Back to top

Enroll devices

Last updated November 27th, 2024

After devices are added to your account (either through a reseller or from a manual CSV file upload), your devices must enroll in the Knox Asset Intelligence service in order for device usage and health data to appear on your Dashboard.

Device enrollment primarily involves installing the Knox Asset Intelligence agent — a managed Android app — on your devices. Depending on the UEM or EMM you’re using, different enrollment methods are available.

Enroll with Knox Manage

If you’re using Knox Manage as your UEM, you can use its built-in Knox Asset Intelligence feature to install the agent app and auto-enroll devices with just a few simple steps.

Before you can use Knox Manage to enroll devices into Knox Asset Intelligence, you must ensure the following:

  • Your devices are already uploaded to the Knox Asset Intelligence console, either through a reseller or with a CSV file.
  • Your devices have the auto-enrollment option disabled in the Knox Asset Intelligence console.

KAI console disabled auto enroll action

Once these conditions are met, you can use Knox Manage to auto-enroll devices into Knox Asset Intelligence. Refer to Deploy Knox Asset Intelligence in the Knox Manage admin guide for more details.

Enroll with other UEMs

Since all UEM or EMMs have different user experiences, the following procedure only describes the general steps for enrollment. Refer to your UEM or EMM’s guide for detailed instructions.

If you’re not using Knox Manage as your UEM or EMM, you’ll need to install the Knox Asset Intelligence agent as a Managed Google Play app onto your devices. To do this:

  1. Enable the Knox Service Plugin in your UEM or EMM. See the Knox Service Plulgin documentation for more details.

  2. Add the Knox Asset Intelligence agent as a Managed Google Play app. Make sure to configure the app to auto-launch after installation.

  3. You must allow the collection of location data in order for your devices to enroll into the servcie. If your devices are running Android 12 or higher, permissions are granted differently based on your device management mode.

    1. For fully managed devices, you can use your UEM or EMM to pre-grant location permissions during enrollment.

    2. For work profile on company-owned devices, users must manually grant location permissions when prompted by the agent.

  4. Save the device profile and assign it to the target devices.

Add Knox Asset Intelligence to your allowlist policy

In addition to installing the agent, you must also add it your UEM or EMM’s app allowlist policy. This ensures that the agent receives an update whenever a new release is available.

To do this, locate your UEM or EMM Knox Service Plugin policy settings, then under Application management policies, add the following package name to the Application Allowlist by Pkg Name field: com.samsung.android.knox.dai

KSP app allowlist policy

Is this page helpful?