December 4, 2019

QR code enrollment (for Android 10 devices)

Samsung Knox Team

The Samsung Knox team is pleased to introduce QR code enrollment as a fourth device-side enrollment option for Android 10 devices in addition to existing Bluetooth, NFC, and Wi-Fi Direct options. A QR code is a unique matrix barcode containing information about the item to which the QR code is attached.

QR codes allow you to quickly and easily enroll devices and optionally connect to a Wi-Fi supported wireless network, regardless of location as long as the generated QR code contains the correct network Wi-Fi credentials.

QR code enrollment begins with a device plus-sign (+) gesture that activates the device’s camera in QR code recognition mode. Once a QR code is recognized, a Wi-Fi connection is established and enrollment begins. If there are no Wi-Fi credentials within the QR-code, then the device user is prompted to provide them, as these are the Wi-Fi connection credentials used during device enrollment in Device Owner (DO) mode. The QR code profile configuration is defined within the KME console’s Device Owner profile settings screen by selecting the ADD QR CODE button that is only available for Android 10 devices.

By default, the QR code is only used for devices uploaded by resellers, but there is an option for non-reseller uploads as well. Consider non-reseller uploads to reduce the dependency of reseller involvement and the use of the Knox Deployment App (KDA).

If adding a Wi-Fi network configuration to the QR code, define the security option as None, WEP, or WPA/WPA2. The QR code contains the profile ID, country, and an optional Wi-Fi SSID and password, all in a non-encrypted JSON format. Therefore, QR codes should only be shared with trusted admins.

The Samsung Knox team recommends enabling wireless isolation on the network’s access point or router resource when adding a Wi-Fi configuration to a QR code. Enabling wireless isolation restricts a wireless computer from accessing other computers connected to the local network, effectively isolating that device on the network. The means to enable wireless isolation differs depending on the router or access point manufacturer. Refer to the documentation available from the manufacturer for their specific instructions on enabling wireless isolation.

For information on configuring a KME DO profile supporting QR code enrollment, go to:

[Icon] close

Get started with Samsung Knox

[Icon] suitcase
Are you a reseller, solution provider, or service provider?

Become a Knox Partner and grow your business today.

[Icon] info

Select a Knox product to start with:

All-in-one Bundle
Knox Suite
Rebranding and Customization
Knox Configure
Fraud and Theft Protection
Knox Guard
Device Protection Plan
Samsung Care+ for Business
Other products & services

Get started with

[Image] Knox Suite

All-in-one solution bundle for enterprise mobility.

  • Get a free 90-day trial for up to 30 devices.
  • A complete set of tools to secure, deploy, manage, and analyze your corporate devices.
  • Try powerful features bundled with Knox Suite.

Knox Suite includes:

Knox Mobile Enrollment Free
Knox Manage
Knox Asset Intelligence
Knox Platform for Enterprise Free
Knox Remote Support
Knox Capture
Knox Authentication Manager

Get started with

[Image] Knox Configure Logo

Rebrand and customize your Samsung devices.

  • Get a free 90-day trial for up to 30 devices.
  • Remotely configure Samsung devices in bulk and tailor them to specific needs, right out of the box.
  • Set up your devices for a one-time deployment, or update them as much as you want.

Get started with

[Icon] Knox Guard Logo

Fraud and theft protection for Samsung devices.

  • Get a free 90-day trial for up to 30 devices.
  • Reduce financial risks and protect assets by remotely controlling Samsung devices.
  • Try all the features of Knox Guard, including SIM control and device locking.

Get started with

[Image] Samsung Care Plus For Business Logo

Device protection plans for your Samsung devices.

  • Limit business interruptions with quick device repairs and replacements. Contact the Samsung sales team to get started.
  • See all your device coverage and claim information in one place.
  • Already purchased Samsung Care+ for Business? Create an account and activate your plan on the Samsung Care+ for Business console.

Other products & services

[Image] Others logo

Modern solutions to address your unique needs.