Page tree

Versions Compared


  • This line was added.
  • This line was removed.
  • Formatting was changed.


Samsung KNOX Mobile Enrollment is a free web service that allows users to bulk enroll devices while keeping end-user interaction to a minimum. You can enroll your devices without manually configuring each device. You can enroll a device directly to individuals that can be predetermined in the Mobile Enrollment portal.

This documentation is based on information available on the Samsung Knox web sites as of April 2020.


Device Admin has been deprecated for Android 10

titleSamsung KNOX Mobile Enrollement

KME Requirement: Samsung KNOX Requirements

KME Firewall Exceptions: Samgsung KNOX Firewall Exceptions.

KME Admin Gude: Samsung KNOX Mobile Enrollment Admin Guide.



In KNOX console, select MDM profiles in the left-hand navigation menu and select the CREATE PROFILE button

(To edit an existing profile, just click on it)


Select Android Enterprice in the profile type


Set the following BASIC INFO for the DO profile:

  • Profile Name - Enter an appropriate profile name to distinguish it from others with similar attributes.

  • Description - Optionally provide a 200 character maximum description to further differentiate this profile from others.

  • MDM Server URI  - No MDM Server URI is required. Leave the field empty and click continue


Custom JSON Data (as defined by MDM) to pass the MDM setup configuration using the JSON (JavaScript Object Notation) format

Skip Setup Wizard - Unselect this option to send the device user through the Setup Wizard. When selected, the device user skips the many setup wizard screens and can start the enrollment process much faster.

This setting is selected by default.

Allow end user to cancel enrollment - Selecting this option permits an end-user to cancel enrollment on their device. Leaving this setting unselected enables mandatory device enrollment.

The skip setup wizard option functions independently from end-user enrollment cancellation, and both can be enabled at the same time

  • Disable system apps — Select this checkbox to ensure all apps are disabled and unavailable to the device owner supported profile.
  • (Recommended) Leave all system apps enabled — Select this checkbox to ensure all pre-installed system apps are enabled and available to the profile. If this option is not selected, only a limited set of default system apps (My Files, Contacts, Google Play Store) display in the device's apps tray. Systems apps reside within the device's /system/app read-only folder and cannot be installed or removed by the device user. When using KME with Knox Configure, be careful when unchecking the Leave all system apps enabled checkbox, as this may lead to conflicts with Knox Configure.

Image Modified


Click CREATE and verify that profile is created and located in MDM Profiles

6.The profile is ready for use.