1 1 Introducing Samsung Knox Manage

Introducing Samsung Knox Manage 9

Introducing Samsung Knox ManageSamsung Knox Manage is an EMM solution which provides integrated management of mobile devices. Various policies can be customized for device management and assigned to mobile devices. Applications can be assigned to be only available to employees on their mobile devices while working. Once administrators register the employees and their devices, the integrated management of mobile devices begins. Improve business efficiency and secure company data using Knox Manage.

This chapter explains the following topics:

→ Knox Manage components

→ Knox Manage strengths

→ Knox Manage system requirements

→ Knox Manage Admin Portal

→ Available services by device type and OS

Introducing Samsung Knox Manage 10

Knox Manage componentsThe cloud-based Knox Manage has the following components.

Admin Portal

Windows devices

Firewall

Samsung KNOX Workspace devices

Knox Manage

iOS devices

Android devices

CloudConnector

CertificateAuthority

ActiveDirectory

1

3

2

2

22

4

5

6

No. Name Description

1 Knox Manage Administrator Portal Configures and manages Knox Manage environments.

2 Knox Manage AgentAn application installed on Android, iOS, and Windows mobile devices

3 Knox Manage server Knox Manage cloud server

4 Knox Manage Cloud ConnectorTransfers data securely between the client’s enterprise server and the Knox Manage server. For more information, see Using Cloud Connector.

5 Lightweight Directory Access ProtocolImports the client’s directory-based user information. For more information, see Syncing user information with AD/LDAP and Integrating a directory server.

6 Certificate AuthorityGenerates certificates for authentication when using a network, such as Wi-Fi, VPN, Exchange, or APN. For more information, see Adding a certificate authority (CA).

Introducing Samsung Knox Manage 11

Knox Manage strengthsEasy creation of launcher applications with Kiosk Wizard

Knox Manage provides Kiosk Wizard, that helps you set up devices to display only specific applications, widgets, and notifications. You can configure Kiosk devices to perfectly fit your work and service.

Quick troubleshooting via Knox Manage Remote Support

Knox Manage provides Remote Support to solve any device or application issues quickly and precisely. Remote Support also helps prevent the same issues from arising again through analyzing the logs.

Optimal management of OS versions using E-FOTA

Knox Manage enables wireless firmware management via Enterprise Firmware-Over-The-Air (E-FOTA). E-FOTA helps resolve security risks for vulnerable OS versions and guarantees compatibility between software developed in the company and any new OS versions.

Integrated management of Android Enterprise devices

Knox Manage provides a full management service for any type of Android Enterprise device. You can save service support costs through the easy assignment of policies, applications, and the latest updates.

Optimized Knox Manage Admin Portal

The user interface of the Knox Manage Admin Portal is designed to be administrator-centric. You can easily monitor the security status of enrolled devices and quickly collect information needed for prompt action.

Support of differentiated Samsung Knox

Knox Manage supports the latest firmware of Samsung Knox, the mobile enterprise security platform embedded into Samsung Galaxy devices. In addition, Knox Manage fully guarantees fully supports for the latest Knox API.

Introducing Samsung Knox Manage 12

Effortless content management

Knox Manage comes with the ability to upload and distribute images, documents, audio, and even videos. You can set the distribution target from a single user or device to groups or organizations. Moreover, the Content Delivery Network (CDN) allows you to distribute content more quickly and safely and reduce the data transfer load.

Bulk device enrollment and application assignment

Knox Manage provides the means for the easy and quick enrollment of mobile devices en masse through Knox Mobile Enrollment (KME) for Android devices or the Device Enrollment Program (DEP) for iOS devices. In the case of iOS devices, Apple’s Volume Purchase Program (VPP) is also available to help conveniently assign the desired applications.

Easy initial setup with the Getting Started guide

Knox Manage provides the Getting Started guide which outlines the process for initial environment setup. By following the guide, you can become proficient at adding users, enrolling devices, and applying policies promptly.

Strong data protection

Knox Manage has incorporated top-level security requirements since the initial design process in order to protect corporate data from possible data security threats:

• All data between the server and mobile device is encrypted with AES-256 (AES: Advanced Encryption Standard).

• Two-factor authentication is supported through applications and communication based on security certificates.

Storage of device analysis data

In addition to monitoring devices in real time, Knox Manage also provides audits. You can check events that occur in the system, applied policies, tampering and compliance violations, etc., and take appropriate actions against them.

