- Basics
- About Knox
- Knox licenses
- Knox white paper
- Sign up for Samsung Knox
- Latest release notes
- General Knox FAQ
- General Knox KBAs
- Submit a support ticket
- User Acceptance Testing
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Create a new profile
- Assign profiles to groups and organizations
- Enroll devices
- Shared Android device quickstart
- Non-shared Android device enrollment quickstart
- Android Management API device enrollment quickstart
- Apple User Enrollment quickstart
- View device information
- Apply profiles to organizations
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Knox Guard REST API
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
Knox Mobile Enrollment 1.37 release notes
Profile management KME REST API updates
The following updates were made to the Profile Management REST APIs:
- If
doEnabled
oraeEnabled
is true:- The
supportPhoneNumber
andsupportEmailAddress
fields are now optional. - The
skipSetupWizard
field is now always true. - The
allowUserCancel
field is now always false. - The
supportedMDM
field is now required.
- The
- A profile can have
doEnabled
oraeEnabled
set totrue
, but not both.
For reference:
- When
doEnabled
is true, the device is enrolled in Device Owner mode. - When
aeEnabled
is true, the MDM chooses which mode to enroll the device in, whether Device Owner or Profile Owner mode.
Setting up an Android Enterprise profile
Previously, in the Android Enterprise profile creation screen, the Force Device Owner Enrollment option was enabled by default. Starting this release, the default option is Let MDM choose to enroll as a Device Owner or Profile Owner.
In addition, all existing profiles that were saved with the Force Device Owner Enrollment option enabled have the Let MDM choose to enroll as a Device Owner or Profile Owner option enabled instead.
Auto-approve and auto-assign rules for profile aliases through the KME API
A new set of APIs were added to the KME REST API to make it possible to auto-approve a reseller and auto-assign a profile or profile alias. With these new APIs, a KME IT admin is now able to do the following:
- Auto-approve a reseller, given a reseller ID.
- (Optional) Auto-assign a default profile (given a profile ID) to the devices that this reseller uploads.
- Set an additional profile alias (a string) that this reseller can auto-assign to the devices they upload for this customer.
Resolved: Access denied when downloading a CSV file
Previously, a configuration change caused an Access Denied exception whenever IT admins attempted to download a CSV file from the KME admin portal (for example, to download the device list, activity log, or device users list). This issue was resolved with this release.
Device details view — slide out panels
In the Knox Admin Portal for both KC and KME, device details information shows in a single slide out panel. This slide out panel helps users retain visibility of the underlying page, while letting users view and edit the device's details. When users change any device information, the slide out panel offers a Save button that lets users save their changes.