How to enroll your device with Samsung Knox Mobile Enrollment (KME)?

Samsung Knox Mobile Enrollment (KME) enables IT administrators to quickly enroll numerous corporate-owned devices without manual configuration. Users simply need to power on the devices and connect them to the network to enroll in AirDroid Business.

With Samsung KME, you can take advantage of the Managed Google Play Store feature within AMS. During device enrollment, you have the option to utilize the "Add from Managed Google Play Store" feature in the Provisioning Template.

Requirements:

• Samsung Knox device running Knox version 3.2 and above.
• A Samsung Account 
• A Knox Mobile Enrollment (KME) Portal account
• A KME supported browser, such as Chrome, Edge and Firefox
• The necessary firewall exemptions needed to access beyond your local and protected network domain and establish a secure connection with the Knox Mobile Enrollment server

For more details of Samsung devices supported by Knox Mobile Enrollment (KME), please refer to this page.

Note: To configure your devices on your Samsung KME portal account, please contact your reseller for assistance. You can refer to this website for detailed information on Samsung KME reseller partners.

Before enrolling the device with Samsung KME, you will need:

• Bind with your Gsuite/company email. If you have not bind with your Gsuite/company email, please refer to this article to finish the process first.
• Log in to your Samsung account. If you have not created a Samsung account for your work email, please refer to this article.
• Log in to your Samsung Knox Portal account. If you have not created a Samsung Knox Portal account, please refer to this article. Note: When selecting a Knox solution, please select Knox Suite for Knox Mobile Enrollment and create the account as instructed.

To enroll your device with Samsung KME, please refer to the following instructions.

1. Sign in the Samsung Knox Portal account > select Knox Mobile Enrollment > Profiles > Actions > Create profile.

2. Complete the basic info as instructed and tap NEXT.

3. For EMM info, please select Other on Pick your EMM and enter "https://play.google.com/managed/downloadManagingApp?identifier=setup" on EMM agent APK > tap Next when the verification is completed.

4. Log in to the Admin Console > Devices > Device Enrollment > Samsung KME > Select the provisioning template > tap the Copy icon on the Configuration.

Please make sure that you have finished setting the Provisioning Templates. If you have not completed the Provisioning Templates settings, please refer to this article to complete your Provisioning Templates settings.

5. Go back to the Samsung Knox Portal and paste the configuration token on the DPC extras and select any additional settings if necessary. Then, tap Next to proceed.

There are some additional settings for the Knox Mobile Enrollment (KME) and you may select the options based on your scenario.

We have highlighted some common settings:

• QR code for enrollment - Allow you to enroll Samsung devices with QR code and connect to specified Wi-Fi network.

• System apps - Select whether your Samsung devices can pre-install system apps during enrollment, which may vary on the Android OS version and carrier.

• Enrollment screens - Select whether to skip different setup screens during enrollment.

• Privacy Policy, EULAs and Terms of Service - Add End User License Agreements, Terms of Service, or other user agreements that users must acknowledge before using the device.

• Root and intermediate certificates - Add a root or intermediate certificate to install on devices during enrollment.

For more details of Configure device settings for the KME, please refer to this article.

6. Review the profile and tap Create to proceed.

7. Go back to Devices > select the device you wish to enroll > select Configure devices > assign the profile you created and Save.

8. Power it on your device and connect it to the network, and please follow the instructions to complete the initialization process.

If your device is already in use, please go to the settings on the device to factory reset your device.

Note: If necessary, back up or sync all necessary app data before factory reset.

9. After installation, find and open Biz Daemon on the device, and then grant the Accessibility to complete the automatic granting process of all permissions.

After these steps, the Biz Daemon should work to align with your needs.

Just a reminder, the Biz Daemon layout, and options might be different from the screenshots in the article, depending on the Android System versions and the Samsung device models.

If you need additional Samsung Knox policy restrictions for your Samsung devices, please refer to this article.