Overview

Knox Mobile Enrollment is a service under the umbrella of the Knox Suite bundle of products. It provides seamless, reliable setup and enrollment of corporate-owned devices in EMMs.

For active Knox Suite license holders, Knox Mobile Enrollment introduces advanced profiles, an enhanced type of profile that complements regular profiles and ensures secure deployment by providing you more controls for locking devices in unexpected scenarios. More specifically, advanced profiles let you:

• Automatically lock a device to ensure that device users can't bypass provisioning and registration.
• Remotely lock a device to prevent information security leaks in the event of device loss or theft.
• Immediately lock a device if it becomes rooted or starts running unofficial firmware.
• Easily lock or unlock one or more devices in one swift action and monitor their lock statuses.
• Unlock a device in secure offline environments using a one-time PIN.

Key features

Feature name	Description
Lock unenrolled devices	Automatically locks the device if it isn't enrolled in an EMM by a specified date.
Anytime remote lock/unlock	Manually lock the device in scenarios when it's lost or stolen.
Advanced device information	For devices that are assigned advanced profiles, the Advanced tab allows locking and unlocking these devices in one swift action, and PIN-based device unlocking. It also provides more detailed information such as the profile statuses and device lock statuses.

Prerequisites

To use advanced profiles, you need:

• A Samsung account and a Samsung Knox account. For more information, see Create your Samsung accounts.
• Uploaded Samsung devices running Android 9 or higher.
• A valid Knox Suite license.
• An EMM that supports Knox Mobile Enrollment.
• The correct firewall exemptions needed to securely connect to the Knox Mobile Enrollment server. For more information on this topic, see Firewall exceptions.
• A supported web browser — Google Chrome, Microsoft Edge, or Mozilla Firefox.
• An admin account.