Knox Mobile Enrollment (KME)

Samsung Knox is a free and comprehensive set of hardware and software security features pre-installed in Samsung's mobile devices with Android Lollipop or greater. Knox Mobile Enrollment (KME) is a free service from Samsung to enroll Samsung mobile devices into mobile device management software.

KME streamlines the initial setup and enrollment of corporate-owned and employee-owned devices. KME is the recommended tool when an enterprise requires bulk device enrollment with little configuration variance amongst the devices deployed.

Samsung and Codeproof have worked together closely to develop a state-of-the-art cloud-based enterprise mobility management system. KME provides several advantages to users.

Fast and seamless enrollment

kme

Enroll thousands of devices into Codeproof without any manual setup. When an employee opens their phone, they have all the management, apps, and specific configurations already in place.

Device setup includes skipping time consuming steps like registering for Google/Samsung/carrier accounts.

Profile management

Automatically sign-in to Codeproof with user credentials. Manage multiple different MDM profiles for different enrollment settings.

Tamper-proof devices

Even if a KME-enrolled device is reset, Codeproof will automatically be reinstalled and the user re-enrolled upon resetting the device.

For more information, Please read the Codeproof's KME integration guide.

How Knox Mobile Enrollment works with Codeproof

  1. Purchase Samsung devices through a participating Samsung reseller or carrier (T-Mobile, Verizon, AT&T) so they appear in your KME portal.
  2. Create an MDM profile in the Knox portal pointing to your Codeproof tenant - one profile per use case (BYOD, fully managed, kiosk).
  3. Assign devices in the KME portal to the right profile by IMEI, serial number, or device group.
  4. Ship to end users. On first power-on and Wi-Fi connection, the device detects its KME assignment and downloads the Codeproof agent automatically.
  5. Auto-configure: Codeproof applies the right policies, Wi-Fi / VPN profiles, certificates, and apps - no IT touch and no user setup steps.
  6. Tamper-resistant: even after a factory reset, the device re-enrolls automatically on first boot, restoring management state.

Why deploy Samsung devices with Knox MDM

Zero-touch enrollment at scale

Bulk-enroll thousands of Samsung Galaxy, XCover, Tab Active, and rugged devices without manual setup. Ideal for retail, logistics, manufacturing, and field-service rollouts.

Samsung Knox hardware security

Use Knox's hardware-rooted trust, attestation, and secure container alongside Codeproof's Android Enterprise policies for defense-in-depth security.

Multiple enrollment profiles

Different teams need different baselines. Maintain separate KME profiles for BYOD work-profile, fully managed (COBO/COPE), and kiosk / dedicated devices.

Factory Reset Protection

KME-enrolled devices automatically re-enroll into Codeproof after a factory reset - making them effectively tamper-resistant against unauthorized removal.

OEMConfig & Knox APIs

Codeproof integrates with OEMConfig and Knox Service Plugin (KSP) to expose Samsung-specific controls: hardware keys, peripherals, dual SIM, eSIM, and Knox containers.

Carrier-friendly

Compatible with carrier KME programs from T-Mobile, Verizon, AT&T, Sprint, and international carriers - including pre-provisioning at point of sale.

KME vs other Android enrollment methods

Method Best for Devices supported
Knox Mobile Enrollment (KME) Samsung-only fleets, retail rollouts, carrier-bundled devices Samsung Galaxy, Tab, XCover, rugged Android
Android Zero-Touch Multi-OEM fleets, large enterprises Any zero-touch-eligible Android device (Samsung, Google, LG, Sonim, Zebra, etc.)
QR / afw# enrollment Small fleets, hands-on IT staging Any Android Enterprise device
EMM token enrollment Fast onboarding without QR codes Any Android Enterprise device

Many enterprises combine KME (for Samsung devices) with Zero-Touch (for everything else) - Codeproof supports both with a single MDM profile.

Samsung Knox & KME FAQs

Is Knox Mobile Enrollment free?
Yes. Samsung provides Knox Mobile Enrollment at no cost. You only pay for your MDM platform (Codeproof) and the devices themselves.
Which Samsung devices support KME?
Most Samsung Galaxy, Tab, XCover, and Knox-certified rugged devices on Android 7 and above. The device must be purchased through a participating reseller / carrier that registers it in the Knox portal.
Can I use KME and Android Zero-Touch together?
Yes. You can enroll Samsung devices via KME and non-Samsung devices (Google, LG, Sonim, Zebra, etc.) via Android Zero-Touch, all pointing to the same Codeproof tenant.
Does KME work for BYOD?
KME is primarily for company-owned devices. For Samsung BYOD, use the Android Enterprise work profile via QR code or app-based enrollment to keep personal and work data separated.
What's the difference between Knox and KME?
Samsung Knox is the platform: hardware security, secure containers, attestation, and OEM APIs. Knox Mobile Enrollment (KME) is Samsung's free service for bulk-enrolling Samsung devices into an MDM. They work together.

Maximize employee productivity through Codeproof