The Knox Manage (KM) agent is automatically installed and authenticated for iOS devices that are enrolled through Apple’s Automated Device Enrollment (ADE). When the KM agent is not installed on a device, policies can still be applied but certain features, such as manual app installation and notifications, are restricted.

First, diagnose whether either of the following scenarios prevented the device from enrolling:

• The KM agent is not actually installed. This can happen due to the device user declining to install the agent, or due to some error.

• The KM agent is installed, but not running on the device. You must run the KM agent manually to activate it.

• The device user declined to install the KM agent, or declined signing into the App Store with their Apple ID.

• The device user installed the KM agent directly from the App Store.

To resolve any of the above scenarios, try the following resolutions:

• On the KM console, send the Update Knox Manage Agent command. The command installs the KM agent on the target device, as well as sends authentication credentials for enrollment. The device user is required to sign in to the App Store on the device with their personal Apple ID.

• Install the Knox Manage agent on devices by adding and assigning it as a Volume Purchase Program app.

• Make ADE enrollment mandatory. On the KM console, go to Device Enrollment > Apple ADE > ADE Server Setting > Set ADE Default Profile . Under Skip Settings , uncheck Apple ID .

• Manually run the KM agent.