IBM Security MaaS360

 View Only
  • 1.  Failed to activate Samsung Knox License for Work Profile management

    Posted Mon June 15, 2020 09:35 AM
    Hi!

    I am currently testing the migration from Android Device Admin to Android Enterprise Profile Owner mode on a Samsung A20.

    Due to problems getting the Samsung email app in the Work Profile configured through ActiveSync, I have removed the work profile, re-enrolled and again migrated the same device many times.

    I am now getting the following error message in the 'Validating Samsung Enterprise license' phase of the migration:
    Failed to activate Samsung Knox License for Work Profile management

    I suspect this has something to do with the fact that I have run multiple tests on the device.

    Any ideas what is causing this and how to get out of it?

    Thanks!

    Arne

    ------------------------------
    Arne Halsteinslid
    ------------------------------


  • 2.  RE: Failed to activate Samsung Knox License for Work Profile management

    Posted Tue June 16, 2020 04:13 AM
    Quick update on this issue.

    Control_agent_system_logs.txt says:
    06-16 09:36:24.755 I/MaaS360 (27276): main | cic | SKL error code received : 201
    06-16 09:36:24.755 I/MaaS360 (27276): main | cic | SKL Type : Activation
    06-16 09:36:24.755 E/MaaS360 (27276): main | cic | SKL Activation failed with error code : 201

    Looks like I must contact support on this one.

    ------------------------------
    Arne Halsteinslid
    ------------------------------



  • 3.  RE: Failed to activate Samsung Knox License for Work Profile management

    Posted Tue June 16, 2020 04:49 AM

    You might find the link useful for KNOX licenses :

    https://www.ibm.com/support/pages/skl-and-klm-license-management



    ------------------------------
    Sam D'Silva
    ------------------------------



  • 4.  RE: Failed to activate Samsung Knox License for Work Profile management

    Posted Tue June 16, 2020 05:02 AM
    I have no idea what the SKL license key is, and SKL/KLM license management is not what I am trying to implement.
    I assume MaaS360 is handling this during the migration to AE Profile Owner and for some reason now running into problems.
    I have opened a support ticket.

    ------------------------------
    Arne Halsteinslid
    ------------------------------



  • 5.  RE: Failed to activate Samsung Knox License for Work Profile management

    Posted Tue June 16, 2020 12:07 PM

    Hi Arne,

    Can you provide a couple of details?

    1) Is this error a recent problem or has it been since the start of Device Admin -> Profile Owner migration tests?

    2) What is the version of the MaaS360 app that you are using for the tests?

    The Samsung Knox License Management was in Beta mode so far. The MaaS360 Android app version 7.10 is the one that has complete support for it.

    We have a Beta release for v7.10 later in the day today/early tomorrow depending on your timezone. I would recommend signing up for Beta (if you haven't already) and trying it out.

    Also, if immediate tests with v7.10 Beta aren't feasible, somebody from the customer support team will be able to turn off the SKL customer property for your account and the migration shouldn't have any difficulties.



    ------------------------------
    Anish Kothari
    Software Developer - Android,
    IBM MaaS3360
    ------------------------------



  • 6.  RE: Failed to activate Samsung Knox License for Work Profile management

    Posted Wed June 17, 2020 01:41 AM
    Hi Anish,

    Concerning your questions:

    1) Is this error a recent problem or has it been since the start of Device Admin -> Profile Owner migration tests?
    --> This error is a recent problem. I was having difficulties getting the Samsung email app set up through ActiveSync in the Work Profile, while also still experimenting and learning about the migration process. I therefore ran several rounds of tests where the same device was enrolled in Device Admin mode, successfully migrated to Profile Owner (except for the ActiveSync problem), and finally the Work Profile was removed using 'Remove Work Profile'.

    2) What is the version of the MaaS360 app that you are using for the tests?
    --> I am using the one currently available in Google Play, it is v7.05.

    I have opened support ticket TS003827655 and provided a full set of logs, awaiting their response.


    ------------------------------
    Arne Halsteinslid
    ------------------------------



  • 7.  RE: Failed to activate Samsung Knox License for Work Profile management

    Posted Thu June 18, 2020 02:11 AM
    Edited by Anish Kothari Thu June 18, 2020 02:15 AM

    Hi Arne,

    Thanks for the update.

    Just FYI, the v7.10 Beta of the MaaS360 app is now live which has full production support for the Samsung Knox License Management.

    I would once again suggest you to try that on a test device by enrolling in the beta program.

    With this update, there shouldn't be a license activation stage during the migration process from Device Admin -> AE Profile Owner for Samsung devices which will make your tests easier.

    In the meanwhile, I will discuss the ticket TS003827655 with our customer support team.

    Regards,



    ------------------------------
    Anish Kothari
    Software Developer - Android,
    IBM MaaS360
    ------------------------------



  • 8.  RE: Failed to activate Samsung Knox License for Work Profile management

    Posted Fri June 19, 2020 03:42 AM
    Hi Anish,

    I enrolled in the beta program and tested with the v7.10 agent as you recommended, problem solved!

    I no longer observed a 'Validating Samsung Enterprise license' phase, as you said.

    Moving back to my original issue getting the AE ActiveSync config for the Samsung mail app installed now.

    Many thanks!

    Best regards,
    Arne

    ------------------------------
    Arne Halsteinslid
    ------------------------------



  • 9.  RE: Failed to activate Samsung Knox License for Work Profile management

    Posted Sun June 21, 2020 11:07 PM

    Hi Arne,

    Good to hear that v7.10 has solved the problem!

    As for the AE Active Sync configuration, just wanted to let you know that we only support Gmail through policy configuration. For any other email clients like Samsung email/Outlook, a manual setup would be needed.

    Do let me know if there's anything where I can be of assistance.

    Regards,



    ------------------------------
    Anish Kothari
    Software Developer - Android,
    IBM MaaS360
    ------------------------------