Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/Mobile/help/en-us/index.html?contextId=setup-kme

Set up Knox Mobile Enrollment

To set up Samsung Knox Mobile Enrollment (KME) in Sophos Mobile Admin, you configure the settings applied to KME devices when they enroll with Sophos Mobile.

To do this, do as follows:

  1. On the menu sidebar, click Setup > Google setup, and then click the Samsung KME tab.
  2. Click Use Knox Mobile Enrollment.

  3. Under Enrollment settings, configure the enrollment of KME devices with Sophos Mobile:

    • Device group: The device group KME devices are assigned to.

    • Task bundle (Android): The task bundle for enrolling KME devices in device administrator management mode.

    • Task bundle (Android Enterprise full device management): The task bundle for enrolling KME devices in Android Enterprise full device management mode.

      The lists show task bundles that don't have an Enroll task.

      You configure the enrollment mode in the MDM enrollment profile in the Samsung Knox Mobile Enrollment console.

    • User authentication: Users must enter their Sophos Central Self Service Portal credentials when they set up the device. Alternatively, if you synchronized your users from Microsoft Active Directory (AD) and configured an LDAP connection between Sophos Mobile and AD, they must enter their AD credentials. See Configure LDAP connection.

      If you turn this setting off, the device enrolls with Sophos Mobile without user assignment.

      Note

      You must turn User authentication on for the Android Enterprise full device management mode. If you turn the setting off, you can only enroll KME devices in device administrator management mode.

  4. Click Save to save the enrollment settings.

To complete the Knox Mobile Enrollment setup, create an MDM profile for Sophos Mobile in the Samsung Knox Mobile Enrollment console.