Table of Contents Go to Bookmark

Creating profiles

Creating profiles

Create a new profile or copy an existing one to make another. You can also specify events such as the time and location for profiles.

Creating a new profile

To add a new profile, complete the following steps:
  1. Navigate to Profile.
  1. Click Add.
  2. On the “Add Profile” page, enter the following information:
  • Name: Enter a name for the profile. The entered name cannot be changed after saving.
  • Platform: Click the checkboxes to select device platforms.
  • If you have selected the Android Enterprise platform and want to set a policy that uses the Samsung Knox API, click the Samsung Knox checkbox.
  • If you have selected the Android Enterprise platform, you can activate a device as a Fully Managed with Work Profile type by clicking the Create Work Profile on Fully Managed checkbox. The Fully Managed with Work Profile type is only supported for devices running Android 8.0 (Oreo) or higher.
  • If you have selected the Android Legacy platform, you can create a Knox Workspace by clicking the Knox Workspace checkbox.
  • Event Profile: Click to enable an event profile. For more information, see Adding events for profiles.
  • Description: Enter a description for the profile.
  1. Click Save & Set Policy to save the information and to proceed with configuring the profile detail.
  • Click Save to save the information and return to the profile list.
  1. Configure the profile details. For more information, see Configuring policies by device platform.
Parent topic: Creating profiles

Copying a profile

Copy an existing profile and create a new profile. When you reuse a profile, you cannot load information about the organizations or groups to which the profile has been assigned.
To copy a profile, complete the following steps:
  1. Navigate to Profile.
  1. On the “Profile” page, click the checkbox for the profile to be copied.
  2. Click Copy Profile.
  3. On the “Copy Profile” page, modify the existing information if necessary.
  • Name: Enter the name of a profile.
  • Platform: Add a device platform to an existing profile.
  • Event Profile: Click to enable an event profile. For more information, see Adding events for profiles. When copying an existing event profile and creating a new one, the event type of the new profile cannot be changed.
  • Description: Enter a description for the profile.
  1. Click Save & Set Policy to save the information and proceed to configure the profile details.
  • Click Save to save the information and return to the profile list.
  1. Configure the profile details. For more information, see Configuring policies by device platform.
Parent topic: Creating profiles

Exporting a profile

You can export a registered profile, save it as a CSV file, and import it to the Knox Manage server for management.
To export a profile, complete the following steps:
  1. Navigate to Profile.
  1. On the “Profile” page, click a profile name.
  2. On the “Profile Detail” page, click Export Policy.
  3. In the “Export” window, click OK. The policies of the selected profile will be downloaded as a CEA file.
Note
Policies about the settings, such as Wi-Fi, VPN, Exchange, Certification, APN, and Email Account, and the policies below cannot be exported.
Policy
Description
Android Enterprise
Application
  • App Execution blacklist setting
  • Application uninstallation prevention list setting
  • System app activation setting
Kiosk
  • Kiosk app settings
Samsung Knox (Android Enterprise)
Application
  • Battery optimization exceptions
DeX
  • Application execution blacklist(Android)
Android (Legacy)
Application
  • App Installation black/whitelist setting
  • Application execution black/whitelist setting
  • Application execution prevention list setting
  • Application uninstallation prevention list setting
  • Battery optimization exceptions
Kiosk
  • Kiosk app settings
Phone
  • Set app voice recording whitelist
System
  • Device Administrators to install and activate apps
DeX
  • Application execution blacklist(Android)
Knox Workspace
Application
  • App Installation black/whitelist settings
  • App Execution blacklist setting
  • Application execution prevention list setting
  • Application uninstallation prevention list Setting
  • Battery optimization exceptions
  • App installation authority whitelisting settings
  • TIMA CCM profile whitelist
  • TIMA CCM profile app access restriction exception list settings
  • Settings for whitelisting apps allowing external SD card
  • Set General area app installation list
  • App Data deletion control setting
Security
  • Enforce Multi factor Authentication
iOS
Application
  • Application black/whitelist settings
  • Autonomous single app mode
Windows
Application
  • Add App Install Black/Whitelist

Adding events for profiles

Profiles can be configured with specific events for them, such as time, location, or application. The policies in these profiles will be applied only when the set events are met. If multiple platforms are selected, only the applicable events for the selected platform will be displayed. For example, the Day & Time will be displayed if Android Legacy and iOS are selected at the same time.

