Enroll devices

After devices are added to your account (either through a reseller or from a manual CSV file upload), your devices must enroll in the Knox Asset Intelligence service in order for device usage and health data to appear on your Dashboard.

Device enrollment primarily involves installing and launching the Knox Asset Intelligence agent on your devices. There are two main methods for enrolling a device:

• OOBE auto enrollment
• EMM or UEM enrollment

OOBE Auto enrollment

If you have new or factory reset devices in your fleet, you can automatically enroll them in Knox Asset Intelligence when they turn on for the first time. This method of enrollment is also known as Out-Of-Box-Experience (OOBE) enrollment, as it simply involves a user turning on the device and connecting to a data network. Once connected, the device attempts to download and install the Knox Asset Intelligence agent, then launch the agent in the background to automatically begin the enrollment process.

To support OOBE enrollment, the following conditions must be met:

1. Your devices must be uploaded by a reseller.

2. You must have a valid Knox Suite - Enterprise plan or standalone Knox Asset Intelligence license.

3. Your devices must be managed by Android Enterprise.

4. You devices must have the auto-enrollment option enabled. You can enable this option in several ways:

   1. Set auto-enrollment on a per-device basis. To do this, go to the Devices page, then select a device and click ACTIONS > Enable auto enrollment.

      

   2. Set auto-enrollment for all devices uploaded by a specific reseller. To do this, go to the Reseller page, then click the reseller’s name. On the side panel, ensure that all uploads are automatically approved from this reseller, then select the Automatically enroll all devices… option.

      

   3. Use a bulk action to auto-enroll up to 10,000 devices using a CSV file. To do this, go to the Devices page, then click the BULK ACTIONS tab and select ENABLE AUTO ENROLLMENT. Download and complete the provided CSV template, then reupload and click SUBMIT.

      

EMM or UEM enrollment

You can use an Enterprise Mobility Management (EMM) or Unified Endpoint Management (UEM) solution to install the Knox Asset Intelligence agent (as a Managed Google Play app) onto your devices. Once installed, you can configure your EMM or UEM to auto-launch the agent, or ask your device users to manually launch the agent to begin the enrollment process. Before you can use this enrollment method, ensure the following:

• Your devices are already uploaded to the Knox Asset Intelligence console, either through a reseller or with a CSV file.

• You have a valid Knox Suite - Enterprise plan or standalone Knox Asset Intelligence license.

• Your devices have the auto-enrollment option disabled in the Knox Asset Intelligence console. To do this, go the Devices page, select your devices, then click ACTIONS > Disable auto enrollment.

Enroll with Knox Manage

If you’re using Knox Manage as your UEM, you can use a built-in Knox Asset Intelligence enrollment feature to install the agent and auto-enroll devices. Refer to Deploy Knox Asset Intelligence in the Knox Manage admin guide for more details.

Enroll with other EMMs or UEMs

Since all EMMs and UEMs have different user experiences, the following procedure only describes the general steps for enrollment. Refer to your solution’s guides for detailed instructions. Regardless of your solution, you’ll need to do the following:

1. Enable the Knox Service Plugin in your UEM or EMM. See the Knox Service Plugin documentation for more details.

2. Add the Knox Asset Intelligence agent as a Managed Google Play app.

3. In your managed app settings, configure the app to auto-launch after installation.

4. Allow the collection of location data in order for your devices to enroll into the service. If your devices are running Android 12 or higher, permissions are granted differently based on your device management mode.

   1. For fully managed devices, you can use your UEM or EMM to pre-grant location permissions during enrollment.

   2. For work profile on company-owned devices, device users must manually grant location permissions when prompted by the agent.

5. Save the device profile and assign it to the target devices.

Add Knox Asset Intelligence to your allowlist policy

Regardless of which EMM you use, you must also add the agent’s package name to your EMM’s app allowlist policy after installing the agent. This ensures that the agent receives an update whenever a new release is available.

To do this, locate your UEM or EMM Knox Service Plugin policy settings, then under Application management policies, add the following package name to the Application Allowlist by Pkg Name field: com.samsung.android.knox.dai