Menu

Use Zero Touch Enrollment (Android Enterprise devices only)

Zero Touch Enrollment (ZTE) allows you to quickly and easily enroll a large number of corporate-owned Android Enterprise devices for non-Samsung devices. Once the devices are registered to the ZTE Portal, the devices are automatically enrolled when users connect to the Internet and log in to Knox Manage. Even if you reset the devices enrolled by ZTE, the Knox Manage application is reinstalled automatically and the devices are re-enrolled in to Knox Manage.

ZTE provides the following advantages:

  • Enrolls a large number of devices in bulk without having to manually enroll each device.
  • Allows the ZTE devices to automatically install the Knox Manage application when the ZTE devices are reset.
  • Prevents unauthorized devices from joining your EMM environment to enhance your security.
  • Allows resellers to add devices to the ZTE Portal.

To enroll devices using ZTE, the following procedures must be performed.

Before using Zero Touch Enrollment (ZTE)

To use Zero Touch Enrollment (ZTE) properly, the following must be prepared:

  • Make sure that the devices are compatible with ZTE from the list of Android Zero Touch Devices.
  • Prepare a device from the following carrier or reseller to use ZTE:
    • Zero touch reseller partner
    • Google partner and not from a consumer store.
  • Make sure the devices are running on Android Oreo (8.0 and later) or a Pixel phone with Android Nougat (7.0).
  • Sign up for a Google account associated with the corporate email. A personal Gmail account cannot be used. To create a Google account for the corporate, visit the Google website.
  • Before enrolling devices using Android Enterprise’s Fully Managed Device, make sure the devices are running on Samsung Galaxy S8 and Android 5.0 (Lollipop) or above. For more information about Android Enterprise, visit the Android website.

Logging in to the Zero Touch Enrollment (ZTE) Portal

You can log in to the Zero Touch Enrollment (ZTE) Portal using the Google account with the corporate email.

To log in the ZTE Portal, complete the following steps:

1. Visit the ZTE Portal.

2. Enter your Google account information and then click NEXT to log in to the ZTE Portal. Once you have logged in to the ZTE Portal, the following navigation pages are provided on the ZTE Portal.

  • Configurations: Create, modify, and delete Knox Manage configurations.
  • Devices: Displays the registered device list. You can assign also apply the created Knox Manage configurations to the selected devices on the list.
  • Users: Add, modify, or delete the users who can access and manage the portal.
  • Resellers: Add resellers to share your account with multiple resellers.

Creating Knox Manage configurations

To create Knox Manage configurations, complete the following steps:

1. On the Zero Touch Enrollment (ZTE) Portal, navigate to Configurations.

2. On the “Configurations” page, click .

3. In the “Add a new configuration” window, enter the following information.

  • Configuration name: Enter a configuration name.
  • EMM DPC: Select Samsung Knox Manage from the EMM DPC dropdown list.
  • DPC extras: Enter the JSON data (Samsung Knox Manage DPC extras) as follows.

{

“android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED”:true,

“android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE”: {

“ServerUrl”: “Your Server Url”,

“TenantId”: “Your Knox Manage Tenant ID”,

“TenantType”: “M”,

“Method”: “ZeroTouch”

}

}

 

Note: Enter the server URL of the DPC extras for the applicable region as stated in the following table:

Region Domain
Asia https://ap01.manage.samsungknox.com/emm
Asia (India only) https://ap02.manage.samsungknox.com/emm
US https://us01.manage.samsungknox.com/emm
EU https://eu01.manage.samsungknox.com/emm

EU

https://eu01.manage.samsungknox.com/emm

 

  • Company Name: Enter the name of your organization. It will be displayed on the user’s device during enrollment.
  • Support email address: Enter a corporate IT admin email address. It will be displayed on the user’s device during enrollment, and it can be used to contact the IT admin in case of any enrollment issues.
  • Support phone number: Enter a corporate IT support phone number. It will be displayed on the user’s device during enrollment, and it can be used to contact the IT admin in case of any enrollment issues.
  • Custom message: Enter an optional message to be displayed on the device screen during enrollment.

