Kaspersky Secure Mobility Management

Creating a Knox profile

A Knox profile is a profile that contains links to apps for their quick deployment and initial configuration on mobile devices.

To create a Knox profile:

1. Sign in to the Samsung Knox console → Knox Mobile Enrollment.
2. Select the Profiles section.
3. Click Actions > Create profile.

   The Create New Profile wizard starts.

4. Select Android Enterprise as the profile type.
5. In the Android enterprise profile details window that opens, specify the following settings:
   1. In the Basic information section, enter general information about the Knox profile: Profile name and Description.
   2. In the EMM information section, in the Pick your EMM field, select Other.
   3. In the EMM agent APK field, enter the path to the APK installation file.

      The installation file for Kaspersky Endpoint Security for Android is included in the Kaspersky Secure Mobility Management distribution kit. First, download the APK installation file. Then place the APK installation file on the Kaspersky Security Center Web Server or on another server that is accessible for downloading from the device.

6. Click Continue.
7. In the Android enterprise profile settings window that opens, specify the following settings:
   1. In the EMM configuration section, enter the settings for connecting the device to Kaspersky Security Center in the Custom JSON data (as defined by EMM) field in the following format:
   2. {"serverAddress":"myServer.domain.com","serverPort":"12345","vsrv":"virtualServerID","groupName":"MOBILE GROUP","eulas":"cmFuZG9tYmFzZTY0c3RyaW5n"}.

      The following fields of the JSON file are now supported:

      • serverAddress - the address of the Kaspersky Security Center.
      • serverPort - the number of the port for mobile device synchronization to the Administration Server via the specified address.
      • vsrv (optional) - the Virtual Administration Server.
      • groupName (optional) - the name of the subgroup in the Unassigned group.
      • eulas (optional) - the list of the accepted EULAs (an array of binary identifiers, 16 bytes long).

      The connectionString parameter is no longer supported for KME (Knox Mobile Enrollment).

   3. To install Kaspersky Endpoint Security for Android via Knox Mobile Enrollment, the mobile device user must accept the terms of the Samsung License Agreement. You can view the terms of the Samsung License Agreement in the Privacy Policy, EULAs and Terms of Service section. You can also add other legal documents of your company that are necessary for deploying a Knox profile by clicking the Add legal agreement button.
8. Click the Save button.

As a result, the new Knox profile with the Kaspersky Endpoint Security for Android app will be added to the list in the KME console.