Cortado Mobile Solutions

My Tickets

Embedding Samsung devices with Knox Mobile Enrollment

Samsung Knox Mobile Enrollment (KME) allows a large number of Samsung devices to be connected to Cortado MDM/Cortado Server automatically.

  • In order to use KME you firstly need to create a user account for your firm on the Samsung Knox website.
  • When using Cortado MDM: As soon as you have created your user account you can open the KME console via the Cortado management console. To do so, select Control Panel→ Global Settings→ MDM→ KNOX Mobile Enrollment Console (arrow in illus.) and log in with your KME user account.
  • When using Cortado Server: Open the KME using the following link and log in with your KME user account.

Adding devices

Creating MDM profile

Configuring devices

Starting up devices

Adding devices

If your reseller is also participating in KME, the devices you purchase from them can be automatically assigned to your user account. 

  • Open the menu item Resellers in the KME console (left arrow in illus.).
  • Request the Reseller ID from your reseller and provide them with your Knox Customer ID (illus.). 
  • Then enter the Reseller ID under Register reseller (right arrow in illus.).

As soon as your reseller has loaded your devices into your user account, you will find them under the menu item Devices.

Note! If your reseller does not participate in Knox Mobile Enrollment, you can register your devices manually. Instructions for this can be found here.

Creating MDM profile

  • Now open the menu item MDM Profiles (left arrow in illus.)Here you can create the MDM profile that will be used to connect the user devices with the MDM server. 
  • Click on Create profile (right arrow in illus.).

  • Then select Android Enterprise.
  • Configure the Android Enterprise profile settings as follows:

  • Profil name: Enter a profile name.
  • Description: Standard profile for KNOX Mobile Enrollment with Cortado MDM
  • Keep the radio button at: Force Device Owner enrollment
  • Pick your MDM: Other
  • MDM Agent APK:
  • MDM Server URI: Enter the address of the User Self Service Portal here:
    • When using Cortado MDM: This will comprise the hostname of the Cortado management console and the extension /up  (e.g. (You can find the hostname of the Cortado management console in the address line of your browser.).  
    • When using Cortado Server: This will comprise the DNS address of your Cortado server and the extension /up   (e.g.
  • Click Continue for further configuration of the profile:

  • When using Cortado MDM: Custom JSON Data (as defined by MDM): {"host":"[your-host-name]:443","type":"kme"} example: {"host":"","type":"kme"}
  • When using Cortado Server: Custom JSON Data (as defined by MDM): {"host":"[your-server-name]","type":"kme"} example: {"host":"[]","type":"kme"}
Note! The section [your -server-name] or [your-host-name] is a part of the URL you configured above, without the "https://" and "/up" portions.

Configure the profile according to your preferences. Also make use of the information on the Knox help page for this.

Configuring devices

  • Open the menu item Devices. There you will find all the devices your reseller has registered for you. 
  • Now select the devices to which you wish to distribute your MDM profile (left arrow in illus.) and then click on  Actions→  Configure devices (right arrow in illus.).

  • In the Device Details window select your MDM profile (arrow in illus.).
  • You can also optionally enter the user ID and/or the password for the user for whom the device is to be brought into service. If you are using Cortado MDM, use the user’s email address for this. If you are using Cortado Server enter instead the user’s AD logon name.

Starting up devices

The devices to which an MDM profile has been assigned can now be brought into service. On starting the Samsung device, the user will be asked for a user name and a password, unless you added the access data (user ID/password) in the previous step. 

For this, the users use the data that was used for registration for Cortado MDM. Alternatively, when using user importyou can provide a password for the users. 

Cortado Server users log in with their Active Directory login credentials.

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.