Knox Manage 25.04 release notes (new console)

New

Support for third-party IdP solutions

You can now add, manage, and perform relevant actions for IdP connections (Connection and security > Identity provider). The new console currently supports On-premise AD and Microsoft Entra ID connections. Connection details are shown in a sliding panel, which includes links to synced users and groups. Sync lists open in separate pages and have their own relevant actions. You can choose to sync all targets of a directory, or sync individual targets.

While creating a connection, you can configure server, user, and group settings. You can also schedule automatic connection syncs, and map ­­user or group fields from your IdP to Knox Manage. Additionally, the Activity log page features a new Identity provider tab to look up connection, user, and group logs.

Add groups or users from a directory

Assuming there is at least one IdP connection, you can use the new Add group from directory action on the Groups page to add a group from a directory. Similarly, you can use the new Add users from directory action on the Users page to add users from a directory. Additionally, on both pages, the Source column features a new tooltip that shows a source directory’s connection type.

Manage certificates

Starting with this release, you can upload and locally manage already-issued certificates in the Certificates page (Connection and security > Certificates).

Manage device groups

You can now manage device groups, view a device group’s details, and perform relevant actions, such as duplicate groups, assign profiles, and assign apps. Moreover, while duplicating a group, you can specify which items of the group (devices, profile assignment, app assignment, or content assignment) you want to include.

Additionally, while viewing a device’s details on the Devices page, you can look up which device groups it belongs to.

Modify settings for multiple apps in a group

Previously, you could only edit app settings for a specific app in a group. Starting with this release, you can edit settings for multiple apps (Groups > select group with assigned apps > ACTIONS > Edit app settings > select apps > Next).

Support for in-house apps

You can now add, manage, and perform relevant actions for in-house apps (Library > Apps > IN-HOUSE APPS).

Import and export managed configurations

Starting with this version, you can export managed configurations for apps (Library > Apps > click Assigned groups link for an app > select a group > ACTIONS > Export managed configuration). Only one group can be selected at a time, and the target group must have a managed configuration defined for the app. Exported configurations are downloaded to your default download directory.

You can import downloaded configurations for Managed Google Play apps during app assignment (Library > Apps > select an app > ACTIONS > Assign app(s) > toggle Managed configuration > Import a .config file link).

Support for content management

Starting with 25.04, you can add, manage, and perform relevant actions for content files from the Content page (Library > Apps > Content). Content files are automatically scanned for viruses prior to upload. Clicking a content link opens a sliding panel, which includes links to groups, users, and devices the content is assigned to. Similarly, user, group, and device details now include links to assigned content.

Additionally, you can push content to devices (assuming there is enough free space), and assign or unassign content to users and groups. You can even configure Knox Manage to automatically delete unassigned content from devices (Knox Manage: General settings > Device configurations > Delete content from device when unassigned).

New policies and settings

The following Android policies, settings, and sub-settings have been added to the new console. See Android policies for details.

Hardware Controls settings

• Use microphone
• Use microphone > Record with microphone
• Use microphone > Use S Voice
• Adjust volume

Call and message settings

• Make voice calls on non-Samsung devices
• Send text messages on non-Samsung devices
• Emergency alerts

Google Play settings

• Check devices through Play Integrity
• Check devices through Play Integrity > Set time period between checks
• Check devices through Play Integrity > Take action if device fails check during enrollment
• Check devices through Play Integrity > Take action if device fails check after enrollment
• App verification using Google Play Protect

Knox Browser settings

• Homepage URL
• Automatic app updates
• Add URLs to allowlist or blocklist
• Add URLs to allowlist or blocklist > URLs
• Hide URL address bar
• Web intents
• Download files
• Screen capture
• Add bookmarks
• Upload files
• Store cookies
• Copy text
• Text scaling
• Text scaling > Ratio
• Force page zoom
• Force page zoom > Default ratio

Common browser settings

• Auto-completion in browser

App allowlist and blocklist settings

• Block certain apps from running
• Block certain apps from being uninstalled

Security settings

• Factory reset protection
• Factory reset protection > Google users

Connection settings

• Share internet connection using tethering
• Send and receive files through Bluetooth
• Turn on airplane mode
• Use printer
• Reset mobile data usage
• Configure mobile network settings

Updates

Kiosk enhancements

Support for multi-and single-app modes for kiosks

Previously, kiosks in the new console only supported web mode. Starting with this version, the Kiosk settings policy has been enhanced to also support multi-app and single-app mode. Additionally, the following mode-specific options have been added:

• (Single-app mode) Basic settings > Screen saver
• (Multi-app and single-app mode) Apps outside kiosk
• (Multi-app and single-app mode) Settings menu preferences
• (All modes) Advanced settings > Delete kiosk app when policy is removed
• (All modes) Advanced settings > Turn screen on when plugged in

New Kiosk builder for multi-app mode

While in multi-app mode, you can use the new Kiosk builder to create, customize, and preview multi-app kiosks. You can drag-and-drop kiosk components (app or widgets) in the builder’s preview screen. Additionally, you can configure individual widgets, customize kiosk details such as the layout, wallpaper, app styles, and much more.

Settings enhancements

New General Settings tabs and settings

The Knox Manage: General Settings page (profile image > Settings > GENERAL SETTINGS) has new Preferences, Device configurations, and Cloud connector tabs, which include several new settings.

New tabs in Android Enterprise Settings

The Knox Manage: Android Enterprise page (profile image > Settings > ANDROID ENTERPRISE) has new Account, App settings, and Block enrollment tabs, which include several new settings. You can enroll devices in bulk using zero-touch enrollment, change accounts without having to unenroll and re-enroll devices, manage admin lists, auto-update apps, block enrollment for certain kinds of devices, and much more.

Manage email templates

You can create and manage custom email templates using the new Knox Manage: User email templates page settings (profile image > Settings > USER EMAIL TEMPLATES). The Users page lets you select a template while sending emails (Users > select user or users > ACTIONS > Send email to user). Email notification templates for Knox Manage agent installation and enrollment are provided by default, and can be customized as needed.

Additional improvements

• The dashboard now includes a card with helpful resources (Dashboard > Helpful resources), which provides quick access to a getting started video, product documentation, and a survey about the console.
• Previously, you couldn’t navigate back to a first-level page (Users, Devices, Groups, Apps, Profiles and policies, or Content) from a second-level page (such as a list of users belonging to a certain group). Starting with this release, second-level pages support hyperlinks, allowing you to navigate back-and-forth between parent and child records.
• On Groups and Users pages, the “Directory” filter option has been removed from the Source column in favor of the new Identity provider page (see Support for third-party IdP solutions for details).
• The Apps page includes a new Settings shortcut to open the Knox Manage: Android Enterprise page (profile image > Settings > ANDROID ENTERPRISE).
• For untoggled settings, the Profile and policies page and its child pages now show “-” instead of “Allow” for a more intuitive user experience.
• Previously, the search bar for policy settings only returned matches based on the setting name. Starting with this release, the search bar also returns matches based on relevance. For example, typing “battery” now returns the Always on display setting, because enabling that setting causes the device battery to drain faster.

See also

• Knox Manage 25.04 release notes (original console)
• Knox Manage 25.04 developer release notes