Samsung MDM license key device policy

Use the Samsung MDM license key device policy if you have legacy Enterprise Licenses (ELM) and Knox Licenses (KLM). If you have a Knox Platform for Enterprise (KPE) premium license key, use the Knox Platform for Enterprise device policy instead. A premium license key is required to create a Knox container.

For the SAFE platform, use the macro to generate the ELM key. Deploy the Samsung Enterprise License Management (ELM) key to a device before you can deploy SAFE policies and restrictions. Endpoint Management also supports the Samsung Enterprise Firmware-Over-The-Air (E-FOTA) service. Endpoint Management supports and extends both Samsung for Enterprise (SAFE) and Samsung Knox policies.

To add or configure this policy, go to Configure > Device Policies. For more information, see Device policies.

Samsung SAFE settings

Device Policies configuration screen

  • ELM License key: Endpoint Management pre-fills this field with the macro that generates the ELM license key. If the field is blank, type this macro: ${elm.license.key}

Configure Samsung E-FOTA settings

Samsung Enterprise FOTA (E-FOTA) lets you determine when devices get updated and the firmware version to use. E-FOTA enables you to test updates before deploying them, to ensure that the updates are compatible with your apps. You can force devices to update with the latest firmware version available, without requiring user interaction.

Samsung supports E-FOTA for Samsung Knox 2.7.1 devices (minimum version) that are running authorized firmware.

To configure an E-FOTA policy:

  1. Create a Samsung MDM License Key device policy with the keys and license information you received from Samsung. Endpoint Management then validates and registers the information.

    Type the ELM License key: Endpoint Management pre-fills this field with the macro that generates the ELM license key. If the field is blank, type this macro: ${elm.license.key}

    Type the following information provided by Samsung when you purchased an E-FOTA package:

    • Enterprise FOTA Customer ID
    • Enterprise FOTA license
    • Client ID
    • Client Secret
  2. Create a Control OS Update device policy.

    Device Policies configuration screen

    • Enable Enterprise FOTA: Set to On.
    • Enterprise FOTA License Key: Select the Samsung MDM License Key policy name that you created in Step 1.
  3. Deploy the Control OS Update policy to Secure Hub.

Android Enterprise and Samsung Knox settings

Device Policies configuration screen

  • Knox License key: Type the Knox license key that you obtained from Samsung.