Upload
others
View
15
Download
2
Embed Size (px)
Citation preview
1 1 Introducing Samsung Knox Manage
Introducing Samsung Knox Manage 9
Introducing Samsung Knox ManageSamsung Knox Manage is an EMM solution which provides integrated management of mobile devices. Various policies can be customized for device management and assigned to mobile devices. Applications can be assigned to be only available to employees on their mobile devices while working. Once administrators register the employees and their devices, the integrated management of mobile devices begins. Improve business efficiency and secure company data using Knox Manage.
This chapter explains the following topics:
→ Knox Manage components
→ Knox Manage strengths
→ Knox Manage system requirements
→ Knox Manage Admin Portal
→ Available services by device type and OS
Introducing Samsung Knox Manage 10
Knox Manage componentsThe cloud-based Knox Manage has the following components.
Admin Portal
Windows devices
Firewall
Samsung KNOX Workspace devices
Knox Manage
iOS devices
Android devices
CloudConnector
CertificateAuthority
ActiveDirectory
1
3
2
2
22
4
5
6
No. Name Description
1 Knox Manage Administrator Portal Configures and manages Knox Manage environments.
2 Knox Manage AgentAn application installed on Android, iOS, and Windows mobile devices
3 Knox Manage server Knox Manage cloud server
4 Knox Manage Cloud ConnectorTransfers data securely between the client’s enterprise server and the Knox Manage server. For more information, see Using Cloud Connector.
5 Lightweight Directory Access ProtocolImports the client’s directory-based user information. For more information, see Syncing user information with AD/LDAP and Integrating a directory server.
6 Certificate AuthorityGenerates certificates for authentication when using a network, such as Wi-Fi, VPN, Exchange, or APN. For more information, see Adding a certificate authority (CA).
Introducing Samsung Knox Manage 11
Knox Manage strengthsEasy creation of launcher applications with Kiosk Wizard
Knox Manage provides Kiosk Wizard, that helps you set up devices to display only specific applications, widgets, and notifications. You can configure Kiosk devices to perfectly fit your work and service.
Quick troubleshooting via Knox Manage Remote Support
Knox Manage provides Remote Support to solve any device or application issues quickly and precisely. Remote Support also helps prevent the same issues from arising again through analyzing the logs.
Optimal management of OS versions using E-FOTA
Knox Manage enables wireless firmware management via Enterprise Firmware-Over-The-Air (E-FOTA). E-FOTA helps resolve security risks for vulnerable OS versions and guarantees compatibility between software developed in the company and any new OS versions.
Integrated management of Android Enterprise devices
Knox Manage provides a full management service for any type of Android Enterprise device. You can save service support costs through the easy assignment of policies, applications, and the latest updates.
Optimized Knox Manage Admin Portal
The user interface of the Knox Manage Admin Portal is designed to be administrator-centric. You can easily monitor the security status of enrolled devices and quickly collect information needed for prompt action.
Support of differentiated Samsung Knox
Knox Manage supports the latest firmware of Samsung Knox, the mobile enterprise security platform embedded into Samsung Galaxy devices. In addition, Knox Manage fully guarantees fully supports for the latest Knox API.
Introducing Samsung Knox Manage 12
Effortless content management
Knox Manage comes with the ability to upload and distribute images, documents, audio, and even videos. You can set the distribution target from a single user or device to groups or organizations. Moreover, the Content Delivery Network (CDN) allows you to distribute content more quickly and safely and reduce the data transfer load.
Bulk device enrollment and application assignment
Knox Manage provides the means for the easy and quick enrollment of mobile devices en masse through Knox Mobile Enrollment (KME) for Android devices or the Device Enrollment Program (DEP) for iOS devices. In the case of iOS devices, Apple’s Volume Purchase Program (VPP) is also available to help conveniently assign the desired applications.
Easy initial setup with the Getting Started guide
Knox Manage provides the Getting Started guide which outlines the process for initial environment setup. By following the guide, you can become proficient at adding users, enrolling devices, and applying policies promptly.
Strong data protection
Knox Manage has incorporated top-level security requirements since the initial design process in order to protect corporate data from possible data security threats:
• All data between the server and mobile device is encrypted with AES-256 (AES: Advanced Encryption Standard).
• Two-factor authentication is supported through applications and communication based on security certificates.
Storage of device analysis data
In addition to monitoring devices in real time, Knox Manage also provides audits. You can check events that occur in the system, applied policies, tampering and compliance violations, etc., and take appropriate actions against them.
