KME Mobile Phones & Portable Devices Driver Download For Windows

Kme Mobile Phones & Portable Devices Driver Download For Windows 8.1
Kme Mobile Phones & Portable Devices Driver Download For Windows 8
Kme Mobile Phones & Portable Devices Driver Download For Windows 10

I wrote a blog post a week ago about the Apple’s DEP program and how to use it with Microsoft Intune. In the second part of the Mobile Device Automatic enrollment blog series, I focus on Samsung’s KME program.

Samsung’s KME program is pretty much the same than the DEP on Apple world. It will help end-user’s enrollment process in a significant way. Currently there is a big step evolving in Android device management. Android Enterprise (previously known as Android for Work) is going to be the mandatory management method, because Google is dropping out the support of Device Admin in Android Q that will be published in 2019.

Realme is an emerging mobile phone brand which is committed to offering mobile phones with powerful performance, stylish design and sincere services.
KME Works For You KME is a true sole source manufacturer of high quality, custom fire apparatus serving communities across the USA. Choose from a wide range of apparatus that includes ARFF, Aerial, Industrial, Pumper, Rescue, Tanker, and Wildland Products built on custom or commercial chassis.

Get reviews, hours, directions, coupons and more for KME Fire Apparatus at 5400 Jurupa St, Ontario, CA 91761. Search for other Fireproofing Materials in Ontario on The Real Yellow Pages®. Knox Mobile Enrollment (KME) streamlines the initial setup and enrollment of corporate-owned and employee-owned devices. KME is the recommended tool when an enterprise requires bulk device enrollment with little configuration variance amongst the devices deployed. Phone:+61 2 8424 2000 Mobile: +61 433 193 626. Australia Wright Metals. Phone: +612 9827 0775. Phone +41 43 388 20 00 Fax +41 43 388 20 01.

Every enterprise mobility management solution must implement the Android Enterprise solutions much more quickly than the vendors have maybe thought. There are several methods to implement Android Enterprise for Samsung devices and Intune supports all of methods. I’m not now going through those methods more closely, but you can manage couple of these methdos through the KME program, so select the right implementation for your scenario. Methods are:

Personally-enabled devices: End-users can run private applications normally on device, but all work applications are on work-profile that is managed by company This method is not supported at all by KME!!!
Corporate-owned dedicated device: Locked down kiosk-mode devices that run one or more applications only
Corporate-owned fully managed user devices: Only work mode enabled, personal side not available at all.

Ensure that KME is available in your region. There are only selected countries where you can use it.

You should also look for supported devices for Samsung KME that you don’t implement KME just for fun. Find a list of supported devices here.

To get started fill this form on Samsung’s website. (Link is for Europe-area, for other regions, select Apply now from KME website).
When filling the form, remember to use general e-mail address for example intune.kme@bloggerz.cloud (of course you have to create the e-mail first). This is the first account for your KME and you can’t change it later. If you leave the company, KME is still available for later usage without your personal e-mail.

After filling the KME form, Samsung will confirm your company and send you an e-mail to address that you have given in the registration. In the e-mail you have a link to complete the registration process. When you can sign-in it’s only configuring the KME.

Create a new google account for your company e.g. intune.google@bloggerz.cloud. After that go to Intune Android Device Enrollment page and select Launch Google to connect now. Follow the wizard to create Managed Google Play account. After this you are able to continue towards the Android Enterprise configurations.

After you have Managed Google Play -account, approve Intune Company Portal and its updates from Google Play work-store for your environment.

From Intune in Device enrollment restrictions, create a new restriction policy for your pilot group to enable Work profile enrollment. If you enable the restriction to default policy, it will override your Android Device Admin-setting on devices that are capable for Android Enterprise. That is a reason why to create own policy for it.

