Knox Mobile Enrollment

Knox Mobile Enrollment is an enrollment method provided that streamlines the enrollment of Samsung devices into MDM solutions. It allows admins to enroll the devices out-of-the-box by performing a one time setup. In addition to automating the enrollment, the apps, documents and profiles will be distributed to the device upon enrollment to simplify device provisioning.

Only devices purchased from authorised resellers can be enrolled using Knox Mobile Enrollment.

We have made your job simpler!

Learn how to perform out-of-the-box Samsung Knox Mobile Enrollment using MDM, in under 5 minutes through this demo video.

There are 4 stages in Knox Device Enrollment, they are:  

Creating Knox Account

A Knox account is required to leverage Samsung Knox enrollment for enrolling Samsung devices into MDM.  To create a Knox account, refer this.

Integrating with MDM

After creating the Knox enrollment, follow the steps given below to integrate MDM with the Knox enrollment portal to initiate enrollment

  1. On the Samsung Knox Enrollment portal, login with your Knox account credentials.
  2. Click on MDM Profiles and select Create Profile.
  3. Select Device Owner as the profile type. This will ensure the devices enrolled using Knox Enrollment are automatically provisioned as Device Owner. Device Admin is the lgeacy management method and hence it is recommended to select Device Owner as the profile type.
  4. Specify the name of the profile, select ManageEngine as the MDM and specify the server to which the devices should be added upon enrollment under MDM Server URI. The MDM Agent APK is pre-filled and this will be used to automatically install the ManageEngine MDM app after enrollment.
  5. Enter the Custom JSON data available on the MDM server. It can be found by navigating to Enrollment -> Knox Mobile Enrollment. Copy the text available beside Custom JSON data and paste in on the Knox portal.
  6. You can also enable Dual DAR for improved security. Additional licenses must be purchased to enable Dual DAR
  7. Under Device Settings you can choose whether you want the system apps on the devices to be enabled by default or disable them based on your company's compliance policies. NOTE: MDM by default disabled a few system apps upon enrollment.
  8. Click on Create to complete the integration.

Adding Devices

Admins can automate the device upload by entering the Reseller Details and provice the resellers with their Customer ID. This will allow the resellers to assign the devices purchased from them directly to the organization's account. Follow the steps given below to add the reseller details:

  1. Click on the Resellers tab on the Knox Mobile Enrollment portal.
  2. Click on Register Reseller and enter the Reseller ID. Click on Look Up to select the reseller associated to the specified Reseller ID.
  3. Any devices added by these resellers need to be approved. You can choose to automatically approve and assign specific profiles to these pages by checking the Automatically approve all devices uploaded by this reseller and selecting the required profile.
  4. Click on Save to save the reseller details and configured settings

If you have not selected auto-approval of devices, the devices will be available in Device -> Uploads. You can download the device list as a CSV file and specify the profiles to be associated to the devices and upload it back on the Knox Mobile Enrollment console.

User Assignment

After the devices are added to the MDM server, they'll be available in Enrollment -> Knox Mobile Enrollment. Admins can complete the enrollment by assigning hese devices to users either individually or in bulk using the CSV file.

Copyright © 2020, ZOHO Corp. All Rights Reserved.
ManageEngine