New Features in the DS 1.7 Release, December 6th 2017
The following are the new features and enhancements introduced with this release:
Knox Configure (KC)
1. Enterprise Edition Note 8 supported by Knox Configure
This support provides an extension of the existing Samsung Enterprise Edition devices available to use Knox Configure. Knox Configure now supports Note 8 Enterprise Edition devices in Germany and the USA. To date, only S8 has been supported. This new Note 8 support is retroactive to the DS 1.6 release.
2. Widget customization enhancements
To best display widgets on a device’s home screen, widget related information is now extractable from the APK for “in-house” apps (non Google Play store apps). Extracted widget properties include minHeight, minWidth, minResizeWidth, minResizeHeight, and resizeMode.
When uploading in-house apps, a preview image extracts and displays.
3. Enrollment enhancements
This enhancement addresses our IT admins’ request to have the device end user complete KC enrollment without touching the device’s "FINISH" or "RESTART" button. To satisfy this request, the device’s FINISH button remains as it is today, but a new 5-second timer displays under it. If there is no input from user for 5 seconds, the device automatically moves to its home screen. In ProKiosk mode, a message will display stating the device will restart in 5 seconds, then reboot automatically.
4. New client side anti-fraud enhancement
This enhancement enables a device user to make a call to the phone number displayed in the device’s lock screen when they touch the number. Additionally, the device user can now send an email to an email address displayed in the lock screen when they touch the email address within the lock screen.
5. New restrictions available in ProKiosk mode to restrict specific URLs on device
This enhancement supports system integrators and IT admins who want to allow specific URLs in ProKiosk mode, and restrict specific URLs on an end user’s device.
URLs must be start with http://, https://, or ftp:// to be whitelisted or blacklisted successfully using an application URL restriction.
The Applications field is mandatory for ProKiosk and normal mode profile support.
6. Locked device stats now display in Knox Configure’s Dashboard and Profile screens
To optimally report and display the number of locked devices in the Knox Configure portal, new column items and color codes are available within the portal’s Dashboard and Customization trend graph to visually report, trend and distinguish when devices are locked.
7. New Knox Deployment App (KDA) with Bluetooth enrollment support
To support Bluetooth enrollment, an IT admin can install the KDA on a dedicated admin (master) device and select configuration profiles. A device user triggers Bluetooth enrollment by booting or factory resetting the device. If the user’s device is within proximity of the admin’s device, the user device connects to the admin device wirelessly via Bluetooth without a PIN or password requirement. The user enrolls using the profiles defined on the admin device. For more information, refer to the Knox Developers APP (KDA) User Guide, available at https://support.samsungknox.com/hc/en-us/categories/115001758028 within User Guides.
NOTE - With the new KDA in the Play Store, IT admins will no longer be able to add user credentials for automated sign-up to MDMs. To locate the KDA within the Play Store, search for Knox Deployment.
Wearable Knox Configure (WKC)
1. New APN configuration enhancements available
With this APN enhancement, IT admins can now set a wearable’s APN configuration Name, APN protocol (IPv4, IPv6) and MMSC. Once the APN configuration is added and applied, these variables display in the APN list.
2. IT admins can save content to a dedicated folder on wearable devices
This enhancement permits system integrators and IT admins to save content on their end users’ wearable device within a dedicated Contents folder. With this feature, an IT admin creates a dynamic or setup edition profile and selects files to save within the folder from the Knox Configure portal. The IT admin then associates devices with the profile. The IT admin then verifies the target files are saved within the wearable’s Contents folder.
3.Factory resets available on wearables
The existing factory reset option in the KC portal’s Actions menu is now available to KC enrolled wearable devices using a dynamic edition profile. This allows wearable devices, when need be, to be factory reset and enrolled again.
Knox Mobile Enrollment (KME)
1. Skip setup wizard option available
This feature enables IT admins to define an enrollment profile that prevents device users from skipping the Setup Wizard and ensures a Google account is created on devices supporting Android version 7.0 and above. To fulfill this requirement, a Skip Setup Wizard checkbox option is added to the profile creation and edit screens.
The US implementation has (Option not currently available on all AT&T devices) appended to the checkbox. This setting is enabled by default. When disabled, the device proceeds through the regular setup, including Google account creation and KME/MDM enrollment.
2. Device user enrollment cancellation option now available
This enhancement provides each profile an end-user enrollment cancellation option. Leaving this setting unselected enables mandatory device enrollment, and should only be utilized with trusted partners, as it increases the risk of enrollment errors. Prior to this release, user enrollment cancelation was a global setting that could only be modified by a Samsung Administrator.
However, with this DS 1.7 release the user cancellation setting is KME configurable per profile, with existing global settings copied over for each profile. If enabling Google Device Owner (DO) support, end-user enrollment cancellation is not available. The Skip Setup Wizard option functions independently from end user enrollment cancellation, and both can be enabled concurrently.
3. Customizable columns now available within the DEVICES > All Devices screen
The columns within the DEVICES > All Devices screen can now be filtered to display some or all nine of the column options available. Use the Customizable Table drop-down menu, invoked on the right-hand side of the column display, to de-select those items you would like removed from the display. There may be circumstances when the screen appears overly populated with values that may not be important to you. Use the filter options to just select those needed column values and select Save Changes. Once saved, the updated display settings are committed locally, and are available upon subsequent logins as long as the local system cache is not refreshed.
4. New Knox Deployment App (KDA) with Bluetooth enrollment support
To support Bluetooth enrollment, an IT admin installs the KDA on a dedicated admin device and selects configuration profiles. A device user can trigger Bluetooth enrollment by booting or factory resetting the device. If the user’s device is within proximity of the admin’s device, the user device connects to the admin device wirelessly via Bluetooth without a PIN or password requirement. The user enrolls using the profiles defined on the admin device. For more information, refer to the Knox Developers APP (KDA) User Guide, available at https://support.samsungknox.com/hc/en-us/categories/115001758008 within User Guides.
NOTE - With the new KDA in the Play Store, IT Admins will no longer be able to add user credentials for automated sign-up to MDMs. To locate the KDA within the Play Store, search for Knox Deployment.