Manage limited enrollment

You can set the devices that are registered with their IMEI/MEID, serial, OS version, or model name to be enrolled in Knox Manage.

IMEI/MEIDs can be registered individually or collectively using an XLS file. You can also register Wi-Fi-only devices with their serial numbers instead of their IMEI/MEIDs. Currently, you can’t register multiple devices using OS version or model name.

Now you can activate limited enrollment for Knox Mobile Enrollment devices through the Settings > Android > Limited Enrollment page. When you turn on the KME Devices option, only devices registered through Knox Mobile Enrollment can be enrolled. Knox Mobile Enrollment devices can’t be enrolled through manual registration or Zero-touch.

Enroll non-Knox Mobile Enrollment devices

When you select the OR condition, only devices that match one or the other criteria are enrolled. When you select the AND condition, only the devices that satisfy all the selected criteria are enrolled.

Add a single device with Limited Enrollment

To register devices individually:

1. Go to Setting > Android > Limited Enrollment.

2. On the Limited Enrollment page, select the Devices option, and then click Activate.

   • Alternatively, go to Setting > Configuration > Basic Configuration, and click the Device tab. Then, set Limited Enrollment to Activate.

3. On the left side of the page, select Limitation condition and choose one or more of the following options:

   • IMEI/MEID, Serial number
   • OS Version
   • Model Name

4. Click Add.

5. On the Add Device screen, enter the appropriate information.

   If you selected IMEI/MEID, Serial Number, click the option you want to use to enroll devices. Then, enter an IMEI/MEID or serial number in the field as needed.

6. Click Save.

Add multiple devices with Limited Enrollment

To register multiple devices at the same time, complete the following steps:

1. Navigate to Setting > Android > Limited Enrollment.

2. On the Limited Enrollment page, select the Devices option, and then click Activate.

   • Alternatively, navigate to Setting > Configuration > Basic Configuration, and click the Device tab. Then, set Limited Enrollment to Activate.

3. Click Bulk Add.

4. On the Bulk Add Devices screen, click Download Template.

5. Enter the IMEI numbers in the downloaded XLS file, and then save it.

   • Enter the serial number of a Wi-Fi-only device.

6. On the Bulk Add Devices screen, click , and select the saved XLS file.

7. Click Save.

Enroll devices based on management type

To register devices enrolled with a specific management type:

1. Go to Setting > Android > Limited Enrollment.

2. On the Limited Enrollment page, select the Management Type option, and then click Activate.

3. Click Add.

4. On the Add Group dialog, select a group of users whose devices are to be enrolled using the management type.

5. Click Save.

A device user included in multiple groups can enroll using one of the management types associated with the groups. A device user not included in any group can enroll using any of the available management types.

If a device user tries to enroll their device using a management type that is not available to them, an error is displayed on the device.

Enroll Knox Mobile Enrollment devices

To enroll devices using Knox Mobile Enrollment, complete the following steps:

1. Navigate to Setting > Android > Limited Enrollment.

2. On the Limited Enrollment page, select the KME Devices option, and then click Activate.

   • Alternatively, navigate to Setting > Configuration > Basic Configuration, and click the Device tab. Then, set Limited Enrollment for KME Devices to Activate.