Select Android Enterprise methods

KME Mobile Phones & Portable Devices Driver Download For Windows

Before you configure the integration you have to know what do you want to achieve. Select methods that you want use for your end-devices. I won’t go anymore through here the configuration of KME to device admin, because it’s deprecated and will not work anymore in Android Q in 2019. I know that many organizations want to use still Device Admin management method, but you just have to take the step towards the Android Enterprise – sooner or later. Now it’s a good time for it!

Personally-enabled devices

As mentioned earlier, this scenario is not supported by KME. End user must download the Company Portal manually and enroll it to the work profile by hand. This enrollment type is planned for devices that shares personal and work applications in the same device.

Corporate-owned dedicated device

Corporate owned dedicated device (locked kiosk-mode device) can be enrolled to Intune management automatically with KME-enrollment process. In the Intune select Android enrollmentand Corporate-owned dedicated devices. Create a profile for enrollment and open it and select Token and Show token.

Copy the token text for later usage. I will show how to get a token now from Corporate owned, fully managed user devices. After that paragraph we will continue with this method also, because the steps are same.

Corporate-owned fully managed user devices

Corporate owned fully managed user devices can be enrolled to Intune management automatically with KME-enrollment process. In the Intune select Android enrollment and Corporate-owned fully managed user devices. Select Allow users to enroll corporate-owned user devices: Yes and copy the Enrollment token that appears on the screen.

Configuring KME portal

To configure KME portal, you should create a profile under KME console (link to EU based site). This post has been written in March 2019, so if something is not working, please consult Microsoft’s documentation of Knox Mobile Enrollment.

Select Actions and Add. Do not add Server URI for Intune purposes at all when the profile wizard asks it.

Enter name of your profile and description. Also fill your support contact details

For MDM Agent APK write next URI: https://aka.ms/intune_kme_deviceowner

Select Enable this app as a Google Device Owner and select Microsoft Intune from the list. Enter next JSON-data to Custom JSON Data -field. Remember to replace your token that you created in Intune between the two last quotation marks.

Change the default profile for your reseller under resellers-page. You can also add a new reseller from here by adding their KME reseller ID to the list. Remember to choose if you want to enable automatic approval for all devices that the specific reseller uploads to your portal.

Now you can give your Knox Customer ID to your reseller. You find the Knox Customer ID also from the Resellers -page. After your reseller confirms the KME configuration, you can test the process by ordering a brand new Samsung phone straight from your own reseller.

Knox Deployment Application

For testing purposes you can also use Knox Deployment Application to enroll Samsung Devices to the KME-portal. Download the Knox Deployment Application from Google Play -store to your Android device and log on to it with your Samsung account attached to the KME-portal. You have several ways and easy wizards to proof the KME concept without adding any resellers to your environment.

Summary

KME is Samsung’s enrollment program that helps the admin to achieve easier and managed enrollment process with Samsung phones. Enrollment program works perfectly with Intune and supports two different kind of enrollment scenarios. Samsung’s KME is free and you can start using it almost immediately if you want. If you are not sure – test it. Remember to ensure from your reseller that they are KME approved reseller for Samsung phones.

Find also my other posts about Mobile Device Automatic Enrollment:

Before you Begin

Access to Samsung Knox account
Procure a Samsung Device from an authorised reseller which KDP Device supplier.
You can also enroll your devices that are not purchased from authorised reseller. In this case you would require,
1. A Samsung device that you want to enroll: The device should support Knox version 2.4 and above.
2. Another device where you can install the Knox Deployment App
Create a MDM Profile for Samsung KME Devices.

Enrolling Samsung Devices

Devices procured from a Registered Reseller

You can purchase devices from a Registered Reseller who can supply KME devices. Once you register a reseller, you can choose to Auto approve the devices procured from them and assign a MDM Profile that you have created in previous steps. Please follow the steps here to register a reseller and assign a default MDM Profile. The enrollment video below shows the enrollment experience on the devices.

