enroll with an EMM through Knox Mobile Enrollment: Locks a device if the end user attempts to cancel the factory reset.

Lock screen message

• Lock message: Enter the custom message that’ll display on the device when locked, or use the default message provided.
• Enter a Phone number device users can contact when the device is locked.

Install apps

To further decrease EMM enrollment time and facilitate staging, you can add a maximum of three local apps to be installed on the device prior to EMM enrollment.

Click Add app, enter a Package name, URL for app download (APK file), and Signature checksum, and click Add. Ensure that your APK file doesn’t exceed 500 MB.

Issues with the APK file and network may result in the apps failing to install upon enrollment. To avoid this, ensure your APK URL is correct and you have a safe network connection.

To edit an app, click its Package name.