Knox Mobile Enrollment

With Samsung Knox Mobile Enrollment (KME), you can enroll corporate-owned Samsung devices with Sophos Mobile in bulk. Knox Mobile Enrollment enabled devices you’ve registered for Sophos Mobile automatically enroll with your Sophos Mobile server when the users turn them on.


  • You have a Samsung account.
  • You have an account for the Samsung Knox portal.
  • The devices you want to enroll have Knox 2.4 or later, depending on the enrollment scenario you want to use. For example, Knox 2.8 or later is required for enrollment in Android enterprise device owner mode.
  • For enrollment in Android enterprise mode, you’ve set up Android enterprise in Sophos Mobile for the Managed Google Play Account scenario. See Set up Android enterprise (Managed Google Play Account scenario).

Configuration steps

To use Knox Mobile Enrollment, perform the following steps:
  • Turn on Knox Mobile Enrollment in Sophos Mobile Admin and configure enrollment details. See Set up Knox Mobile Enrollment.
  • Create a profile for Sophos Mobile in the Samsung Knox Mobile Enrollment console. See Create KME profile.
  • Purchase Knox Mobile Enrollment enabled devices.
  • Assign the KME profile for Sophos Mobile to the devices. See Deploy KME devices.