Samsung instalments: how Knox Guard differs from MDM

ABMDM Editorial Team. Published: 02/11/2026.

How is Knox Guard different from iPhone MDM?

The two differ in how a device enters management. The deciding question is the same: was this device registered before you handed it to the customer?

Knox Guard is a Samsung cloud service, for Samsung devices on Android 11 or later only. iPhone goes through Apple Business, supervision and an MDM service. Both need a device to be registered before it can be managed; registering before hand-over spares the shop from calling the customer back to bring the device in.

Today ABMDM supports iPhone and iPad. Samsung through Knox Guard is in development, with no date. The definition of Knox Guard is already in What is Knox Guard; this article focuses on timing and the registration process.

Two entry points side by side

Criterion	Galaxy (Knox Guard)	iPhone, iPad (Apple + MDM)
Supported devices	Samsung devices, Android 11 or later	iPhone iOS 13+, iPad iPadOS 13.1+ when enrolled through Automated Device Enrollment
Who puts the device in	A Samsung partner reseller uploads the device	Devices bought under an Apple Customer Number or Reseller Number appear in Apple Business automatically, then are assigned to the MDM
How the device is identified	The Knox Deployment program uses IMEI, MEID or serial	The serial number must appear in Apple Business
Payment reminders	Built into the service	Not described in Apple's documentation; depends on the MDM software

Sources: Samsung Knox Guard and Apple Platform Deployment, checked on 2026-11-02.

Galaxy: how a device gets into Knox Guard

According to Samsung, a partner reseller uploads devices to Knox Guard through the web API or the Samsung Knox Deployment Portal. The entry point sits with Samsung's partner resellers, so a shop needs to know which channel it bought its devices through. Samsung's separate Knox Deployment program identifies devices by IMEI, MEID or serial.

These two facts sit on two different documentation pages, and the program page does not mention Knox Guard. This article therefore does not claim who performs the IMEI registration for Knox Guard specifically. The safest route is to ask your supplier directly: has this device been uploaded to Knox Guard, and by whom?

iPhone: how a device gets into MDM

Devices bought under an Apple Customer Number or Reseller Number appear in Apple Business automatically. A device you already have is added with Apple Configurator. The device must then be assigned to an MDM server, manually or automatically. The serial must be in Apple Business for the device to take the automatic route.

For a device enrolled through Automated Device Enrollment, Apple supervises iPhone and iPad automatically. Apple states that supervision usually indicates an organisation-owned device, and that a user cannot unenrol a supervised device. More in What is a supervised iPhone.

Locking and unlocking: what is alike and what differs

Alike: both lock remotely and can be unlocked again once the conditions are met.

• Knox Guard: locking is the last resort for a device that is not paid for. While locked, USB, Bluetooth, NFC, firmware updates, reset and flashing are restricted. When payments return to normal the device is unlocked and full function is restored.
• Supervised iPhone: Managed Lost Mode locks the user out until an administrator turns it off, shows a message and a contact number, and does not need Find My.

Different: Samsung has payment notices built into the service. The Apple documents we read do not describe a payment-reminder feature, so reminders on iPhone depend on the MDM software. The legal relationship lives in the instalment contract, not in the software; see iPhone instalments with MDM.

Checklist before hand-over

General recommendation: finish registration before the device leaves the counter, not afterwards.

iPhone stock

1. The device serial is in Apple Business. For a phone bought elsewhere, add it with Apple Configurator before hand-over day.
2. The device is assigned to the MDM server.
3. The serial appears on the ABMDM console and the device is supervised.
4. The device is linked to the customer's contract.
5. You have tested lock then unlock on this very device.

Galaxy stock

1. Record serial, IMEI, hand-over date and contract number for each device.
2. Confirm the device is a Samsung on Android 11 or later.
3. Ask your supplier: has the device been uploaded to Knox Guard, and by whom?
4. The contract states who owns the device during the instalment period, with the device-management terms; have a lawyer or adviser review it.
5. Do not promise the customer the same lock screen and the same reminders as on iPhone.

iPhone stock can use ABMDM now, Galaxy stock waits

Galaxy stock keeps the paperwork process above and waits for the Knox Guard branch; do not promise one console for both brands before the Android item opens. The hand-over, reminder, tiered lock and payoff flow for iPhone is in device financing.

To see how the iPhone process runs, call 0913 081 986 (8am–9pm).