Knox Mobile Enrollment 1.28 release notes

Last updated July 26th, 2023

Allow role deletion for admin states

This feature addresses IT admin requests to delete a Knox Mobile Enrollment admin role with a pending, revoked or blocked state (any state but active). Prior to the role deletion, a message displays the intended admins impacted by the role deletion.

	Existing administrators assigned to the target role must be re-assigned to another role before the deletion can proceed.

Display non-randomized Wi-Fi MAC address

This enhancement addresses KME customer requests to allowlist a device Wi-Fi address and have MPTS return the device’s non-randomized Wi-Fi MAC address (the mobile device MAC) so it can be stored in the database and displayed via the KME portal using a properly formatted CSV file.

Going forward, a mobile device’s Wi-Fi MAC address will receive greater visibility by displaying in the following locations:

	Device screen (additional column display option) Device details screen CSV file

Permit QR code enrollment using non-randomized MAC address

This enhancement addresses admin requests for QR code enrollment (with Wi-Fi JSON data) using the device’s non-randomized MAC address, so the device can enroll more securely. Such customers need to allow device IMEIs to connect to their Wi-Fi network while enrolling. The MAC address is available via MPTS, but the device also needs to automatically use the MAC address when connecting to Wi-Fi.

To support this request, a new checkbox option has been added within the Add QR code and QR code for this profile screens to include the device’s MAC address within QR code’s Wi-Fi configuration data. The MAC address will now also display within the device details pop-screen as an additional device MAC address reference point.

Added QR code icon to profile table

To date, there is no ideal way to launch and review QR code details from the existing MDM Profiles screen. This resulted in reported confusion regarding which listed profiles contain a QR code.

To resolve this issue, a QR code icon now displays directly to the right of those profiles names that have a QR code configuration defined.

Selecting the icon displays the QR code for this profile screen, where the QR code configuration can be reviewed and potentially modified. Additionally, the user is able to download and print the QR code as needed.

Console search hints added to reduce search uncertainty

To date, there is no way to clearly know which fields within the KME console are searchable for specific parameters within any given screen, resulting in reported uncertainty as to what data can be included in console screen searches.

To remedy this uncertainty, the Search field is now longer to optimize free space within the console and include more search string data. Going forward, the following search string hints display within each listed screen:

UPLOADS - Search by Reseller name
DEVICES/UPLOAD DETAIL PAGE — Search by Device ID, Profile, Model, Tags
PROFILE - Search by Profile name
ADMINISTRATORS - Search by Administrator name, E-mail, Role
ROLES — Search by Role name
ACTIVITY LOG — Search by Name, Event
DEVICE USERS - Search by User Id

Customer onboarding improvements

To date, Knox does not support a Japanese reseller’s use of Google’s zero-touch common library (CreateCustomer API) to onboard customers into an EMM.

To address this issue, this KME release provides the following:

Common APIs to create customers, upload devices, and create profiles
A dedicated Knox Portal registration form for these Japanese customers:
- KME T&C do not need to be accepted (implicitly accepted when customer account is created)
- Simplified registration page