Event types and information

Profiles can have six different event types:
Type
Description
Offline support
Day & Time
Applies the profile configured to the devices on a specified day or time.
You should configure the time zone, days and the timeframe to apply policies on a specified day and time only.
Supported
Application
Applies the profile configured to devices when a specified application is being used on the user’s device.
Supported
Wi-Fi SSID
Applies the profile configured to devices when the device is connected to a specific Wi-Fi SSID.
Note
For devices with Android 9.0 or a higher version, the location setting must be turned on to enable searching Wi-Fi SSIDs and use events.
Supported
SIM Change
Applies the profile configured or locks the device when an unauthorized SIM is installed.
Not supported
Roaming
Applies the profile configured to devices when the roaming service is used.
If the device cannot communicate with the server temporarily due to roaming, the profile is applied when the communication network becomes available again, such as when airplane mode is turned off or the device is rebooted.
Not supported
Geofencing
Applies the profile configured to devices when the device is located near a specific geographic area.
Enter an address to search for, and then Google Maps will display the location, and latitude and longitude automatically.
You can also enter a size to view the radius set by the location.
Note
This feature is available only in Asia-pacific.
Supported
To add an event for a profile, complete the following steps:
  1. Navigate to Profile.
  1. Click Add.
  2. On the “Add Profile” page, enter the following information:
  • Name: Enter the name of a profile.
  • Platform: Select a device platform.
  • Event Profile: Click to enable the use of events.
  • Description: Enter a description for the profile.
  • Event Type: Select an event type.
  • Requirement: Shows the requirements for the selected event type. This option appears only when an event profile is enabled.
  • Day & Time: The policy for changing the date and time should be restricted. Navigate to Android Enterprise or Android Legacy > System in the profile and set the Automatic Date and Time option to Disallow.
  • Application: If an application is on the blacklist, that application cannot be selected for this type.
  • Wi-Fi SSID: Wi-Fi should be allowed.
  • Geofencing: GPS should be allowed.
  • Conditions: Configure the conditions depending on the selected event type. This option appears only when the profile has events enabled. For more information about the condition’s details, see Supported platforms by event type.
  • Allow Run Offline: Allow the profile to be applied to the device even when it is offline. This option appears only if events are enabled. This option only supports the Day & Time, Application, Wi-Fi SSID, and Geofencing types.
  • Lock Device when changing SIM: Locks the device when the SIM is changed. This option appears only when the SIM Change type event has been selected.
  • Notification: Sends a notification to device users when the profile starts or stops being applied.
  • Showing on Device: Enter the message for a notification to be displayed on the device screen when the profiles is applied.
  1. Click Save & Set Policy to save the information and proceed to configure the profile details.
  • Click Save to save the information and return to the profiles list.

Supported platforms by event type

Event Type
Supported platforms
Android Enterprise
Android Legacy
Knox Workspace
iOS
Fully Managed
Work Profile
Samsung
Non-Samsung
Samsung
Non-Samsung
Samsung
Non-Samsung
Samsung
Day & Time
O
O
O
O
O
O
O
O
Application
X
X
X
X
O
X
O
X
Wi-Fi SSID
O
O
O
O
O
O
O
X
SIM Change
O
O
X
X
O
X
O
X
Roaming
O
O
X
X
O
O
O
X
Geofencing
O
X
X
X
O
X
X
X
Note
The SIM Change and Roaming types allow only one event per profile.
Parent topic: Creating profiles
Profile