Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/Mobile/help/en-us/index.html?contextId=kme

Knox Mobile Enrollment

With Samsung Knox Mobile Enrollment (KME), you can enroll Samsung devices with Sophos Mobile in bulk. Knox Mobile Enrollment enabled devices automatically enroll with Sophos Mobile when the users turn them on.

For details on Knox Mobile Enrollment, see the Samsung Knox Mobile Enrollment documentation.

Requirements

  • You have a Samsung account.
  • You have an account for the Samsung Knox Admin Portal.
  • The devices you want to enroll have Knox 2.4 or later, depending on the enrollment scenario you want to use. For example, Knox 2.8 or later is required for Android Enterprise full device management.
  • If you registered your organization with Android Enterprise in managed Google domain mode before April 9, 2024, you must turn on Use managed Google domain device enrollment in your Android Enterprise settings. See Managed Google domain device enrollment.

For enrollment in Android Enterprise full device management mode, additional requirements apply:

  • Users enrolling a device have access to the Sophos Fusion Self Service Portal, or if you synchronized them from Microsoft Active Directory (AD), you've configured an LDAP connection between Sophos Mobile and AD. See User access and Configure LDAP connection.

Configuration steps

To use Knox Mobile Enrollment, perform the following steps:

  1. Turn on Knox Mobile Enrollment in Sophos Mobile Admin and configure enrollment details. See Set up Knox Mobile Enrollment.
  2. Create a profile for Sophos Mobile in the Samsung Knox Mobile Enrollment console. See Create KME profile.
  3. Purchase Knox Mobile Enrollment enabled devices.
  4. Assign the KME profile for Sophos Mobile to the devices. See Deploy KME devices.