Samsung Knox Mobile Enrollment
LogMeIn Resolve MDM is compatible with Samsung Knox Mobile Enrollment, which provides IT administrators a streamlined way to enroll Samsung devices in an MDM/EMM solution without having to manually enroll and configure each device. Samsung Knox Mobile Enrollment can be used to enroll devices in Fully managed and Fully managed with work profile modes.
Knox Mobile Enrollment is primarily used for enrolling devices purchased from an official reseller. However, Samsung also offers the possibility of adding devices that were not purchased from a Knox Mobile Enrollment-capable reseller to the program.
For modern Samsung devices, zero-touch enrollment is also available.
Benefits of using Samsung Knox Mobile Enrollment
- Simplified initial setup and enrollment of Samsung devices, especially when a company requires bulk device enrollment with little configuration variance amongst the devices deployed.
- Easy device enrollment for device users because they're not required to do anything. Once they receive the device and power it on, the device automatically configures itself according to the settings provisioned by the enterprise via LogMeIn Resolve MDM.
- Devices cannot be tampered with. Even if a device enrolled through Knox Mobile Enrollment is factory reset, the Miradore client will be re-installed once the device is powered on and connected to a wireless network again.
Requirements for Knox Mobile Enrollment
To be eligible for Samsung Knox Mobile Enrollment, ensure the following:
- The Knox Configure portal is available in your country
- You have registered for a Samsung Knox Portal account
- You have created a Samsung Account
- Your devices support Samsung Knox
Samsung Knox Mobile Enrollment feature availability on different Knox versions
Feature | Knox version |
---|---|
Knox Mobile Enrollment via NFC | 2.4 or later |
Out-of-box enrollment via Wi-Fi | 2.4 or later |
Out-of-box enrollment via cellular data | 2.6 or later |
Factory reset protection | 2.7.1 or later |
Bypassing Skip Setup Wizard | 2.7.1 or later |
Knox Configure and Knox Mobile Enrollment same device compatibility | 2.8 or later |
Knox Mobile Enrollment with Device Owner mode support | 2.8 or later |
For detailed information on using Knox Mobile Enrollment, see Samsung's admin guide.
Connect Samsung Knox Mobile Enrollment with LogMeIn Resolve MDM
Results: The MDM profile is assigned to the selected devices, which are ready for enrollment.
Enrolling the devices
After assigning the MDM profile to a device, the enrollment process can be started by turning on the device and following the steps of the setup wizard. For a successful enrollment process, ensure the following:
- If the device was previously used, it must be factory reset before it can be enrolled.
- The device must have access to the internet via Wi-Fi or an unlocked SIM card with available mobile data.
Adding devices not purchased from a reseller to the Knox Mobile Enrollment program
Samsung allows companies to add their devices to the program even if the device was not purchased from a Knox Mobile Enrollment-capable reseller, so that these devices can also benefit from zero-touch enrollment, locking the device to a company account, and forced enrollment.
Adding such devices to the Knox Mobile Enrollment program is done by using a host device with the Knox Deployment application installed and the device to be enrolled. For detailed information and instructions, see Samsung's documentation.