Knox Mobile Enrollment

With Samsung Knox Mobile Enrollment (KME), you can enroll Samsung devices with Sophos Mobile in bulk. Knox Mobile Enrollment enabled devices automatically enroll with Sophos Mobile when the users turn them on.

For details on Knox Mobile Enrollment, see the Samsung Knox Mobile Enrollment documentation.

Requirements

• You have a Samsung account.
• You have an account for the Samsung Knox Admin Portal.
• The devices you want to enroll have Knox 2.4 or later, depending on the enrollment scenario you want to use. For example, Knox 2.8 or later is required for Android Enterprise full device management.

For enrollment in Android Enterprise full device management mode, additional requirements apply:

• You've registered your organization with Android Enterprise in Better Together Enterprise or Managed Google Play Account mode. See Registration modes.
• Users enrolling a device have access to the Sophos Central Self Service Portal, or if you synchronized them from Microsoft Active Directory (AD), you've configured an LDAP connection between Sophos Mobile and AD. See User access to the Sophos Central Self Service Portal and Configure LDAP connection.

Configuration steps

To use Knox Mobile Enrollment, perform the following steps:

1. Turn on Knox Mobile Enrollment in Sophos Mobile Admin and configure enrollment details. See Set up Knox Mobile Enrollment.
2. Create a profile for Sophos Mobile in the Samsung Knox Mobile Enrollment console. See Create KME profile.
3. Purchase Knox Mobile Enrollment enabled devices.
4. Assign the KME profile for Sophos Mobile to the devices. See Deploy KME devices.