Enrolling your Samsung Knox Mobile Enrollment Devices with SOTI MobiControl

Before you begin

Visit the Samsung KME Documentation site and follow all of the suggested enrollment procedures.

Note: To securely communicate with the KME server and its supporting Knox server resources, you may need to whitelist certain URLS and port numbers. Review the Samsung KME Firewall Exceptions for details.

About this task

Note: Parts of this procedure are performed through a third-party and are therefore subject to change without notice. Always refer to Samsung KME documentation for the latest information.

To enroll your Samsung KME devices into SOTI MobiControl:

Procedure

  1. In the SOTI MobiControl console, create an Enrollment Policy with the enrollment settings that you want applied to your Samsung devices, as described in Creating an Add Devices Rule. Make a note of the Enrollment ID, visible in the ENROLLMENT POLICY INFO panel of the Enrollment Policy.
  2. In the Samsung Knox Mobile Enrollment portal, create a new Profile for your SOTI MobiControl instance.
  3. On the Profiles tab, click Create Profile to open the Create New Profile dialog box.
  4. Choose Android Enterprise or Device Admin from the Select Profile Type pop-up.
    Important: Samsung Knox Mobile Enrollment no longer supports Device Admin on Android OS version 11 and later.
  5. Select SOTI in the Pick your MDM drop down list.
    Note: The latest released device agent will be auto-downloaded from the Google Play Store using the link provided in the Samsung KME portal.
  6. You can add a Provisioning mode using JSON under the Custom JSON Data (as defined by MDM) text field: {"enrollmentId":"XJMJTR98","PROVISIONING_MODE":"FULLY_MANAGED_DEVICE"} . If you do not add this it will (by default) point to the enrollment ID provided by the default DEVICE OWNER.
    Important: If you do not add a JSON configuration to the profile, you need to send the enrollment ID of the add devices rule separately to your device users.

    The format of the JSON configuration is strict and differs between the Device Admin agent and the Android Enterprise agent. Follow the format for each device agent exactly as presented below, where AAAAAA11 is replaced by the actual enrollment ID of the add devices rule.

    Device AgentJSON Configuration Format
    Device Admin { "EnrollmentID": "AAAAAA11" }
    Android Enterprise {"enrollmentId":"AAAAAA11"}
  7. Save the new Profile.
  8. Select the devices you want managed through SOTI MobiControl and assign the profile to them.

Results

When you activate your Samsung Android devices, they will automatically download the SOTI MobiControl agent and enroll in SOTI MobiControl according to the settings specified in the add devices rule.

Note:

Verify in the SOTI MobiControl web console that your devices are properly enrolled.

Unenrolling or deleting these devices from SOTI MobiControl does not remove them from the Samsung KME portal.