Set up

Samsung mobile devices are designed to maintain a secure mobile environment. To successfully deploy and maintain such an environment requires coordination with multiple parties including:

Enterprise/Mobile Device Management (EDM/MDM) software
Carriers
Mobile Device Administrators
Users

If you haven't yet, ensure you review the minimum requirements for the Knox Platform for Enterprise.

Sign up for Knox Portal

Knox licenses are managed from your Samsung Knox portal account. Your Knox portal account provides access to various Knox tools through the Samsung Knox Dashboard. This include Knox license key validation, the Knox Bluetooth & USB Smart Card client, the Android VPN client for Knox and more. Your account also allows you to manage your license keys and create support tickets if you are having issues with a product.

If you haven't yet, sign up for a Knox Portal account.

Get a Knox License

See About Knox Licenses for information on how to obtain and activate a Knox License.

Whitelist Samsung servers

You must ensure your enterprise devices have access to the following Knox servers. When you activate Knox services, your devices will verify their license keys. Devices periodically check their licenses a few times a week.

If you are behind a firewall, add these servers to your allowlist:

License servers

Theses servers allow you to activate your license.

REGION	DESTINATION	PORT	SERVICE
Americas	gslb.secb2b.com	443	GSLB
	us-elm.secb2b.com	443	ELM
	us-prod-klm-b2c.secb2b.com	443	KLM
	us-prod-klm.secb2b.com	443	KLM
EMEA	gslb.secb2b.com	443	GSLB
	eu-elm.secb2b.com	443	ELM
	eu-prod-klm-b2c.secb2b.com	443	KLM
	eu-prod-klm.secb2b.com	443	KLM
China	china-gslb.secb2b.com.cn	443	GSLB
	china-elm.secb2b.com.cn	443	ELM
	china-b2c-klm.secb2b.com.cn	443	KLM
	china-prod-klm.secb2b.com.cn	443	KLM

Samsung ActiveSync Server

This server is required for email activation and sync.

REGION	DESTINATION	PORT	SERVICE
N/A	https://api.samsungapps.com/ activesync/activate/activesync	443	MS