Knox™ Developers App (KDA) User Guide v1 · 2017. 12. 13. · Knox Technical questions Knox...

IT Admin Guide

Knox™ Developers App (KDA)

User Guide v1.0

December 2017

User Guide

Knox Kn Knm Samsung Knox Deployment App (KDA) User Guide

Copyright © 2017 Samsung Electronics Co. Ltd. 1

Copyright Notice

Copyright © 2017 Samsung Electronics Co., Ltd. All rights reserved. Samsung is a registered trademark of Samsung Electronics Co., Ltd., used with permission. Samsung KNOX is a trademark of Samsung Electronics, Co., Ltd., used with permission. Specifications and designs are subject to change without notice. Non-metric weights and measurements are approximate. All data was deemed correct at time of creation. Samsung is not liable for errors or omissions. Android and Google Play are trademarks of Google Inc. ARM and TrustZone are registered trademarks of ARM Limited (or its subsidiaries) in the EU and/or elsewhere. Bluetooth is a registered trademark of Bluetooth SIG, Inc. worldwide. Cisco AnyConnect is a registered trademark of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries. F5 Big IP-Edge Client is a registered trademark of F5 Networks, Inc. in the U.S. and in certain other countries. iOS is a trademark of Apple Inc., registered in the U.S. and other countries. Junos Pulse is a trademark of Pulse Secure, LLC. KeyVPN Client is a trademark of Mocana Corporation. Microsoft Azure and Microsoft Active Directory are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. NFC Forum and the NFC Forum logo are trademarks of the Near Field Communication Forum. OpenVPN is a registered trademark of OpenVPN Technologies Inc. Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners. strongSwan is an open source software under General Public License as published by the Free Software Foundation. Wi-Fi is a registered trademark of the Wi-Fi Alliance. All brands, products, service names and logos are trademarks and/or registered trademarks of their respective owners and are hereby recognized and acknowledged.

Document History

Date Changes

December 2017 Version 1.0

Contact Information

If you want to contact us about … You have these options …

General Knox questions Knox Portal for comprehensive information about Knox

How to get Knox Contact Knox Sales to try Knox, start a free trial, get pricing info, or buy

Knox

Technical questions Knox Support for self-help resources like videos, guides, and FAQs

If you already have a Knox portal account, log in to see all the resources

available to you. If you do not have an account, you can register for one.

Other support options Contact Knox Support

https://samsungknox.com/https://www.samsungknox.com/contact?subject=saleshttp://samsungknox.com/supporthttps://www.samsungknox.com/sso/loginhttps://www.samsungknox.com/user/registerhttps://samsungknox.com/faq/how-do-i-get-support-knox-support-team


About the KnoxTM Deployment App

The Knox Deployment App is a mobile application uniquely designed to help streamline the enterprise deployment of Samsung phones and tablets running Knox 2.7.1 or higher. The Knox Deployment App enables customers to perform seamless deployment of devices through Knox Deployment Services - Knox Configure (KC) or Knox Mobile Enrollment (KME).

The Knox Deployment App provides the flexible option to IT admins needing to bulk enroll end-user devices to KC and/or KME without having a reseller. Using this app allows IT Admins to reduce their bulk deployment time, by using a master device without factory resetting each device. Once enrolled, an IT admin can easily locate the devices within the KC or KME portal(s). NOTE - Using the Knox Deployment APP does not apply the profile to the admin/master device. It only broadcasts the profile to the devices in the vicinity. NOTE – Only end-user devices within physical proximity of the admin/master device with an active Knox Deployment App can use the Knox Deployment App to Bluetooth or NFC enroll to KC. NOTE – When using the KDA for either a NFC or Bluetooth enrollment, an end-user can still cancel enrollment via the Skip Setup Wizard profile setting.

Bluetooth enrollment To support Bluetooth-based enrollment, an IT admin can install the Samsung Knox Deployment App on a

dedicated admin/master smartphone or tablet device, and select existing KC or KME (or both) configuration

profiles. If the user’s device is within proximity of the master device, the user device connects to the admin

device wirelessly via Bluetooth without a PIN or password requirement.