4. Click Add to create a new Knox Manage configuration.

Assigning Knox Manage configurations to ZTE devices

Once Zero touch reseller partners have registered devices in the Zero Touch Enrollment (ZTE) Portal, assign the newly created Knox Manage configurations to the devices. You can assign them to the registered devices either individually or in bulk using a CSV file.

Individual Assignment

To assign a Knox Manage configuration to a device individually, complete the following steps:

1. On the Zero Touch Enrollment (ZTE) Portal, navigate to Devices.

2. On the “Devices” page, select the devices to which configurations are to be applied to on the device list, and then, under Configuration, against the selected devices, the Knox Manage configuration which you have created previously.

Bulk Assignment

To assign Knox Manage configurations to multiple devices at once using a CSV file, complete the following steps:

1. On the Zero Touch Enrollment (ZTE) Portal, navigate to Devices.

2. On the “Devices” page, click > Download results as .csv to download the CSV file, and then enter the device information in the CSV file.

  • Open the CSV file and fill out the following fields in the file.
Field Example Description
modemtype IMEI This field should be always set as IMEI in uppercase characters.
modemid 123456789012347 Enter the IMEI number of the device.
serial ABcd1235678 Enter the serial number of the device.
model VM1A Enter the model name of the device.
manufacturer Google Enter the name of the device manufacturer.
Profiletype ZERO_TOUCH This field should always be set as ZERO_TOUCH in uppercase characters.
Profileid 54321 Enter the numeric ID of the configuration you want to apply to the device. To see the configuration ID, check the table's ID column on the “Configurations” page. To remove the device from zero-touch enrollment, enter 0 (zero).

3. On the “Devices” page, click > Upload batch configurations, and then select the saved .csv file to upload it. All the devices in the CSV file will be assigned to the specific Knox Manage configuration.

Logging in to Knox Manage for enrollment

After the Knox Manage configuration is assigned to ZTE devices, log in to Knox Manage to enroll the devices.

To log in to Knox Manage for enrollment, complete the following steps:

1. Turn on the factory-reset device, and then tap Start on the Zero Touch Device Enrollment screen.

2. On the “Connect to mobile network” screen, insert a sim card or tap Skip.

3. On the “Connect to mobile network” screen, tap an available Wi-Fi network to connect to a network. The device will check for updates.

4. On the “Set up your device” screen, read the privacy policy of Knox Manage and Google, and then tap Accept & continue. The device will get account information for Knox Manage.

5. On the “Google Services” screen, tap Accept. The Knox Manage application will be installed and launched automatically on the device.

6. On the “Sign in with your Samsung Knox Manage Account” screen, enter a user ID and password, and then tap SIGN IN to sign in to Knox Manage.

7. On the Knox Manage terms and agreements screen, read the terms of use, privacy policy, and end-user license agreement, tap the checkbox next to Agree all, and then tap NEXT.

8. On the “Display over other apps” page, if required, tap All display over other. The device will be registered and enrolled in the Knox Manage Admin Portal.

Deleting ZTE devices from the Zero Touch Enrollment (ZTE) Portal

You can delete devices from the ZTE Portal if you are required to transfer ownership. You can delete one device at a time by selecting devices in the ZTE Portal.

To delete devices from the ZTE Portal, complete the following steps:

Note: After you delete a device, you need to contact your reseller if you want to register the device in the ZTE Portal again. Consider removing the Knox Manage configuration, if you want to temporarily exclude a device from the ZTE Portal.

1. On the Zero Touch Enrollment (ZTE) Portal, navigate to Devices.

2. On the “Devices” page, select the device you want to remove, and then click DEREGISTER.

3. In the “Deregister device?” window, click DEREGISTER to delete the devices from the ZTE Portal