Kaspersky Secure Mobility Management

Adding devices in Knox Mobile Enrollment

Devices can be added in the Knox Mobile Enrollment (KME) console in the following ways:

• The vendor automatically adds devices in the KME console after the devices are purchased.
• The administrator installs the Knox Deployment app from Google Play on their mobile device and migrates the Knox profile to users' devices using Bluetooth, Wi-Fi Direct, or a QR code.

After the device is reset to the factory settings, the Knox profile will be installed. After deployment of the Knox profile, the device will be automatically added in the KME console.

Adding a device through the Knox Deployment app

If you did not purchase your Samsung device from an official vendor, you can add the device to Knox Mobile Enrollment using Bluetooth, Wi-Fi Direct, or a QR code. This will require the administrator's mobile device that will be used to deliver Knox profiles to users' mobile devices.

To add devices using the Knox Deployment app, the following conditions must be met:

• Depending on the selected delivery mode, Bluetooth or Wi-Fi must be enabled on the mobile devices.
• The mobile devices must be connected to the internet.

To deliver a Knox profile using the Knox Deployment app:

1. Install the Knox Deployment app from Google Play on the administrator's primary mobile device.
2. Start the Knox Deployment app.
3. Enter your Samsung account credentials to sign in.
4. In the Knox Deployment window, configure the settings for deploying a Knox profile:
   1. In the Knox services section, select Knox Mobile Enrollment.
   2. Select the desired Knox profile from the list.
   3. Select the Deployment mode:
      • Bluetooth. Set the duration of Bluetooth connection and specify whether the Bluetooth connection is automatic or manual.

        When using Bluetooth, you can add a Knox profile to several devices at the same time.

      • Wi-Fi Direct. Specify whether the Wi-Fi Direct connection is automatic or manual. Then follow the instructions on the screen.
   4. Tap Start deployment.
5. On the receiver device, draw a plus-sign (+) gesture on the Welcome window to initiate deployment.
6. In the Knox Deployment menu that opens, select whether you want to use Bluetooth or Wi-Fi Direct to enroll a device:
   1. If you selected Bluetooth, approve the pairing request that appears on the primary device. Then the receiver device downloads the profile. Follow the instructions on the screen.

      After the Knox profile is installed, the new device will be added with the Bluetooth tag to the KME console.

   2. If you selected Wi-Fi Direct, follow the instructions on the screen.

      After the Knox profile is installed, the new device will be added with the Wi-Fi tag to the KME console.

7. When the receiver device is configured, tap Finish deployment on the primary device in order to complete the enrollment.

After the device is reset to the factory settings, the Knox profile will be installed.

To deliver a Knox profile using a QR code:

1. On the receiver device, draw a plus-sign (+) gesture on the Welcome window to initiate deployment.
2. In the Knox Deployment menu that opens, select QR-code.
3. In the KME Console, select the desired profile in the Profiles section.
4. If there is no QR code next to the profile name, open the profile settings and click the Add a QR-code button on the second page.
5. Follow the instructions on the screen and save the profile.

   The generated QR code appears near the profile name.

6. Scan a QR code from the KME Console with the camera on the user's mobile device running Android 10 or later.

   After the Knox profile is installed, the new device with the QR-code tag will be added to the KME console.

After the device is reset to the factory settings, the Knox profile will be installed.

Adding a device through the vendor

Official vendors of Samsung devices can be registered in Samsung Knox. For the list of official vendors, visit the Samsung technical support website. The vendor automatically adds devices in the KME console for your Samsung account immediately after the devices are purchased. To have the devices added by the vendor, you must register the vendor in the KME console for your Samsung account. You will need a reseller ID to add the Samsung device vendor in the KME console. To receive the reseller ID, you must send a request to the vendor. In the request, specify your Knox client ID.

To view your Knox client ID:

1. Sign in to the Samsung Knox console → Knox Mobile Enrollment.
2. Select the Resellers section.
3. Your ID is displayed in the Knox Customer ID field.

After you receive a response from the vendor with the reseller ID, register the vendor in the KME console. Prior to registering the vendor, you can create a Knox profile so that the profile can be automatically deployed when adding new devices.

To register an official vendor in the KME console:

1. Sign in to the Samsung Knox console → Knox Mobile Enrollment.
2. Select the Resellers section.
3. Click the Register reseller button.

   The window for registering the device vendor opens.

4. In the Reseller ID field, enter the ID received from the official Samsung device vendor.
5. If you created a Knox profile, select the Knox profile in the vendor registration window.

   When you add new devices, the Knox profile is automatically installed.

   For more information about configuring other settings, please refer to the Samsung technical support website.

6. Click OK.

The Samsung device vendor will be added to the list of vendors in the KME console.

After new devices are purchased from the official vendor, Kaspersky Endpoint Security for Android will be automatically installed on the devices after the devices are connected to the internet. For more details about working with Knox Mobile Enrollment, please refer to the Knox Mobile Enrollment User Guide. If you already have a list of devices in the KME console, add the Knox profile with the Knox app to the device.