Direct Boot enabled
Knox Manage supports Direct Boot on Android 7 and higher devices. Knox Manage is executed after the user reboots the device and before the device is unlocked. The commands that can be executed before unlocking are limited.
Introducing Samsung Knox Manage 13
Knox Manage system requirementsMeet the requirements listed below to ensure the efficient operation of Knox Manage:
Item Requirement
Administrator’s PC
OS Microsoft Windows XP or higher
Browser
• Google Chrome version 41 or higher
• Mozilla Firefox version 37 or higher
• Microsoft Internet Explorer 11
Resolution 1680 x 1050 (px)
User’s device
Android Enterprise Android 6.0 (Marshmallow) or higher
Android Legacy Android 5.0 (Lollipop) or higher
iOS iOS 9.0 or higher
WindowsA desktop computer on which Microsoft Windows 10 Version 1703 or higher has been installed (Pro/Enterprise/Home)
Supported language
Admin PortalEnglish, Portuguese, Spanish, French, German, Italian, Korean
Knox Manage AgentAny of the above languages set in the device language settings
Note • Online help in the Admin Portal is only available in English.
• You can select a language in the portal without changing the browser’s language.
• If the selected language in Knox Manage Agent is not supported on the mobile device, Knox Manage Agent will be displayed in English.
Introducing Samsung Knox Manage 14
Knox Manage Admin PortalGet familiar with the Knox Manage Admin Portal’s interface features before starting the Admin Portal.
1
2 3
No. Name Description
1 Header
Appears on every page. The logo, account ID, and the menus for alerts, licenses, online help, and the session time reset are provided. You can also download related applications and programs.
Click next to the account ID to view more menus. For more information, see Header.
2 Main menuAppears on every page. The Knox Manage features are listed by type. For more information, see Main menu.
3 Content page
Displays a list of information for the selected Main menu or the details about the selected resource. For more information, see List.
When you enter a value on this page, you must fill out any input field with an asterisk (*).
Header
Find out more about the elements in the header.
2 3 4 5 6 1
No. Name Description
1 LogoClick the logo to go to the main page. You can change the logo and color theme. For more information, see Setting the logo.
Introducing Samsung Knox Manage 15
No. Name Description
2 Notification
Click to view license information, alerts, and token and certificate information.
• License: View the expiration statuses of licenses. Click the number to navigate to the license list.
• Monitoring: View the list of alerts and the monitored violations. Click the number to navigate to the alert list.
• Token & Certificate: View the expiration status of the APN certificates and the DEP or VPP tokens. Click the number to navigate to each list.
3Portal Settings
Click to customize more settings.
• High Contrast Theme: Apply a high contrast theme to the Admin Portal to help with poor vision.
• Change Language: Change the display language.
4 Support
Hover the mouse over an object to use help information and related applications or programs.
• Getting Started: View the start guide to learn how to use Knox Manage. For more information, see Using the Getting Started.
• Manual: View online help.
• Release Note: View the major changes in the new version on the outline.
• Technical Support: Allow technical support administrators to remotely access the Admin Portal and set the allowed period of time for access.
• Download: Download a list of devices, applications, or reports after exporting them. You can also download a related application or program to use Knox Manage.– My Download: Download a list of devices, applications, or reports that you
have exported under the corresponding menus. You can click Download on each downloaded item to save it.
– Cloud Connector / Remote Support: Download a related application or program to use Knox Manage.
– Cloud Connector Client: A program installed on the client’s site for using Samsung Cloud Connector (SCC)
– Remote Support Viewer (Admin): A program installed on the administrator’s PC for viewing and controlling the user’s device
– Remote Support App (Device): An application installed on mobile devices for Remote Support
5 Account ID
Click next to the account ID to view more menus.
• Session: Enter the maximum session time limit for the Admin Portal. If the limit is exceeded, you will be signed out automatically. You can enter a value from 1 to 60.
• Change Password: Change your account password.
• Logout: Sign out of the Admin Portal.
6Extend Session View the remaining session time. Click to refresh it.
Introducing Samsung Knox Manage 16
Main menu
The Admin Portal’s Main menus help you perform any required tasks that you need to perform as an administrator. Find out what you can do in each menu.
Menu Description
DeviceManage the mobile devices enrolled in Knox Manage. Check the details of each device and send commands to the devices. When a device has problems, you can solve them with Remote Support.
