You can configure devices in your organization to enroll as Android work managed mode using Knox Mobile Enrollment (KME) portal.

Work Managed mode, also called Device Owner, is scoped to the whole device on Android devices. The device owner has a much greater level of control over the device, and can configure policies, lock down the device, prevent access to certain applications and settings, and prevent any malicious behavior.

To configure the KME portal for Android work managed devices:

  1. Select Add to create an MDM Profile to configure enrollment into an environment where Android is enabled.


    For more information on configuring Android, see Introduction to Workspace ONE UEM Integration with Android.

  2. On the next page, select Add MDM applications and enter the URL for the AirWatch Agent. Do not add any other MDM applications.

    KME_add mdm apps

  3. Select Enable this app as a Google Device Owner to set the Agent APK as the device owner.

  4. Select AirWatch in the Supported MDM drop-down.


  5. In the custom JSON text box below, add {"gid":"yourgroupID" or "groupid"} which specifies the Organization Group ID for device enrollment.


    Use "GID" JSON text if you are using AirWatch Agent v8.1 for Android and below. Use JSON text "groupid " for AirWatch Agent v8.2 and above.


  6. Optional Add extra EULA agreements or Knox licenses to the configuration.

  7. Select Add User to create the enrollment user name and password to the device in KME portal.

    add user_kme


  8. Navigate to the Devices Details page, select, and edit the device to assign the MDM profile and enrollment user. The device needs to be pre-registered in the portal, typically by your Samsung Reseller.


  9. From a factory state, power on the device and connect it to the Internet through the cellular network or Wi-Fi. Knox mobile enrollment automatically starts and enrolls the device into work managed mode.