Direct Boot enabled

Knox Manage supports Direct Boot on Android 7 and higher devices. Knox Manage is executed after the user reboots the device and before the device is unlocked. The commands that can be executed before unlocking are limited.

Introducing Samsung Knox Manage 13

Knox Manage system requirementsMeet the requirements listed below to ensure the efficient operation of Knox Manage:

Item Requirement

Administrator’s PC

OS Microsoft Windows XP or higher

Browser

• Google Chrome version 41 or higher

• Mozilla Firefox version 37 or higher

• Microsoft Internet Explorer 11

Resolution 1680 x 1050 (px)

User’s device

Android Enterprise Android 6.0 (Marshmallow) or higher

Android Legacy Android 5.0 (Lollipop) or higher

iOS iOS 9.0 or higher

WindowsA desktop computer on which Microsoft Windows 10 Version 1703 or higher has been installed (Pro/Enterprise/Home)

Supported language

Admin PortalEnglish, Portuguese, Spanish, French, German, Italian, Korean

Knox Manage AgentAny of the above languages set in the device language settings

Note • Online help in the Admin Portal is only available in English.

• You can select a language in the portal without changing the browser’s language.

• If the selected language in Knox Manage Agent is not supported on the mobile device, Knox Manage Agent will be displayed in English.

Introducing Samsung Knox Manage 14

Knox Manage Admin PortalGet familiar with the Knox Manage Admin Portal’s interface features before starting the Admin Portal.

1

2 3

No. Name Description

1 Header

Appears on every page. The logo, account ID, and the menus for alerts, licenses, online help, and the session time reset are provided. You can also download related applications and programs.

Click next to the account ID to view more menus. For more information, see Header.

2 Main menuAppears on every page. The Knox Manage features are listed by type. For more information, see Main menu.

3 Content page

Displays a list of information for the selected Main menu or the details about the selected resource. For more information, see List.

When you enter a value on this page, you must fill out any input field with an asterisk (*).

Header

Find out more about the elements in the header.

2 3 4 5 6 1

No. Name Description

1 LogoClick the logo to go to the main page. You can change the logo and color theme. For more information, see Setting the logo.

Introducing Samsung Knox Manage 15

No. Name Description

2 Notification

Click to view license information, alerts, and token and certificate information.

• License: View the expiration statuses of licenses. Click the number to navigate to the license list.

• Monitoring: View the list of alerts and the monitored violations. Click the number to navigate to the alert list.

• Token & Certificate: View the expiration status of the APN certificates and the DEP or VPP tokens. Click the number to navigate to each list.

3Portal Settings

Click to customize more settings.

• High Contrast Theme: Apply a high contrast theme to the Admin Portal to help with poor vision.

• Change Language: Change the display language.

4 Support

Hover the mouse over an object to use help information and related applications or programs.

• Getting Started: View the start guide to learn how to use Knox Manage. For more information, see Using the Getting Started.

• Manual: View online help.

• Release Note: View the major changes in the new version on the outline.

• Technical Support: Allow technical support administrators to remotely access the Admin Portal and set the allowed period of time for access.

• Download: Download a list of devices, applications, or reports after exporting them. You can also download a related application or program to use Knox Manage.– My Download: Download a list of devices, applications, or reports that you

have exported under the corresponding menus. You can click Download on each downloaded item to save it.

– Cloud Connector / Remote Support: Download a related application or program to use Knox Manage.

– Cloud Connector Client: A program installed on the client’s site for using Samsung Cloud Connector (SCC)

– Remote Support Viewer (Admin): A program installed on the administrator’s PC for viewing and controlling the user’s device

– Remote Support App (Device): An application installed on mobile devices for Remote Support

5 Account ID

Click next to the account ID to view more menus.

• Session: Enter the maximum session time limit for the Admin Portal. If the limit is exceeded, you will be signed out automatically. You can enter a value from 1 to 60.

• Change Password: Change your account password.

• Logout: Sign out of the Admin Portal.

6Extend Session View the remaining session time. Click to refresh it.

Introducing Samsung Knox Manage 16

Main menu

The Admin Portal’s Main menus help you perform any required tasks that you need to perform as an administrator. Find out what you can do in each menu.

Menu Description

DeviceManage the mobile devices enrolled in Knox Manage. Check the details of each device and send commands to the devices. When a device has problems, you can solve them with Remote Support.

