Enroll a device

Device enrollment consists of installing the Knox Manage agent on a device and registering it in your tenant. Enrolling devices in Knox Manage allows you to configure, monitor, and manage devices.

Once a device is enrolled, the settings you configured for it will control the behavior of the device.

There are multiple methods to enroll devices in Knox Manage:

Before you begin

To enroll a device, you need:

• An existing user in Knox Manage
• A factory-reset device

Use a QR code

With this method, you must send the enrollment guide to device users to initiate the enrollment process. The Knox Manage enrollment guide contains brief instructions and a personalized QR code.

To send the enrollment guide:

1. Go to the Users page. Select one or more device users with a device to enroll. To find specific users, enter a user name, user ID, or group name, and click SEARCH. Searching by a full user name is case-sensitive.
2. Click ACTIONS > Send enrollment guide. The Send enrollment guide dialog displays.
3. Click CONFIRM to email an enrollment guide to the selected users. The selected users receive an email titled [Knox Manage] Enroll Your Device with enrollment instructions.
4. Instruct device users that they must follow the instructions in the guide to enroll their devices. To enroll, they need the password you set for them when you created their user account.

Alternatively, you can go to Groups and complete the above steps to send the enrollment guide to all of the users in a group. For more information about adding users to groups, see Manage groups.

To enroll their device, the device user must:

1. Turn on the factory-reset device.

2. Tap the Welcome screen six times instead of clicking Start. The taps can be anywhere on the screen, as long as all six taps are around the same place.

   

3. The camera on the device launches. Use it to scan the QR code from your [Knox Manage] Enroll Your Device email.

4. On the Connect to Wi-Fi screen, select and connect to your preferred Wi-Fi network. Then, tap Next.

5. Tap Continue to acknowledge that your admin will manage and monitor your device with Knox Manage.

6. Tap Accept & continue to acknowledge that the newly-added device belongs to your organization. The Knox Manage agent launches automatically. Your user ID is automatically filled in.

7. Enter your password, then tap SIGN IN.

   

8. Read the Privacy Policy and select I agree if you agree to its terms and conditions. Then, tap NEXT.

9. If Reset password after sign-in was enabled during user creation, change your temporary password. Enter your current password, your new password, and confirm your new password again. Then, tap CHANGE.

10. On the Google services screen, enable or disable the Location and Device maintenance services. Then, tap Accept.

11. On the For your review screen, read the End User License Agreement and Privacy Policy. You can also select Sending of Diagnostic Data if you agree. To finish setting up your device, tap Agree.

Your device is finished enrolling in Knox Manage.

Use a token

With this method, the device user enters a token to enroll the device: afw#KnoxManage. The token also automatically installs and starts the Knox Manage agent on the device, which device users sign in to with their credentials.

To enroll a device with the afw#KnoxManage token, the device user must:

1. Turn on the factory-reset device. On the device screen, tap Start.
2. Read through the End User License Agreement and the Privacy Policy. If you agree to them, select each one and click Agree. The device checks for updates and the updated terms and conditions are applied.
3. On the Easy setup with another device screen, select Set up manually.
4. On the Choose a Wi-Fi network screen, select an available Wi-Fi network, then tap Next.
5. On the Connect to a mobile network screen, choose one of the following options:
   • Transfer SIM from another phone
   • Scan QR code
   • Search for mobile plans
   • Set up later in Settings
6. On the Copy apps & data screen, select Don’t copy.
7. On the screen to sign into your Google Account, enter the token: afw#KnoxManage. Then tap Next.
8. On the How will you use this phone? screen, choose Fully managed device.
9. Tap Continue to acknowledge that your admin will manage and monitor your device with Knox Manage.
10. Tap Accept & continue to acknowledge that the newly added device belongs to your organization.
11. On the Google services screen, enable or disable the Location and Device maintenance services shown. Then, tap Accept.
12. Sign in to the Knox Manage agent with your user ID and tap NEXT. Then enter your password and tap SIGN IN.
13. Read the Privacy Policy and select I agree if you agree to its terms and conditions. Then, tap NEXT.

Your device is finished enrolling in Knox Manage and is ready to use.

Use Knox Mobile Enrollment

Knox Mobile Enrollment allows you to easily install the Knox Manage agent on numerous corporate-owned, Samsung devices. With enrollment profiles, you can also define the services that devices enroll in, how the devices are enrolled, and what the devices can do during and after enrollment. To learn more about Knox Mobile Enrollment profiles, see Create an enrollment profile.

Once an enrollment profile is applied to a device, the device user must sign in to the Knox Manage agent with their account credentials. See Device enrollment for more information.

Zero-touch enrollment

Similar to Knox Mobile Enrollment, zero-touch allows you to provision numerous corporate-owned devices for enrollment in your company account. After a device is registered with zero-touch, it automatically enrolls when the device user connects to the Internet and signs in to the Knox Manage agent.

Before you use zero-touch enrollment

To use zero-touch enrollment:

• Prepare a device running Android 9 and higher from a zero-touch reseller partner.
• Sign up for an enterprise Google account. A personal Gmail account cannot be used. To create a Google account for enterprise use, go to Create your Google account.
• Link your zero-touch account to your Knox Manage company account.

Link your zero-touch account to Knox Manage

To link your zero-touch account with your Knox Manage company account:

1. Click your account icon, then click Settings.
2. Go to KNOX MANAGE > ANDROID ENTERPRISE > ZERO-TOUCH ACCOUNT > EDIT ACCOUNT.
3. Follow the steps on screen.

Once your zero-touch account is linked, you can create a configuration for Knox Manage on the zero-touch enrollment portal. For more information, see Zero-touch enrollment for IT admins.