Back to top

Manage limited enrollment

Last updated March 21st, 2024

You can set the devices that are registered with their IMEI/MEID, serial, OS version, or model name to be enrolled in Knox Manage.

IMEI/MEIDs can be registered individually or collectively using an XLS file. You can also register Wi-Fi-only devices with their serial numbers instead of their IMEI/MEIDs. Currently, you can’t register multiple devices using OS version or model name.

A personally-owned device with a work profile running Android 12 and higher doesn’t share its serial number or IMEI/MEID hardware identifier with Knox Manage, so these devices are incompatible with limited enrollment at this time.

Knox Manage associates the IMEI/MEIDs of work profile devices with a unique enrollment identifier, which persists across re-deployments. For the purposes of this page, the terms IMEI/MEID and enrollment identifier are interchangeable.

Now you can activate limited enrollment for Knox Mobile Enrollment devices through the Settings > Android > Limited Enrollment page. When you turn on the KME Devices option, only devices registered through Knox Mobile Enrollment can be enrolled. Knox Mobile Enrollment devices can’t be enrolled through manual registration or Zero-touch.

Android Legacy devices running Android 10 or later only can be controlled by OS version and model name. With IMEI/MEID, the devices can be enrolled even if you don’t register their IMEI/MEIDs with Limited Enrollment.

Enroll non-Knox Mobile Enrollment devices

When you select the OR condition, only devices that match one or the other criteria are enrolled. When you select the AND condition, only the devices that satisfy all the selected criteria are enrolled.

Add a single device with Limited Enrollment

To register devices individually:

  1. Go to Setting > Android > Limited Enrollment.

  2. On the Limited Enrollment page, select the Devices option, and then click Activate.

    • Alternatively, go to Setting > Configuration > Basic Configuration, and click the Device tab. Then, set Limited Enrollment to Activate.
  3. On the left side of the page, select Limitation condition and choose one or more of the following options:

    • IMEI/MEID, Serial number
    • OS Version
    • Model Name
  4. Click Add.

  5. On the Add Device screen, enter the appropriate information.

    If you selected IMEI/MEID, Serial Number, click the option you want to use to enroll devices. Then, enter an IMEI/MEID or serial number in the field as needed.

  6. Click Save.

Add multiple devices with Limited Enrollment

You can’t register multiple devices using OS version or model name.

To register multiple devices at the same time, complete the following steps:

  1. Navigate to Setting > Android > Limited Enrollment.

  2. On the Limited Enrollment page, select the Devices option, and then click Activate.

    • Alternatively, navigate to Setting > Configuration > Basic Configuration, and click the Device tab. Then, set Limited Enrollment to Activate.
  3. Click Bulk Add.

  4. On the Bulk Add Devices screen, click Download Template.

  5. Enter the IMEI numbers in the downloaded XLS file, and then save it.

    • Enter the serial number of a Wi-Fi-only device.
  6. On the Bulk Add Devices screen, click upload, and select the saved XLS file.

  7. Click Save.

Enroll Knox Mobile Enrollment devices

To enroll devices using Knox Mobile Enrollment, complete the following steps:

  1. Navigate to Setting > Android > Limited Enrollment.

  2. On the Limited Enrollment page, select the KME Devices option, and then click Activate.

    • Alternatively, navigate to Setting > Configuration > Basic Configuration, and click the Device tab. Then, set Limited Enrollment for KME Devices to Activate.

Once you activate Limited Enrollment for Knox Mobile Enrollment devices, you can’t enroll devices using manual registration or Zero Touch.

Is this page helpful?