UserManage the users enrolled in Knox Manage. Check the details for each user including the group or organization they belong to and their devices.

GroupManage the user or device groups enrolled in Knox Manage. Assign and apply profiles or send commands to desired groups.

OrganizationManage the user organizations enrolled in Knox Manage. Create or delete sub-organizations. Assign and apply profiles to desired organizations.

ApplicationManage internal or public applications in Knox Manage. Assign applications to groups or organizations.

ProfileCreate new profiles and set policies in them for device management. Assign and apply profiles to mobile devices in groups or organizations. Edit or delete the existing profiles.

KioskUpload a single Kiosk application or use the Kiosk Wizard to create a Multi App Kiosk. Set new Kiosk applications to profiles for assignment. Control the enrolled Kiosk applications.

Content Upload and share content, such as images or document files.

HistoryMonitor and manage the Admin Portal. Track events in the Admin Portal through the audit, log, and history. Set alerts to notify device users of important events. Send general notices to users.

SettingConfigure the settings for the Android and iOS device environments, the Admin Portal environment, Knox Manage Agent policies, and the Keepalive feature. Schedule for profile updates. Manage licenses for using Knox Manage.

AdvancedConfigure the advanced settings for E-FOTA and any external systems to be synchronized or integrated. Manage certificates issued from the external certificate authority and Open API.

Introducing Samsung Knox Manage 17

List

When you click one of the Main menus, the initial information is displayed as a list on the content page.

The following are the attributes of lists:

• Rearrange the list by clicking (ascending order) or (descending order) next to the column headers.

• Filter the list by clicking next to the column headers when there are more than two types of value.

• Adjust the length of the columns by putting the mouse pointer between the columns and dragging it when the mouse pointer changes to .

• Rearrange the column order by placing the mouse pointer over the column header you want to move and dragging it when mouse pointer changes to . While dragging the column header, will appear next to the column header. If it changes to , you can drop it in a place where appears.

On the device, application, or profile lists, the personalized settings of the columns will be saved. The saved settings will be retained before you delete the web browser’s cookies. You can also return the column settings to their default settings by clicking Revert Column Settings.

Introducing Samsung Knox Manage 18

Detail page

When you click one of the items on the list, detailed information about the selected item is displayed on the detail page. The detail page is organized as follows.

1

2

3

No. Name Description

1 Summary Displays the basic information.

2 TabsDisplays the detailed data and information of the selected item in categories. Function buttons are provided for using various functions in the selected tab.

3Function buttons in the footer

The buttons for the available functions related to the selected item

Introducing Samsung Knox Manage 19

Function icon

When you click the following icons, various actions are performed in the Admin Portal.

Icon Description

Delete Select an item to delete and click . Confirm the deletion.

/ / Tooltip Click / / to open a brief guide, detail, or alert about an item.

Download Click to download an item.

Upload Click and select a file to upload.

Search Input a keyword and click to search for an item.

Introducing Samsung Knox Manage 20

New version release and alert pop-ups

After signing in, pop-ups about new version releases and/or alerts will automatically appear, and you can view the provided information through the pop-ups.

New version release pop-up

When the Admin Portal is upgraded to a new version, the new version release pop-up will inform you of the major changes in the new version with an outline.

Alert pop-up

The alert pop-up appears after the new version release pop-up. The pop-up informs you of the followings while also providing the possibility to take action:

Item Description

License expiration

Click the displayed number of the devices to renew them. For more information, see Managing licenses.

APNs certificate expiration

Click the displayed number of the certificate to renew them. For more information, see Setting an APNs certificate (iOS only).

Apple DEP token expiration

Click the link provided for new token issuance. For more information, see Issuing a DEP token.

Apple VPP token expiration

Click the link provided for new token issuance. For more information, see Downloading a VPP token from the VPP website.

Policy assignment error

Click any item to view the detailed information and take appropriate action. For more information about alerts, see Managing alerts.

Introducing Samsung Knox Manage 21

Available services by device type and oSSupported services in Knox Manage differ by device type and OS. Look at the following table and discover the available services depending on the user’s device.

Service Android Enterprise Android Legacy iOS Windows

Knox Workspace v

E-FOTA v

Kiosk v v

Content distribution v v

Volume Purchase Program (VPP) v

Knox Mobile Enrollment (KME) v v

Zero Touch Enrollment (ZTE) v

Device Enrollment Program (DEP) v

Remote Support v v