Enroll devices

Enrollment is the process of installing and launching the Knox Asset Intelligence agent (a Managed Google Play app) onto your Samsung Knox devices. Devices must be enrolled in order to report usage and health data to the Knox Asset Intelligence Dashboard.

There are two methods for enrolling devices:

• OOBE enrollment
• EMM enrollment

Auto enrollment (also known as OOBE)

If you have new or factory reset devices in your fleet, you can automatically enroll them in Knox Asset Intelligence when they turn on for the first time. This method of enrollment is also known as Out-Of-Box-Experience (OOBE) enrollment, as it simply involves a user turning on the device, going through the initial device setup wizard, and connecting to a data network. Once connected, the device automatically downloads, installs, and launches the Knox Asset Intelligence agent to begin the enrollment process.

To support auto enrollment, the following conditions must be met:

• You must have a valid Knox Suite - Enterprise plan or standalone Knox Asset Intelligence license.
• Your devices must be managed by Android Enterprise, in an EMM or UEM.

To set up your devices for auto enrollment into Knox Asset Intelligence, you’ll need to create an Enrollment profile. To do this:

1. Click Enrollment on the Knox Admin Portal navigation pane. The Enrollment profiles page displays.

   You can also access the common enrollments profiles list from the Knox Mobile Enrollment console. Clicking Profile in the console opens the same Enrollment profile page on the Knox Admin Portal.

2. Click Create profile. The Create enrollment profile page displays.

3. Enter the following under the Basic info section:

   • Profile name
   • Profile description

4. In the list of services, select Knox Asset Intelligence.

   

   If you haven’t already enrolled devices in an EMM, you can configure the profile to enroll in both an EMM and Knox Asset Intelligence at the same time. See Manage enrollment profiles to learn more.

5. Click Next to review your enrollment profile, then click Create and assign to assign it to your devices.

6. Select your devices, then click Assign to devices.

Once the profile is assigned to a new or factory-reset device, the device user simply needs to power on and connect to a Wi-Fi or data network, after which the device automatically downloads and launches the Knox Asset Intelligence agent. When enrolled, the device will show an Active status on the Devices page.

EMM enrollment

If you’re currently using an EMM solution to manage your enterprise devices, and you want to enroll them into Knox Asset Intelligence without forcing the user to perform a factory reset, you can deploy the Knox Asset Intelligence agent like any other Managed Google Play app.

Before you deploy the agent, you must first have the following:

• A valid Knox Suite - Enterprise Plan or standalone Knox Asset Intelligence license.
• Devices added to the Knox Asset Intelligence console, either with a CSV file, or through an approved device reseller.

  • If your devices are added through a reseller, you must also apply an enrollment profile with Knox Asset Intelligence selected as a service.

    

Since all EMMs and UEMs have different user experiences, the following procedure only describes the general steps for enrollment. Refer to your EMM solution’s documentation for detailed instructions. Regardless of your EMM solution, you’ll need to do the following:

1. Enable the Knox Service Plugin in your EMM.
2. Add Knox Asset Intelligence as a Managed Google Play app.
3. In your managed app settings, configure the app to auto-launch after installation.
4. Allow the collection of location data in order for your devices to enroll into the service. If your devices are running Android 12 or higher, permissions are granted differently based on your device management mode.
   • For fully managed devices, you can use your EMM to pre-grant location permissions during enrollment.
   • For work profile on company-owned devices, device users must manually grant location permissions when prompted by the agent.

Once the Knox Asset Intelligence agent is deployed, the device will automatically enroll in the service.

Add Knox Asset Intelligence to your allowlist policy

In addition to deploying the Knox Asset Intelligence agent, you must also add its package name to your EMM’s allowlist policy. This ensures that the agent receives an update whenever a new release is available. To do this:

1. Locate your UEM or EMM Knox Service Plugin policy settings.
2. Expand the settings under Application management policies.
3. Add the following package name to the Application Allowlist by Pkg Name field: com.samsung.android.knox.dai

Enroll with Knox Manage (original console)

If you’re using Knox Manage (original console) as your EMM, you can use the built-in Knox Asset Intelligence enrollment feature to install the agent and auto-enroll devices in a single step. Refer to Deploy Knox Asset Intelligence in the Knox Manage admin guide for more details.