UserManage the users enrolled in Knox Manage. Check the details for each user including the group or organization they belong to and their devices.
GroupManage the user or device groups enrolled in Knox Manage. Assign and apply profiles or send commands to desired groups.
OrganizationManage the user organizations enrolled in Knox Manage. Create or delete sub-organizations. Assign and apply profiles to desired organizations.
ApplicationManage internal or public applications in Knox Manage. Assign applications to groups or organizations.
ProfileCreate new profiles and set policies in them for device management. Assign and apply profiles to mobile devices in groups or organizations. Edit or delete the existing profiles.
KioskUpload a single Kiosk application or use the Kiosk Wizard to create a Multi App Kiosk. Set new Kiosk applications to profiles for assignment. Control the enrolled Kiosk applications.
Content Upload and share content, such as images or document files.
HistoryMonitor and manage the Admin Portal. Track events in the Admin Portal through the audit, log, and history. Set alerts to notify device users of important events. Send general notices to users.
SettingConfigure the settings for the Android and iOS device environments, the Admin Portal environment, Knox Manage Agent policies, and the Keepalive feature. Schedule for profile updates. Manage licenses for using Knox Manage.
AdvancedConfigure the advanced settings for E-FOTA and any external systems to be synchronized or integrated. Manage certificates issued from the external certificate authority and Open API.
Introducing Samsung Knox Manage 17
List
When you click one of the Main menus, the initial information is displayed as a list on the content page.
The following are the attributes of lists:
• Rearrange the list by clicking (ascending order) or (descending order) next to the column headers.
• Filter the list by clicking next to the column headers when there are more than two types of value.
• Adjust the length of the columns by putting the mouse pointer between the columns and dragging it when the mouse pointer changes to .
• Rearrange the column order by placing the mouse pointer over the column header you want to move and dragging it when mouse pointer changes to . While dragging the column header, will appear next to the column header. If it changes to , you can drop it in a place where appears.
On the device, application, or profile lists, the personalized settings of the columns will be saved. The saved settings will be retained before you delete the web browser’s cookies. You can also return the column settings to their default settings by clicking Revert Column Settings.
Introducing Samsung Knox Manage 18
Detail page
When you click one of the items on the list, detailed information about the selected item is displayed on the detail page. The detail page is organized as follows.
1
2
3
No. Name Description
1 Summary Displays the basic information.
2 TabsDisplays the detailed data and information of the selected item in categories. Function buttons are provided for using various functions in the selected tab.
3Function buttons in the footer
The buttons for the available functions related to the selected item
Introducing Samsung Knox Manage 19
Function icon
When you click the following icons, various actions are performed in the Admin Portal.
Icon Description
Delete Select an item to delete and click . Confirm the deletion.
/ / Tooltip Click / / to open a brief guide, detail, or alert about an item.
Download Click to download an item.
Upload Click and select a file to upload.
Search Input a keyword and click to search for an item.
Introducing Samsung Knox Manage 20
New version release and alert pop-ups
After signing in, pop-ups about new version releases and/or alerts will automatically appear, and you can view the provided information through the pop-ups.
New version release pop-up
When the Admin Portal is upgraded to a new version, the new version release pop-up will inform you of the major changes in the new version with an outline.
Alert pop-up
The alert pop-up appears after the new version release pop-up. The pop-up informs you of the followings while also providing the possibility to take action:
Item Description
License expiration
Click the displayed number of the devices to renew them. For more information, see Managing licenses.
APNs certificate expiration
Click the displayed number of the certificate to renew them. For more information, see Setting an APNs certificate (iOS only).
Apple DEP token expiration
Click the link provided for new token issuance. For more information, see Issuing a DEP token.
Apple VPP token expiration
Click the link provided for new token issuance. For more information, see Downloading a VPP token from the VPP website.
Policy assignment error
Click any item to view the detailed information and take appropriate action. For more information about alerts, see Managing alerts.
Introducing Samsung Knox Manage 21
Available services by device type and oSSupported services in Knox Manage differ by device type and OS. Look at the following table and discover the available services depending on the user’s device.
Service Android Enterprise Android Legacy iOS Windows
Knox Workspace v
E-FOTA v
Kiosk v v
Content distribution v v
Volume Purchase Program (VPP) v
Knox Mobile Enrollment (KME) v v
Zero Touch Enrollment (ZTE) v
Device Enrollment Program (DEP) v
Remote Support v v