Back to top

Manage limited enrollment

Last updated July 26th, 2023

You can set the devices that are registered with their IMEI/MEID, serial, OS version, or model name to be enrolled in Knox Manage.

IMEI/MEIDs can be registered individually or collectively using an XLS file. You can also register Wi-Fi-only devices with their serial numbers instead of their IMEI/MEIDs. Currently, you cannot register multiple devices using OS version or model name.

Note

An employee-owned device with a Work Profile running Android 12 and higher does not share its IMEI/MEID hardware identifier with Knox Manage. Instead, Knox Manage associates it with a unique enrollment identifier, which persists across re-deployments. For the purposes of this page, the terms IMEI/MEID and enrollment identifier are interchangeable.

Now you can activate limited enrollment for KME devices through the Settings > Android > Limited Enrollment page. When you turn on the KME Devices option, only devices registered through KME can be enrolled. KME devices cannot be enrolled through manual registration or Zero-touch.

Note

Android Legacy devices running Android 10 or later only can be controlled by OS version and model name. With IMEI/MEID, the devices can be enrolled even if you don’t register their IMEI/MEIDs with Limited Enrollment.

Enroll non-KME devices

When you select the OR condition, only devices that match one or the other criteria are enrolled. When you select the AND condition, only the devices that satisfy all the selected criteria are enrolled.

Add a single device with Limited Enrollment

To register devices individually, complete the following steps:

  1. Navigate to Setting > Android > Limited Enrollment.

  2. On the Limited Enrollment page, select the Devices option, and then click Activate.

    • Alternatively, navigate to Setting > Configuration > Basic Configuration, and click the Device tab. Then, set Limited Enrollment to Activate.
  3. On the left side of the page, select Limitation condition and choose one or more of the following options:

    • IMEI/MEID, Serial number
    • OS Version
    • Model Name
  4. Click Add.

  5. On the Add Device screen, enter the appropriate information.

    Tip

    If you selected IMEI/MEID, Serial Number, click the option you want to use to enroll devices. Then, enter an IMEI/MEID or serial number in the field as needed.

  6. Click Save.

Add multiple devices with Limited Enrollment

Important

You cannot register multiple devices using OS version or model name.

To register multiple devices at the same time, complete the following steps:

  1. Navigate to Setting > Android > Limited Enrollment.

  2. On the Limited Enrollment page, select the Devices option, and then click Activate.

    • Alternatively, navigate to Setting > Configuration > Basic Configuration, and click the Device tab. Then, set Limited Enrollment to Activate.
  3. Click Bulk Add.

  4. On the Bulk Add Devices screen, click Download Template.

  5. Enter the IMEI numbers in the downloaded XLS file, and then save it.

    • Enter the serial number of a Wi-Fi-only device.
  6. On the Bulk Add Devices screen, click upload, and select the saved XLS file.

  7. Click Save.

Enroll KME devices

To enroll devices using KME, complete the following steps:

  1. Navigate to Setting > Android > Limited Enrollment.

  2. On the Limited Enrollment page, select the KME Devices option, and then click Activate.

    • Alternatively, navigate to Setting > Configuration > Basic Configuration, and click the Device tab. Then, set Limited Enrollment for KME Devices to Activate.

Note

Once you activate Limited Enrollment for KME devices, you cannot enroll devices using manual registration or Zero Touch.

Is this page helpful?