Unable to enroll a work profile on company-owned device

Environment

• Knox Mobile Enrollment
• Knox Manage
• Microsoft Intune
• Work profile on company-owned device

Overview

When enrolling a work profile on company-owned device, you may encounter an issue where the device displays an error message after the EMM sign-in step.

If you’re using Knox Manage, the device displays the following error message:

Push Registration Exception (Error code: KMA_F2003)

The device cannot register the push service. Update the Google Play services to the latest version and try again. If the problem continues, please contact your administrator.

If you’re using Microsoft Intune, the device displays the following error message:

Try again later

Some technical issues are preventing setup right now.

Cause

This error occurs when Knox Mobile Enrollment starts provisioning the device before Google’s check-in for the main user completes. As a result, when you try to enroll a work profile on company-owned device, an authentication error occurs.

Resolution

The Knox Mobile Enrollment team has released a fix for this issue. If a device displays this error, factory reset the device and enroll it into your EMM solution again.

If you’re still experiencing issues, submit a support ticket.