Home / Knox Guard / How-to guides / Manage policies / Common /

Application installation

Last updated October 8th, 2026

This feature is only available upon request. Please contact your Knox Guard admin.

You can install a custom app on your devices for various company functions. The app can be updated using Google Play. If the target device already has the app, the system checks the app’s information and either installs or retains the latest version.

You can’t apply this policy using bulk actions.

Set default application for installation

By default, app uninstallation prevention is applied to the installed app. This stops device users from manually uninstalling the app.

When installing a new app, the old app remains on the device, but uninstallation prevention shifts to the new app. The user can manually uninstall the old app.

To configure your app installation settings:

  1. Navigate to the Policies page.

  2. Under ADVANCED CONTROLS, click APPLICATION INSTALLATION.

    Application installation settings page in Knox Guard console.

  3. Upload your custom app. The app package must be no larger than 150 MB, and in APK format.

  4. (Optional) You can Automatically launch the application after first installation (only at initial enrollment and factory reset).

  5. Click SAVE.

    If you want to install multiple apps (up to five), you’ll need a Knox Guard Advanced license. For more information, contact the sales team.

This document was updated for the Knox cloud services 26.10 UAT.

On this tab

This feature is only available upon request. Please contact your Knox Guard admin.

You can use the Application installation policy to install a custom app on your devices. For example, financing businesses may want to install a payment or customer support app, while enterprises may want to install their company’s own business specific app.

Apps installed using this policy can be updated through Google Play.

How the application installation policy works

To install an app on your device, upload an APK file no larger than 150 MB to the Application installation policy. Once uploaded, the app is automatically scanned for malware. If any malware is detected, the app is immediately removed from the Knox Guard console.

If the scan returns successful results, the app automatically installs on all devices in your tenant once they connect to a network. If the target device already has the app, the system checks the app’s information and either installs or retains the latest version.

Additionally, app uninstallation restrictions prevent device users from manually removing the app. If you update this policy with a different app, the old app remains on the device, but uninstallation restrictions apply only to the new app. The device user can manually uninstall the old app.

By default, you can only install one app using this policy. If you have a Knox Guard Advanced license, you can install up to five apps. For more information, contact the sales team.

Set default application for installation

To configure your app installation settings:

  1. Navigate to the Policies page.

  2. Under ADVANCED CONTROLS, click APPLICATION INSTALLATION.

    Application installation settings page in Knox Guard console.

  3. Upload your custom app. The app package must be no larger than 150 MB, and in APK format.

  4. (Optional) You can Automatically launch the application after first installation (only at initial enrollment and factory reset).

  5. Click SAVE.

Is this page helpful?