How Knox Guard works
Last updated July 19th, 2024
You first register devices for Samsung Cloud services like Knox Guard, through either:
- Samsung Knox device resellers, who use the Knox Deployment Program console or REST APIs
- Knox Deployment App, which is designed for small-scale deployments or testing
These devices start out in a Pending state. You can approve these devices using the Approve a Device API. Once approved, devices transition to the Activating state. Once the device boots up and successfully enrolls into Knox Guard, its status changes to Active, and you can manage the device.
There are two main types of Knox Guard accounts:
- Normal — Devices begin in an Active state, become Locked if payments are overdue, and become Complete when they no longer need to be managed.
- Pay-as-you-go (PAYG) — Devices start in a Locked state. With the appropriate payment, the devices become Active for a specified time period. After this period, the device is Locked again. Currently, these devices support all the current Knox Guard features except offline device lock and blinking reminder.
If a device is either rejected or device management is complete, you can delete it from Knox Guard using the Delete a Device API. Once deleted, the Knox Guard client on the device is permanently uninstalled and the device is no longer tracked.
Device state
Once a device is added to the Knox Guard console, it can go through a variety of states:
| Device state | Description | External state (on console) |
|---|---|---|
| Pending | The reseller has uploaded the device to the Knox Guard console. Customers can view the device in the Knox Guard device list and either reject or accept it. | Pending |
| Rejected | The device was rejected. | Rejected |
| Accepted | The device was accepted, but isn’t active in Knox Guard yet. If the your reseller preferences are configured to automatically accept device uploads, the device’s state automatically changes from Pending to Accepted. | Activating |
| Enrolled | The device is actively managed by Knox Guard and can be controlled. | Active |
| Exchanging | A temporary state that exists when an IMEI exchange is in process. This state requires Samsung customer support assistance and is for tracking purposes only. An Exchanging state can’t occur when the device is locked. | Exchanging |
| Resetting | The device’s associated Knox Guard license has expired or is deleted. Once this status is reported to the Knox Guard server, the device returns to the Pending state. | Resetting |
| StartingReminder | Blink reminders are activating on the device. | Starting Reminder |
| StoppingReminder | Blink reminders are stopping on the device. | Stopping Reminder |
| Blinked | Blink reminders are activated on the device. | Reminder On |
| Locking | The device is in the process of locking. | Locking |
| Locked | The device is locked. | Locked |
| Unlocking | The device is in the process of unlocking. | Unlocking |
| Completing | The device is in the process of completing management. Once complete, it’s no longer be managed by Knox Guard. | Completing |
| Completed | Device management is complete and the device is no longer managed by Knox Guard. | Completed |
License state
The following table provides information on different license states:
| State | Description | External state (on console) |
|---|---|---|
| Registered | The license has been added to the account, but isn’t active yet. | Registered |
| Active | The license is between the Activation start date and Activation end date and can be used in Knox Guard. | Active |
| Expired | The Activation end date has passed and new devices can’t be activated using the license. | Expired |
On this page
Is this page helpful?