- Basics
- The Knox Ecosystem
- White Paper
- Samsung Knox Portal
- Knox Cloud Services
- General Knox Support
- Knox Licenses
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
Enroll a Chromebook
Before you begin enrollment, be aware that a Chromebook must be enrolled before any user signs in to it. If any user registers their Google account with the Chromebook, then you must factory reset it and restart the enrollment process.
Prepare for enrollment
Before you can enroll your Chromebooks in KM, you must complete a handful of preliminary steps. You will need:
- Access to the Google Admin account
- A Chrome OS profile
- A Chromebook that is turned off
To start, you must consent to Google's Terms of Service agreement on behalf of your enterprise:
- On the Google Admin console, go to Devices > Chrome Devices.
- Acknowledge the Terms of Service message that shows.
Then, as an optional step, you can apply the enrollment policies to speed up the process:
- On the KM console, go to Profile, then click the name of the Chromebook profile you wish to deploy.
- Click Modify Policy to modify the policies.
-
Under User & Browser > Enrollment controls policy group, set the policies appropriate for your deployment strategy:
Enroll manually
To manually enroll a Chromebook:
- Turn on the Chromebook and follow the on-screen instructions until you see the sign-in screen. Don't sign in. If you see the enrollment screen instead of the sign-in screen, skip to Step 4.
- If the Chromebook is a tablet, tap Email or phone, then tap
and switch to full layout to open the on-screen keyboard.
-
Open the enrollment screen:
- All Chromebooks — Hit Ctrl + Alt + E.
- All Chromebooks except tablets — Click More options > Enterprise enrollment.
- Enter the username and password from your Google admin welcome letter or for a Google account that is eligible to enroll.
- If prompted, enter the asset ID and location, then click Next.
- When you receive a message confirming that the device enrolled successfully, click Done.
Enroll through Zero-touch
To enroll a Chromebook through Zero-touch:
- On the Google Admin console, go to Devices > Chrome devices.
- Select the parent organization for all organizations, or select a child organization.
- Click Enroll devices in the bottom-right corner.
-
The console generates a pre-provisioning token. You can choose to:
- Copy the token and email it to a reseller, account manager, or a deployment partner.
- Revoke the token.
- Revoke and regenerate token.
- Send the token and your tenant's domain name to the pre-provisioning partner.
- The pre-provisioning partner passes your enterprise information and your device information to Google.
- The selected organization's Chromebooks display a pre-provisioned status on the Google Admin console and the KM Console.