Samsung Knox Mobile Enrollment (KME) is an enrollment method offered by Samsung for its devices. Upon first boot or factory reset, KME forces Samsung devices to enroll into Esper. Follow the steps below to onboard a device using KME.
If you used Knox Mobile Enrollment (KME) previously and are having problems provisioning your devices:
- You may need to select 'Esper MDM' from the MDM dropdown as described in Step 5 of this guide.
- Do not combine KME with other methods such as 6-tap QR code provisioning.
Before KME Provisioning
1. Remove any assigned profiles from Knox.
2. Factory reset devices that were assigned previously.
Step 1: Navigate and log in to the Knox Mobile Enrollment (KME) portal. Then add your devices to the Knox portal.
Step 2: Select the Knox Mobile Enrollment Portal to launch the Console.
You will be taken to the device page, where you can see all the devices added to your KME portal by the reseller.
Note: If you don’t see a device here, contact your reseller and get the devices added to the KME portal.
Step 3: Select Profile from the left menu. Click Create Profile.
Step 4: Select Android Enterprise.
Step 5: Fill in the Profile details. Enter the Profile name and optional description.
In the Pick your EMM dropdown, select Esper MDM.
Then click Continue.
Step 6: You will be taken to the Android enterprise profile settings screen.
Click on the Blueprint tab.
Optionally select a group.
Then select the blueprint.
JSON data will appear. Copy the data.
Templates
To enter the Custom JSON data for a template, log in to the Esper Console and navigate to the Provisioning Methods section. Click on the QR code icon associated with any group and download the config. Choose Samsung Knox Mobile Enrollment as the Provisioning Method.
Go to the Template tab and then choose the template.
JSON data will appear. Copy the data.
Enter the Custom JSON data. For Legacy users, go to the Template's Experience Devices & Groups page. Click on the QR code icon associated with any group and download the config.
json
{
"V":"0",
"EID":"Enterprise ID",
"E":"Tenant name",
"P":"Q",
"OE":true,
"G":"Group ID",
"T":"Template ID",
"AT":"API key"
}Back in your Knox profile, under device settings > System applications:
- Paste the JSON from the Esper console in the Custom JSON data (as defined by EMM) field.
- Select Leave all system apps enabled.
- Enter the company name and click Create.
You will see the created profile on the screen.
Click on the profile name to edit and save the created profile.
Step 7: In the Samsung Knox portal, click on Actions and choose Configure devices from the drop-down.
Step 8: Select the profile you just created from the drop-down and click Save.
The profile will be added to the device and displayed on the device screen.
When you factory reset the device, you will go through the Android standard setup process on the device. If you connect to the internet during this setup process, the Knox Portal will find your device and automatically start the onboarding process after a few license/onboarding prompts.