Knox Mobile Enrollment and Android Work Managed Mode

You can configure devices in your organization to enroll as Android work managed mode using Knox Mobile Enrollment (KME) portal.

Work Managed mode, also called Device Owner, is scoped to the whole device on Android devices. The device owner has a much greater level of control over the device, and can configure policies, lock down the device, prevent access to certain applications and settings, and prevent any malicious behavior.

Procedure

1. Select Add to create an MDM Profile to configure enrollment into an environment where Android is enabled.
   
2. On the next page, select Add MDM applications and enter the URL for the Workspace ONE Intelligent Hub. Do not add any other MDM applications.
3. Select Enable this app as a Google Device Owner to set the Workspace ONE Intelligent Hub APK as the device owner.
4. Select AirWatch in the Supported MDM drop-down.

   

5. In the custom JSON text box below, add {"gid":"yourgroupID" or "groupid"} which specifies the Organization Group ID for device enrollment.Use "GID" JSON text if you are using v8.1 for Android and below. Use JSON text "groupid " for v8.2 and above.

   

   Note: The group ID key {gid}is n ot the same as Android Legacy KME.
6. (Optional) Add extra EULA agreements or Knox licenses to the configuration.
7. Select Add User to create the enrollment user name and password to the device in KME portal.

   

8. Navigate to the Devices Details page, select, and edit the device to assign the MDM profile and enrollment user. The device needs to be pre-registered in the portal, typically by your Samsung Reseller.

   

9. From a factory state, power on the device and connect it to the Internet through the cellular network or Wi-Fi. Knox mobile enrollment automatically starts and enrolls the device into work managed mode.