Setup Knox Mobile Enrollment (KME)

Knox Mobile Enrollment” is a simplified enrollment process for Samsung devices. On first start-up, the devices check whether they have a specific configuration. If so, the fully managed device configuration process is launched, the right MDM is downloaded (here TinyMDM) and the device configuration is completed.

Prerequisites: having both a KME account and a TinyMDM account with a policy created. Learn more on how to create a policy

If you don’t have a KME account, you can create one here. The reseller will assign Samsung devices to your account, you only need to provide your KME client number to the reseller.

Memo: you can also use Knox Deployment application to report other devices via Bluetooth, NFC or Wi-Fi.

  • In Profiles, click on Actions and Create Profile.
  • Enter your MDM profile name along with info about your company. Click on Next.
  • Select TinyMDM (Validated Partner) in the list. Click on Next.
  • In Customer JSON Data (as defined by MDM):

1. If you want to enroll your devices in Fully Managed (or Kiosk mode), enter the text below (replace XXXXXXXXXXXXXXXX by the TinyMDM policy’s ID that you want to apply on the devices. This information is visible in your TinyMDM account, Policies tab). Be careful of the case-sensitiveness.

{"enrollmentId":"XXXXXXXXXXXXXXXX"}

2. If you want to enroll your devices in WPCO mode (compatible only from Android 11 and newer versions), enter the text below (replace XXXXXXXXXXXXXXXX by the TinyMDM policy’s ID that you want to apply on the devices. This information is visible in your TinyMDM account, Policies tab). Be careful of the case-sensitiveness.

{"enrollmentId":"XXXXXXXXXX", "provisioningMode":"work_profile_on_fully_managed"}
  • In System apps, click on Disable system applications (by default). You will later be able to activate them one by one from your TinyMDM console. Click on Next.
  • Review all the info you entered and click on Create.

In Devices tab, select the devices that you want to configure and click on Download devices as CSV to create the list of devices.

Open and modify the file in a Microsoft Excel or Google Sheets format. In the first column, the devices IDs should appear (IMEI or serial numbers), with one line per device. In the second column, type in the user ID (email).

Delete content of other columns. Make sure not to add any header. Do not leave any blank line.

The CSV file should look like this:

Save it as a CSV file (Files > Save as…), then in Save as type line, replace Excel document by .CSV file (comma).

  •  To apply the TinyMDM configuration to your devices, in the Devices tab click on Bulk Actions (on the top line).
  • Then, click on Assign User Credentials and Same Profile.
  • Import your CSV file (all devices must pre-exist in the inventory).
  • Select the desired MDM profile and add tags (not mandatory).
  • Click on Submit.

Devices are managed directly straight out of the box. On first startup, the devices check whether a specific configuration has been assigned to them, then download TinyMDM application and complete the configuration. See the steps below:

Choose the language
Device is already all setup