Knox Mobile Enrollment (KME)
Samsung Knox is a free and comprehensive set of hardware and software security features pre-installed in Samsung's mobile devices with Android Lollipop or greater. Knox Mobile Enrollment (KME) is a free service from Samsung to enroll Samsung mobile devices into mobile device management software.
KME streamlines the initial setup and enrollment of corporate-owned and employee-owned devices. KME is the recommended tool when an enterprise requires bulk device enrollment with little configuration variance amongst the devices deployed.
Samsung and Codeproof have worked together closely to develop a state-of-the-art cloud-based enterprise mobility management system. KME provides several advantages to users.
Fast and seamless enrollment
Enroll thousands of devices into Codeproof without any manual setup. When an employee opens their phone, they have all the management, apps, and specific configurations already in place.
Device setup includes skipping time consuming steps like registering for Google/Samsung/carrier accounts.
Profile management
Automatically sign-in to Codeproof with user credentials. Manage multiple different MDM profiles for different enrollment settings.
Tamper-proof devices
Even if a KME-enrolled device is reset, Codeproof will automatically be reinstalled and the user re-enrolled upon resetting the device.
For more information, Please read the Codeproof's KME integration guide.
How Knox Mobile Enrollment works with Codeproof
- Purchase Samsung devices through a participating Samsung reseller or carrier (T-Mobile, Verizon, AT&T) so they appear in your KME portal.
- Create an MDM profile in the Knox portal pointing to your Codeproof tenant - one profile per use case (BYOD, fully managed, kiosk).
- Assign devices in the KME portal to the right profile by IMEI, serial number, or device group.
- Ship to end users. On first power-on and Wi-Fi connection, the device detects its KME assignment and downloads the Codeproof agent automatically.
- Auto-configure: Codeproof applies the right policies, Wi-Fi / VPN profiles, certificates, and apps - no IT touch and no user setup steps.
- Tamper-resistant: even after a factory reset, the device re-enrolls automatically on first boot, restoring management state.
Why deploy Samsung devices with Knox MDM
Zero-touch enrollment at scale
Bulk-enroll thousands of Samsung Galaxy, XCover, Tab Active, and rugged devices without manual setup. Ideal for retail, logistics, manufacturing, and field-service rollouts.
Samsung Knox hardware security
Use Knox's hardware-rooted trust, attestation, and secure container alongside Codeproof's Android Enterprise policies for defense-in-depth security.
Multiple enrollment profiles
Different teams need different baselines. Maintain separate KME profiles for BYOD work-profile, fully managed (COBO/COPE), and kiosk / dedicated devices.
Factory Reset Protection
KME-enrolled devices automatically re-enroll into Codeproof after a factory reset - making them effectively tamper-resistant against unauthorized removal.
OEMConfig & Knox APIs
Codeproof integrates with OEMConfig and Knox Service Plugin (KSP) to expose Samsung-specific controls: hardware keys, peripherals, dual SIM, eSIM, and Knox containers.
Carrier-friendly
Compatible with carrier KME programs from T-Mobile, Verizon, AT&T, Sprint, and international carriers - including pre-provisioning at point of sale.
KME vs other Android enrollment methods
| Method | Best for | Devices supported |
|---|---|---|
| Knox Mobile Enrollment (KME) | Samsung-only fleets, retail rollouts, carrier-bundled devices | Samsung Galaxy, Tab, XCover, rugged Android |
| Android Zero-Touch | Multi-OEM fleets, large enterprises | Any zero-touch-eligible Android device (Samsung, Google, LG, Sonim, Zebra, etc.) |
QR / afw# enrollment |
Small fleets, hands-on IT staging | Any Android Enterprise device |
| EMM token enrollment | Fast onboarding without QR codes | Any Android Enterprise device |
Many enterprises combine KME (for Samsung devices) with Zero-Touch (for everything else) - Codeproof supports both with a single MDM profile.
Samsung Knox & KME FAQs
Is Knox Mobile Enrollment free?
Which Samsung devices support KME?
Can I use KME and Android Zero-Touch together?
Does KME work for BYOD?
What's the difference between Knox and KME?
"Throughout my experience with Codeproof, it has worked flawlessly. Even more importantly, Codeproof support is unrivaled."
Working with Codeproof has been a relief, it allows our company to have control over software and devices and visibility to ensure our employees have the proper equipment to do their job each and every day.
We didn’t make a single compromise to get the protection we wanted and needed.
We have site phones that we need locked and tracked. We have recovered lost or stolen phones...and pushed new apps remotely.
The Codeproof platform not only assists in fleet management, it has made retrieving company property far more reliable.
Customer support is always accessible, and the team consistently goes out of their way to ensure the MDM platform meets all of our needs.
Codeproof had the right balance of easy individual device configuration and group-level settings, as well as an excellent support team and willingness to add new features to meet our needs, all at a competitive price.
Having our employees work in remote locations, Codeproof has really helped us manage our devices...They are very helpful and detailed when explaining thing.
Codeproof has made device management much easier than some larger MDM solutions. From the beginning of our trial Console, up to the present, we were able to easily contact the development team at Codeproof with any ideas for improvements.
With Codeproof, the first thing I noticed is that the UI is much more intuitive and simpler to navigate. I feel like there are as many, if not more, features available to me in Code Proof but they are a little easier to find.
Foundation is so grateful for the partnership with Codeproof and their willingness to support students and families in need of literacy resources. While our technical needs are likely less than that of other companies, we have found great value in the Codeproof product.
Codeproof has great customer support. If there is an issue, or if we need assistance with anything, they are very quick to respond and lend a hand.
Terrapin Pharmacy’s Executive Management and Technology Developers would be extremely likely to recommend Codeproof to others based upon the interactions we have had with the Codeproof team and the can-do culture within their organization.
Codeproof is a very comprehensive MDM product. We received great service at all times from their technicians when we had issues. They are continually working on improving the product with feedback from customers like us, so we can have better control of our remote equipment.
[An] upbeat, well-organized, and helpful company. Codeproof provided superior customer support during a time of uncertainty.
Codeproof has been an asset in maintaining security, control and reducing liability of our mobile devices by allowing us blanketed control of our mobile fleet at all times regardless of day and location. It will continue to be the foundation for our mobile security for now and the future. Their security options and scalability is priceless.
I chose Codeproof over other players in the market because it's simple and customizable dashboard caters to the needs of my business. Codeproof tries to find solutions and treats you as partners rather than just a customer.
I chose Codeproof for our internal MDM solutions over other options because the case study and utilization of the system were very understandable. It decreased our potential costs related to device investments while increasing device security and reducing operational costs.