Deploy KME devices

To have a Knox Mobile Enrollment enabled device (“KME device”) enroll with your Sophos Mobile server, you assign it the Sophos Mobile profile.

  1. In the Knox Mobile Enrollment console, assign the Sophos Mobile profile to the devices.
    If the devices are not shown in the Knox Mobile Enrollment console, contact your reseller.
  2. Distribute the devices to your users.
    If you’ve selected User authentication in the KME enrollment settings in Sophos Mobile Admin, users must have a Sophos Mobile user account.

When a user turns the device on for the first time, a Knox Mobile Enrollment setup wizard starts. After the device has connected to the internet, it enrolls with Sophos Mobile.

Depending on the enrollment mode you’ve configured in the Sophos Mobile profile in the Knox Mobile Enrollment console, Sophos Mobile uses either Android Enterprise full device management or the Android device administrator permission to manage the device.