NFC enrollment

With Near Field Communication (NFC) enrollments, a non-B2B device is “bumped” (held closely together) with

another smartphone device with Knox Deployment App running and scanning in NFC mode. The dedicated

master NFC device displays profiles available for enrollment and end user device enrollment begins once an IT

admin selects a profile. The NFC enrollment option is not available to tablet devices.


Prerequisites

To support Bluetooth or NFC enrollments using the Knox Deployment App, an IT admin must:

Secure a Samsung account, and ensure:

o Your devices support the Bluetooth or NFC protocols. Check your device specification if unsure

o You have at least one profile configured in Knox Configure or Knox Mobile Enrollment portal

Secure the appropriate licenses to enroll devices (through the Samsung Knox Portal)

Install the Knox Deployment on an admin/master device, and login using their Knox Portal ID/password

Select a KC or KME profile on the master device to apply to the end-user devices

About

Knox Deployment App version information and available open source licenses can be referenced from within

the ABOUT screen. Samsung recommends you periodically compare the Knox Deployment App’s version to

the latest available from Samsung to ensure you have the latest feature set and functionality available.

NOTE - The screens utilized within this guide are from a smartphone. If running the Knox Deployment App on

a tablet, the information on the screen would be identical, just optimized to fit the tablet’s display capabilities.

The launch the Knox Deployment App’s About screen:

1. Invoke the drop-down menu from the top, right-hand, side of the device and select About.

2. Refer to the listed version number and note the version. If needed, select Open source licenses to

review the available open source licenses available to your Knox deployment.


Using the KnoxTM Deployment App

This section describes the screen flow navigation for a typical Bluetooth or NFC based enrollment using the Knox Deployment App.

1. Select SIGN IN > once the Knox Deployment App launches on the device.

NOTE – If the Knox Deployment App is already running on the device, the initial screen does not display, and the application displays the sign in screen.

2. Enter the Knox Portal Username and Password to login into the Knox Deployment App.

3. Select Remember me to display and utilize the username in subsequent Knox Deployment App logins. NOTE – If you encounter difficulty logging in to the Knox Deployment App, ensure you have either a valid Knox Portal account with privileges for KC/KME. If that is not the issue, select Forgot your email or password? for assistance retrieving your login credentials.


4. Select SIGN IN > to proceed with the device login. Once you have successfully logged into the Knox Deployment App, a WELCOME screen displays providing first-time options for profile selection and deployment mode.

NOTE – Once the Knox Deployment App profile selection and configuration mode are set, the selected options display within their respective fields, the START DEPLOYMENT option enables, and the Welcome portion of screen no longer displays in subsequent logins.

Profile selection

Select a profile to utilize within the Knox Deployment App to apply specific device settings to the master admin

device using Bluetooth or NFC to enroll end user devices. For more information on Knox Configure and Knox

Mobile Enrollment, go to: Appendix A.

To select a configuration profile using the Knox Deployment App:

1. Select Tap here to select a profile from the Welcome screen display a list of profile selection options.


2. Optionally filter whether All profiles are listed for potential selection or just Knox Configure or Knox Mobile Enrollment defined profiles. The most recent profile additions display first within their respective categories.

Each listed profile has a brief description to help determine its relevance to a potential Bluetooth device enrollment using the Knox Development App.

If needed, select the Search icon near the top of the screen to display a search field where existing profiles can be located and displayed. The search function only locates filtered profiles.

If no profiles are available, a profile requires registration using either the KC or KME portals at www.samsungknox.com (valid login required).

3. Select a listed profile. Once selected, the profile displays upon subsequent logins. The profile is now ready for Bluetooth or NFC deployment mode selection as described in the sections that follow.

http://www.samsungknox.com/


Bluetooth Deployment

Once profiles are set on the master admin device, the IT admin needs to set Bluetooth as the deployment

mode and define the Bluetooth duration interval. End users can then enroll their device by entering the

appropriate URL via KC or KME (but not both).

To deploy devices using the KDA:

1. From the admin master device, navigate to the < SELECT DEPLOYMENT MODE screen and select

Bluetooth as the device deployment mode.

2. Set the Bluetooth Duration for either 30 minutes, 1 hour, 3 hours, 5 hours or 8 hours. Select OK to

save the duration.

