LogMeIn support sites no longer support Microsoft's Internet Explorer (IE) browser. Please use a supported browser to ensure all features perform as they should (Chrome / FireFox / Edge).

The GoTo support site no longer supports Safari 15. Please upgrade your browser to Safari 16 (or newer) or switch to a supported browser such as Google Chrome, Mozilla Firefox, or Microsoft Edge.

Simply secure and manage all devices. Discover LogMeIn Resolve Mobile Device Management.

We are currently experiencing an unplanned outage for this product.
  • Support
  • Products

    Explore support by product

    GoTo Connect

    All-in-one phone, meeting and messaging software

    GoTo Meeting

    Video and audio meeting software

    GoTo Webinar

    All-in-one webinar and virtual events software

    GoTo Room

    Conference room hardware

    GoTo Training

    Online training software

    OpenVoice

    Audio conferencing software

    Grasshopper

    Lightweight virtual phone system

    join.me

    Video conferencing software

    LogMeIn Resolve

    IT management & support

    LogMeIn Resolve MDM

    Mobile device management

    LogMeIn Pro

    Remote device access

    LogMeIn Central

    Remote monitoring & management

    LogMeIn Rescue

    Remote IT support

    GoToMyPC

    Remote desktop access

    GoToAssist

    Remote support software

    Hamachi

    Hosted VPN service

    RemotelyAnywhere

    On-prem remote access solution
  • Community
  • Service Status
  • Try the improved My Cases portal

    Easily manage your ticket, track its status, contact us from an existing case, and more.

    Sign in to try
  • Language selector icon Language selector icon
    • English
    • français
    • italiano
    • Deutsch
    • español
    • português
    • Nederlands
  • Contact Support
  • Service Status
  • User Avatar User Avatar
    • Support
    • Contact Support
    • Browse Products
    • Service Status
    • Community
    • Sign in
    • User Avatar
    • My Account
    • Personal Info
    • Sign In & Security
    • My Cases
    • Billing Center
    • https://link.goto.com/myaccount-billing
    • My GoTo Connect
    • My Meetings
    • My Webinars
    • My Trainings
    • My Conferences
    • My Resolutions
    • My Mobile Devices
    • My Sessions
    • My Sessions
    • My Incidents
    • Sign out
  • Device Platforms
  • Android
  • Device Enrollment
product logo
Back button image Back
Back button image
product logo

Samsung Knox Mobile Enrollment

LogMeIn Resolve MDM is compatible with Samsung Knox Mobile Enrollment, which provides IT administrators a streamlined way to enroll Samsung devices in an MDM/EMM solution without having to manually enroll and configure each device. Samsung Knox Mobile Enrollment can be used to enroll devices in Fully managed and Fully managed with work profile modes.

Knox Mobile Enrollment is primarily used for enrolling devices purchased from an official reseller. However, Samsung also offers the possibility of adding devices that were not purchased from a Knox Mobile Enrollment-capable reseller to the program.

For modern Samsung devices, zero-touch enrollment is also available.

Benefits of using Samsung Knox Mobile Enrollment

Using Knox Mobile Enrollment has the following benefits:
  • Simplified initial setup and enrollment of Samsung devices, especially when a company requires bulk device enrollment with little configuration variance amongst the devices deployed.
  • Easy device enrollment for device users because they're not required to do anything. Once they receive the device and power it on, the device automatically configures itself according to the settings provisioned by the enterprise via LogMeIn Resolve MDM.
  • Devices cannot be tampered with. Even if a device enrolled through Knox Mobile Enrollment is factory reset, the Miradore client will be re-installed once the device is powered on and connected to a wireless network again.

Requirements for Knox Mobile Enrollment

To be eligible for Samsung Knox Mobile Enrollment, ensure the following:

  • The Knox Configure portal is available in your country
  • You have registered for a Samsung Knox Portal account
  • You have created a Samsung Account
  • Your devices support Samsung Knox

Samsung Knox Mobile Enrollment feature availability on different Knox versions

Feature Knox version
Knox Mobile Enrollment via NFC 2.4 or later
Out-of-box enrollment via Wi-Fi 2.4 or later
Out-of-box enrollment via cellular data 2.6 or later
Factory reset protection 2.7.1 or later
Bypassing Skip Setup Wizard 2.7.1 or later
Knox Configure and Knox Mobile Enrollment same device compatibility 2.8 or later
Knox Mobile Enrollment with Device Owner mode support 2.8 or later

For detailed information on using Knox Mobile Enrollment, see Samsung's admin guide.

