Enroll devices

Enrollment is the process of installing and launching the Knox Asset Intelligence agent (a Managed Google Play app) onto your Samsung Knox devices. Devices must be enrolled in order to report usage and health data to the Knox Asset Intelligence Dashboard.

There are two methods for enrolling devices:

• OOBE enrollment
• EMM enrollment

Auto enrollment (also known as OOBE)

If you have new or factory reset devices in your fleet, you can automatically enroll them in Knox Asset Intelligence when they turn on for the first time. This method of enrollment is also known as Out-Of-Box-Experience (OOBE) enrollment, as it simply involves a user turning on the device, going through the initial device setup wizard, and connecting to a data network. Once connected, the device automatically downloads, installs, and launches the Knox Asset Intelligence agent to begin the enrollment process.

To support auto enrollment, the following conditions must be met:

• You must have a valid Knox Suite - Enterprise plan or standalone Knox Asset Intelligence license.
• Your devices must be managed by Android Enterprise, in an EMM or UEM.

To set up your devices for auto enrollment into Knox Asset Intelligence, you’ll need to create an Enrollment profile. To do this:

1. Click Enrollment on the Knox Admin Portal navigation pane. The Enrollment profiles page displays.

   You can also access the common enrollments profiles list from the Knox Mobile Enrollment console. Clicking Profile in the console opens the same Enrollment profile page on the Knox Admin Portal.

2. Click Create profile. The Create enrollment profile page displays.

3. Enter the following under the Basic info section:

   • Profile name
   • Profile description

4. If your devices are already enrolled in an EMM, select Knox Asset Intelligence.

   

   If you haven’t already enrolled devices in an EMM, you can configure the profile to enroll in both an EMM and Knox Asset Intelligence at the same time. See Manage enrollment profiles to learn more.

5. Click Next to review your enrollment profile, then click Create and assign to assign it to your devices.

6. Select your devices, then click Assign to devices.

The new profile is created and shown on the Enrollment profiles page. After a new or factory reset device turns on and connects to a Wi-Fi or data network, the profile automatically downloads and begins enrolling the device into Knox Asset Intelligence.

EMM enrollment

If you are already using an EMM to manage your enterprise devices, you can enroll them into Knox Asset Intelligence by installing an agent (a Managed Google Play app).

Before you can use this enrollment method, ensure the following:

• Your devices are already uploaded to the Knox Asset Intelligence console, either through a reseller or with a CSV file.
• You have a valid Knox Suite - Enterprise plan or standalone Knox Asset Intelligence license.
• Your devices have the auto-enrollment option disabled in the Knox Asset Intelligence console. To do this, go the Devices page, select your devices, then click ACTIONS > Disable auto enrollment.

Since all EMMs and UEMs have different user experiences, the following procedure only describes the general steps for enrollment. Refer to your solution’s guides for detailed instructions. Regardless of your solution, you’ll need to do the following:

1. Enable the Knox Service Plugin in your EMM.
2. Add the Knox Asset Intelligence agent as a Managed Google Play app.
3. In your managed app settings, configure the app to auto-launch after installation.
4. Allow the collection of location data in order for your devices to enroll into the service. If your devices are running Android 12 or higher, permissions are granted differently based on your device management mode.
   • For fully managed devices, you can use your EMM to pre-grant location permissions during enrollment.
   • For work profile on company-owned devices, device users must manually grant location permissions when prompted by the agent.

Once the agent is installed and launched, the device is enrolled.

Add Knox Asset Intelligence to your allowlist policy

In addition to installing the agent, you must also add its package name to your EMM’s app allowlist policy. This ensures that the agent receives an update whenever a new release is available.

To do this, locate your UEM or EMM Knox Service Plugin policy settings, then under Application management policies, add the following package name to the Application Allowlist by Pkg Name field: com.samsung.android.knox.dai

Enroll with Knox Manage (old console)

If you’re using Knox Manage (old console) as your EMM, you can use the built-in Knox Asset Intelligence enrollment feature to install the agent and auto-enroll devices. Refer to Deploy Knox Asset Intelligence in the Knox Manage admin guide for more details.