Configuring Samsung Knox device enrollment

Prerequisites:

  • Before configuring Samsung Knox: Request access to Samsung Knox Mobile Enrollment and purchase devices from an authorized Samsung device reseller.
  • Before you can enroll devices into Samsung Knox Mobile Enrollment: Create a profile to meet your specific device enrollment requirements.

NOTE: Installing apps from the Samsung app store is not supported at this time. Attempting to install a Samsung system app, such as the email app, may fail if the app is on the block list. Ensure that only those apps that you do not want the users to install are on the block list.

Create a new profile

  1. Go to the Samsung Knox portal, sign in and click Knox Mobile Enrollment console.
  2. Under Knox Mobile Enrollment, click Profiles from the navigation menu.
  3. Click Create Profile.

Configure Android Enterprise profile detail

  1. Select Android Enterprise as the profile type.
  2. Enter a profile name and optional description.
  3. For Pick your MDM, select Other.
  4. KACE Cloud supports two Android Samsung Knox enrollment methods:
    • To use the KACE Cloud agent APK (Android EMM), type the following: https://play.google.com/managed/downloadManagingApp?identifier=kace
    • To use the Android Management API (AMAPI) APK, type the following: https://play.google.com/managed/downloadManagingApp?identifier=setup
  5. Leave the MDM Server URI field blank.
  6. Click Continue.

Configure device owner profile settings

  1. For MDM Configuration, use the appropriate set of the following values, as applicable:

    Android KACE Cloud Enrollments (Android EMM), Fully Managed devices:

    {

    "subdomain": "<your_subdomain>",

    "region": "",

    "silent_authentication": false,

    "identity_cert": "<your_certificate>"

    }

    Android KACE Cloud Enrollments (Android EMM), COPE devices:

    {

    "subdomain": "<your_subdomain>",

    "region": "",

    "cope_provisioning_enabled": true,

    "silent_authentication": false,

    "identity_cert": "<your_certificate>"

    }

    Where:

    • <your_subdomain> and <your_certificate> contain the appropriate values. You can copy them from the KACE Cloud Samsung Knox Enrollment page, available under Settings > Android Settings > Samsung Knox Enrollment.
    • The value of the region parameter depends on your location. If you are based in the US, leave it blank. For west Europe, set it to "westeurope".

    • To enable silent authentication, set the silent_authentication parameter to true. For details, see Android EMM: Configure silent authentication.

    Android Management API enrollments (AMAPI), Fully Managed and COPE devices:

    {

    "com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN": "<token>"

    }

    Where:

    • <token> is the enrollment token. You can copy this value from the KACE Cloud Settings > Android Settings > Samsung Knox Enrollment page. Ensure you obtain this value from the applicable section (Device owner profile settings or COPE settings).
  2. Set the remaining fields as applicable. For instructions, see your Samsung Knox documentation.
  3. In the Device Settings section, select one of the following options, as applicable:
    • Disable system applications
    • Leave all system apps enabled

    NOTE: Selecting Leave all system apps enabled causes all system apps to be enabled on the device. Ensure this setting is properly configured.

  4. Click Save.

For complete information, visit the Samsung Knox documentation.