Connect Samsung Knox Mobile Enrollment with LogMeIn Resolve MDM

To connect Knox Mobile Enrollment with your LogMeIn Resolve MDM site, do the following:
  1. In LogMeIn Resolve MDM, navigate to Enrollment > Android Enterprise.
  2. Select Actions > Download Knox Mobile Enrollment configuration at the top of the page to download the JSON template needed to create an MDM profile in the Samsung Knox Enrollment portal.
  3. Sign in to your Samsung account.
  4. Select MDM Profiles, then select Create profile.

    Creating an MDM profile in Samsung Knox Mobile Enrollment portal.
    Creating an MDM profile in the Samsung Knox Mobile Enrollment portal
  5. Select Android Enterprise.
  6. Enter the following information:
    • Profile name: Enter a name for the profile. This can be, for example, the name of the organization whose devices are managed.
    • MDM information: Select Force Device Owner enrollment.
    • Pick your MDM: Select Miradore.

    Android Enterprise profile details in Miradore.
    Android Enterprise profile details
    Note: Do not modify the MDM Agent APK and MDM Server URI fields.
  7. Select Continue.
  8. Define the Android Enterprise profile settings as follows:
    • Custom JSON Data (as defined by MDM): Open the JSON file you downloaded from LogMeIn Resolve MDM in a text editor of your choice, then copy its contents into this field.
    • System applications:
      • Disable all system applications: Select this checkbox to disable all system applications, making them unavailable within the Device Owner mode profile.
      • Leave all system apps enabled: Select this checkbox to ensure all pre-installed system apps are enabled and available within the Device Owner mode profile. If this option is not selected, only a limited set of default system apps (My Files, Contacts, Google Play) are displayed in the device's apps tray. Systems apps reside within the device's read-only /system/app folder and cannot be installed or removed by the device user.
    • Company name: Your organization's name. This name will be shown to device users at the time of device enrollment.

    Android Enterprise profile settings
    Android enterprise profile settings
    Important: In order to avoid errors, ensure that Dual DAR is not enabled.
  9. Assign the profile to your devices from the Devices menu.

Results: The MDM profile is assigned to the selected devices, which are ready for enrollment.

Note: The MDM profile can be automatically assigned to devices bought from selected resellers through the Resellers menu of the Knox Mobile Enrollment portal. This feature is especially useful if you want to enroll multiple devices purchased from specific resellers to the same LogMeIn Resolve MDM site.

Enrolling the devices

After assigning the MDM profile to a device, the enrollment process can be started by turning on the device and following the steps of the setup wizard. For a successful enrollment process, ensure the following:

  • If the device was previously used, it must be factory reset before it can be enrolled.
  • The device must have access to the internet via Wi-Fi or an unlocked SIM card with available mobile data.

Adding devices not purchased from a reseller to the Knox Mobile Enrollment program

Samsung allows companies to add their devices to the program even if the device was not purchased from a Knox Mobile Enrollment-capable reseller, so that these devices can also benefit from zero-touch enrollment, locking the device to a company account, and forced enrollment.

Adding such devices to the Knox Mobile Enrollment program is done by using a host device with the Knox Deployment application installed and the device to be enrolled. For detailed information and instructions, see Samsung's documentation.

Article last updated: 30 April, 2025

Need help?

Contact icon Contact support
Manage Cases icon Manage cases
Video icon Watch videos
  • Language selector icon Language selector icon
    • English
    • français
    • italiano
    • Deutsch
    • español
    • português
    • Nederlands
  • About Us
  • Terms of Service
  • Privacy Policy
  • Trademark
  • Do Not Sell or Share My Personal Info
  • Browse Products
  • Copyright © 2025 GoTo Group, Inc. All rights reserved

Collaboration Products

GoTo Connect

GoTo Meeting

GoTo Webinar

GoTo Training

join.me

Grasshopper

OpenVoice

Remote Solutions Products

GoTo Resolve

Rescue

GoToAssist

Access Products

Pro

Central

GoToMyPC