Configure advanced settings

Advanced settings give you more control over your devices. By adding these features to your profile, you’ll be able to lock devices if their security is compromised and install apps prior to EMM enrollment. This tutorial assumes that you’ve already set up your basic profile and EMM information.

Before you begin using advanced settings, you’ll need:

• A Knox Suite - Enterprise Plan. If you don’t have a plan, your devices can still be enrolled into the EMM, however without advanced settings.

• Samsung devices that aren’t currently enrolled in Knox Guard. To avoid locking conflicts, a device that is enrolled in Knox Guard can’t be assigned a profile with advanced settings enabled. To resolve the conflict, you’ll need to unenroll the device from Knox Guard.

Once you’ve ensured you have the prerequisites to enable these settings, simply click the Advanced settings toggle at the bottom of the Create profile page. Once you turn this toggle on, a Knox Suite - Enterprise Plan is required.

Lock compromised devices

To prevent information security leaks in the event of device loss or theft, you can remotely lock your devices from the Knox Mobile Enrollment console.

• Select Lock device to automatically lock a device that isn’t enrolled in an EMM by a specified date. Choose a timeframe between 1-30 days using the up and down arrow (default is 7 days).

• Select Immediately lock the device to allow Knox Mobile Enrollment to lock a device upon enrollment, if it’s detected as rooted or running unofficial firmware.

• Select Immediately lock the device to allow Knox Mobile Enrollment to lock a device if the end user attempts to cancel the factory reset required to enroll using Knox Mobile Enrollment.

Lock screen message

• Customize a Lock message to be displayed on the device when it is locked, or use the default one provided.

• Enter a Phone number device users can contact when the device is locked.

Install apps

To further decrease EMM enrollment time and facilitate staging, add a maximum of three local apps to be installed on the device prior to EMM enrollment.

To add apps:

1. Click Add app.
2. Enter a Package name *.
3. Enter a URL for app download (APK file) *. APK files that exceed 500 MB cannot be installed.
4. Enter a Signature checksum.
5. Click ADD.

Issues with the APK file and network may result in the apps failing to install upon enrollment. To prevent this, ensure your APK URL is correct and you have a safe network connection.

To edit an app, click its Package name then SAVE when done.

Once you’ve entered all the required fields, click NEXT to continue to the review page. Click any settings from the left navigation pane to edit that section. Once reviewed, click CREATE. Your newly created profile will be displayed in the Profiles table.