Video Tutorial

Devices purchased from Carrier or Directly:

KME allows you to enroll your devices that you may have purchased from Carrier or from Online/offline stores. These devices require the following steps before the device is enrolled in KME,

Pre-Requisites

Target Device: On the Samsung device that needs to be enrolled, verify that the Knox version of the target device is more than 2.4. This can be verified in the Settings > About Phone > Software Information. For easy understanding let us call this as Target Device in next steps.
Seed Device: You would need another device that would help in the enrollment. This device can be any device where you can Download and Install Knox Deployment App from Google Play Store on another device. For east understanding let us call this device Seed Device in next steps.
Probably another cup of coffee :-)

Video Tutorial

A quick video demonstrating how to use Knox Deployment App to enroll a Samsung A10 and a Device Admin MDM Profile

Note: In case of a Device Owner Profile, the device will be factory reset before the enrollment.

Steps

First on the Seed device, launch the Knox Deployment App. Sign In using your KME credentials.
Click on Knox service & select Knox Mobile Enrollment. You will be shown the MDM Profiles that you have created on KME console.

Click on the MDM Profile that you want to enroll. For this demo we are using a Device Admin MDM profile, e.g: Sales-Unit-DA

If you select a Device Owner MDM Profile then the device will be factory reset before the enrollment is started. The enrollment flow will be similar to as shown in Devices procured from a Registered Reseller section.

Now select the Deployment Mode, which means how you are going to pair the Seed and Target device for the enrollment to start. For this option we will use Bluetooth. The options are,
1. Bluetooth: This mode will start the enrollment by pairing the two devices using Bluetooth. Because of its wide availability this is a preferred option. You would need to select a duration for how long the bluetooth will be ON on the target device. It normally takes about 5 minutes to enroll one device. Depending upon the number of devices please choose an appropriate duration.
2. NFC: This mode requires that both seed and target devices have a NFC chip and support NFC beam.
3. Wi-Fi Direct: Use Wi-Fi direct on the target device to deploy the profile.
Wi-Fi for Deployed Devices: This option is useful if you are enrolling the target device in Device Owner mode, so that when they are factory reset they can pickup a Wi-Fi automatically.
Click START DEPLOYMENT once ready.

Now the focus shifts to Target Device. On the target device, launch the browser app and navigate to https://me.samsungknox.com. Click NEXT once the page loads.

This will start the enrollment process and ask you for a confirmation. Click NEXT again,

At this point of time, the seed and target devices will be paired and if it succeeds you will see the following screen. Click NEXT

Once you agree to the Samsung Knox Terms, the device will start enrolling the device by downloading the Scalefusion APK, launching the APK and then directly taking you to permissions screen. If it succeeds then you would see the following screen,

If you had selected a Device Owner MDM Profile, then the device will be factory reset.

From this point onwards this is the normal Scalefusion setup process. Please grant all the permissions and complete the setup. Once the device is enrolled, it would start appearing in Samsung KME portal and also Scalefusion Dashboard.
1. Samsung KME Portal > Devices
2. Scalefusion Dashboard > Devices

Un-enrolling a Device or Deleting a Device

To un-enroll a device from KME program please delete the device from the Samsung KME portal. This would just delete the device from KME programme and make sure that the device does not enforce the enrollment upon subsequent factory reset or if you uninstall Scalefusion app.

Note that this step is irreversible and would require you to re-enroll the device using Knox Deployment App to manage it via KME.

The step above, remove the device from KME program. However the device is still managed by Scalefusion. To remove the device management, please follow the steps below,
1. Delete the device from Scalefusion Dashboard
2. Uninstall Scalefusion app from device system settings. Note that if the device was setup as Device Owner, it may require factory reset.

Frequently Asked Questions

Question: Why do we have to complete the EMM setup to use Samsung KME Program?

Answer: Samsung works closely with Android Enterprise program and the Device Owner profile type helps you leverage the EMM features apart from the Knox features.