Note - The Bluetooth duration is deployment activation period for end user

devices receiving their profile configuration from the IT admin’s master device.

Once the set duration expires, devices cannot enroll with the Knox

Deployment App, and the process must be repeated to continue the

enrollment of other required devices.

NOTE – The device must remain on for the entire Bluetooth duration, so

ensure battery resources are available if selecting a longer duration option.

3. From the Knox Deployment screen, the admin selects START DEPLOYMENT to initiate the defined

Bluetooth Duration interval.


NOTE - As long as the defined Bluetooth Duration interval is still counting

down, and user has not put the application in the background, the device’s

display will not time out.

NOTE – Bluetooth must be turned on and running on the device to start

deployment. If Bluetooth is off, a prompt displays and the admin must select

TURN ON to enable Bluetooth.

4. The device’s end user must go to https://me.samsungknox.com and complete the instructions provided.

5. The end user then selects FINISH DEPLOYMENT to complete the enrollment.

NOTE – Once completed, the Bluetooth enrolled profile displays within KC or

KME with other enrolled profiles. If necessary, refer to the device’s About

screen for Knox Deployment App version information and open source license

availability.

https://me.samsungknox.com/


NFC Deployment

Once profiles are set on the master admin device, the IT admin needs sets NFC as the deployment mode. If

you are NFC enrolling a device using both KC and KME, use KC first.

To deploy devices using the KDA:

1. From the admin master device, navigate to the < SELECT DEPLOYMENT MODE screen and select

NFC as the device deployment mode.

NOTE – To deploy, both NFC and Android Beam must be on within the

device’s Settings menu.

2. Beam enrollment information by holding the admin/master device back-to-back with an NFC enabled

and compatible device and then pressing the screen as illustrated below.


3. Select FINISH DEPLOYMENT on master/admin device once the NFC beam is completed with the end

user device.

NOTE – Once completed, the NFC enrolled profile displays within KC or

KME with other enrolled profiles. If necessary, refer to the device’s About

screen for Knox Deployment App version information and open source

license availability.


Appendix A

Knox Configure Knox Configure (KC) is a cloud-based service that empowers both large to medium enterprises and B2B2C

customers to configure, customize, and automate the enrollment of Samsung devices purchased from

authorized Samsung resellers. To get started with Knox Configure, go to:

https://www.samsungknox.com/en/solutions/knox-configure.

Knox Mobile Enrollment Knox Mobile Enrollment (KME) is a tool to streamline the initial setup and enrollment of corporate-owned and

employee-owned devices to an EMM. To get started with KME, go to

https://www.samsungknox.com/en/solutions/mobile-enrollment.

About Samsung Electronics Co., Ltd.

Samsung Electronics Co., Ltd. is a global leader in technology, opening new possibilities for people everywhere. Through

relentless innovation and discovery, we are transforming the worlds of televisions, smartphones, personal computers,

printers, cameras, home appliances, LTE systems, medical devices, semiconductors and LED solutions. We employ

236,000 people across 79 countries with annual sales exceeding KRW 201 trillion.

For more information about Samsung Knox, visit http://www.samsungknox.com/.

Copyright © 2017 Samsung Electronics Co. Ltd. All rights reserved. Samsung is a registered trademark of Samsung

Electronics Co. Ltd. Specifications and designs are subject to change without notice. Non-metric weights and

measurements are approximate. All data were deemed correct at time of creation. Samsung is not liable for errors or

omissions. Android and Google Play are trademarks of Google Inc. ARM and TrustZone are registered trademarks of ARM

Limited (or its subsidiaries) in the EU and/or elsewhere. All brand, product, service names and logos are trademarks and/or

registered trademarks of their respective owners and are hereby recognized and acknowledged.

Samsung Electronics Co., Ltd.

416, Maetan 3-dong, Yeongtong-gu

Suwon-si, Gyeonggi-do 443-772, Korea
http://www.samsungknox.com/

Knox™ Developers App (KDA) User Guide v1 · 2017. 12. 13. · Knox Technical questions Knox...

Documents

Transcript of Knox™ Developers App (KDA) User Guide v1 · 2017. 12. 13. · Knox Technical questions Knox...