How to enroll your device with Samsung Knox Mobile Enrollment (KME)?

Samsung Knox Mobile Enrollment (KME) enables IT administrators to quickly enroll numerous corporate-owned devices without manual configuration. Users simply need to power on the devices and connect them to the network to enroll in AirDroid Business.

With Samsung KME, you can take advantage of the Managed Google Play Store feature within AMS. During device enrollment, you have the option to utilize the "Add from Managed Google Play Store" feature in the Provisioning Template.

Requirements:

• Samsung devices provided by KME supported reseller
• Knox version 3.2 and above
  
• A Samsung Account 
• A Knox Mobile Enrollment (KME) Portal account
• A KME supported browser, such as Chrome, Edge and Firefox
• The necessary firewall exemptions needed to access beyond your local and protected network domain and establish a secure connection with the Knox Mobile Enrollment server

For more details of Samsung devices supported by Knox Mobile Enrollment (KME), please refer to this page.

Note: To configure your devices on your Samsung KME portal account, please contact your reseller for assistance. You can refer to this website for detailed information on Samsung KME reseller partners.

Before enrolling, you will need:

• Make sure your reseller upload the device list to the Samsung KME portal.
• Bind with your Gsuite/company email. Please refer to this article for more details.
• Log in to or create your Samsung account. Please refer to this article.
• Log in to or create your Samsung Knox Portal account. Please refer to this article. Note: When selecting a Knox solution, please select Knox Suite for Knox Mobile Enrollment and create the account as instructed.

To enroll your device with Samsung KME, please refer to the following instructions.

1. Sign in the Samsung Knox Portal account > select Knox Mobile Enrollment > Profiles > Actions > Create profile.

2. Complete the basic info as instructed and tap NEXT.

3. For EMM info, please select Other on Pick your EMM and enter "https://play.google.com/managed/downloadManagingApp?identifier=setup" on EMM agent APK > tap Next when the verification is completed.

4. Log in to the Admin Console > Devices > Device Enrollment > Samsung KME > Select the provisioning template > tap the Copy icon on the Configuration.

Please make sure that you have finished setting the Provisioning Templates. Please refer to this article for details.

5. Go back to the Samsung Knox Portal and paste the configuration token on the DPC extras and select any additional settings if necessary. Then, tap Next to proceed.

There are some additional settings for the Knox Mobile Enrollment (KME) and you may select the options based on your scenario.

We have highlighted some common settings:

• System apps: Select whether your Samsung devices can pre-install system apps during enrollment, which may vary on the Android OS version and carrier.

• Enrollment screens: Select whether to skip different setup screens during enrollment.

• Privacy Policy, EULAs and Terms of Service: Add End User License Agreements, Terms of Service, or other user agreements that users must acknowledge before using the device.

• Root and intermediate certificates: Add a root or intermediate certificate to install on devices during enrollment.

For more details of Configure device settings for the KME, please refer to this article.

6. Review the profile and tap Create to proceed.

7. Go back to Devices > select the device you wish to enroll > select Configure devices > assign the profile you created and Save.

Note: if the devices you are expecting to see here are missing, please contact your reseller and they will update the list for you.

8. Power it on your device and connect it to the network and the enrollment process should start automatically. Please follow the instructions on screen to complete the process.

If your device is already in use, please go to the settings on the device to factory reset your device.

Note: If necessary, back up or sync all necessary app data before factory reset.

9. After installation, find and open Biz Daemon on the device, and then grant the Accessibility to start the automatic enrollment process.

Just a reminder, the Biz Daemon layout, and options might be different from the screenshots in the article, depending on the Android System versions and the Samsung device models.

If you need additional Samsung Knox policy restrictions for your Samsung devices, please refer to this article.