Adding devices in KNOX Mobile Enrollment

Devices can be added in the KNOX Mobile Enrollment (KME) console in the following ways:

• The vendor automatically adds devices in the KME console after the devices are purchased.

  Select this method if your organization is working with an official vendor of Samsung devices.

• The administrator installs the KNOX Deployment app from Google Play on their mobile device and migrates the KNOX MDM profile to users' devices through Bluetooth or NFC (Near Field Communication). After deployment of the KNOX MDM profile, the device will be automatically added in the KME console.

  Select this method if the Samsung devices were not purchased from an official vendor.

Adding a device through the vendor

An official vendor of Samsung devices is registered in Samsung KNOX. For the list of official vendors, visit the Samsung technical support website. The vendor automatically adds devices in the KME console for your Samsung account immediately after the devices are purchased. To have the devices added by the vendor, you must register the vendor in the KME console for your Samsung account. You will need a reseller ID to add the vendor of Samsung devices in the KME console. To receive the reseller ID, you must send a request to the vendor. In the request, specify your KNOX client ID.

To view your KNOX client ID:

1. Sign in to the Samsung KNOX console → KNOX Mobile Enrollment.
2. Select the Resellers section.
3. Your ID is displayed in the KNOX client ID field.

After you receive a response from the vendor with the reseller ID, register the vendor in the KME console. Prior to registering the vendor, you can create a KNOX MDM profile so that the profile can be automatically deployed when adding new devices.

To register an official vendor in the KME console:

1. Sign in to the Samsung KNOX console → KNOX Mobile Enrollment.
2. Select the Resellers section.
3. Click the Register reseller button.

   This opens a window for registering the device vendor.

4. In the Reseller ID field, enter the ID received from the official vendor of Samsung devices.
5. If you created a KNOX MDM profile, select the KNOX MDM profile in the vendor registration window.

   When you add new devices, the KNOX MDM profile is automatically installed.

6. In the Preferred download confirmation method list, select a method for confirming the addition of a device for a vendor.
   • All downloads must be confirmed. When a device is added by the vendor, you will need to confirm the operation.
   • Automatically confirm all downloads of this reseller. Devices of the vendor will be automatically added in the KME console.
7. Click OK.

The vendor of Samsung devices will be added to the list of vendors in the KME console.

After new devices are purchased from the official vendor, the Kaspersky Endpoint Security for Android app will be automatically installed to the devices after the devices are connected to the internet. For more details about working with KNOX Mobile Enrollment, please refer to the KNOX Mobile Enrollment User Guide. If you already have a list of devices in the KME console, add the KNOX MDM profile with the KNOX MDM app to the device.

To deliver a KNOX MDM profile to devices:

1. Sign in to the Samsung KNOX console → KNOX Mobile Enrollment.
2. Select Devices → All devices.
3. Select the devices on which you want to install the KNOX MDM profile.
4. Click the Configure button.

   The Device info window opens.

5. In the MDM profile list, select the KNOX MDM profile with the Kaspersky Endpoint Security for Android app.
6. In the Tags field, enter tags for grouping and labeling devices, and for search optimization in the KME console.
7. Enter the user account credentials of the device into the User ID and Password fields.

   Account credentials are required for receiving a general certificate. The user ID and password must match the user account credentials in Kaspersky Security Center (Full name and Password in user account properties).

8. Select the KNOX MDM profile for the remaining devices.
9. Click the Save button.

After the device is connected to the internet, the user will be prompted to install the KNOX MDM profile.

Adding a device through the KNOX Deployment app

If you did not purchase your Samsung device from an official vendor, you can add the device to KNOX Mobile Enrollment through Bluetooth or NFC. This will require the administrator's mobile device that will be used to deliver KNOX MDM profiles to users' mobile devices.

To add devices using the KNOX Deployment app, the following conditions must be met:

• Depending on the selected delivery mode, Bluetooth or NFC modules must be enabled on the mobile devices.
• The mobile devices must be connected to the internet.

To deliver a KNOX MDM profile using the KNOX Deployment app:

1. Install the KNOX Deployment app from Google Play on the administrator's mobile device.
2. Start the KNOX Deployment app.
3. Enter your Samsung account credentials.
4. In the KNOX Deployment window, configure the settings for deploying a KNOX MDM profile:
   • Select the KNOX MDM profile.
   • Select the deployment mode: Bluetooth or NFC.

     When using Bluetooth, you can add a KNOX MDM profile to several devices at the same time.

5. Click Start deployment:
   • Bluetooth. On the user's mobile device, open the website https://configure.samsungknox.com.

     This starts the Samsung KNOX Device Registration Wizard. Follow the instructions on the screen.

     After the KNOX MDM profile is installed, the new device with the Bluetooth tag will be added in the KME console.

   • NFC. Bring the administrator's mobile device close to the user's mobile device and transfer the KNOX MDM profile.

     On the user's mobile device, there will be a prompt to install the KNOX MDM profile. The new device with the NFC tag will be added in the KME console.