Back to top

Add internal Android and iOS apps

Last updated July 26th, 2023

To add internal Android or iOS apps, complete the following steps:

  1. Navigate to Application.

  2. On the Application page, click Add.

  3. On the Select Application Type page, select Internal and click OK.

  4. On the Add Application page, enter the following information:

    • Platform — Select the mobile OS.

    • Application File — Click and select either an APK file for an Android application or an IPA file for an iOS application.


      You can upload an Android APK to your tenant twice, if you add it as an internal app and a private Managed Google Play app. Note that this results in duplicate apps in the Knox Manage agent and the Managed Google Play store.

    • Name — Enter the application name.

    • Version — The retrieved application version is listed as the value of this field. If there is no value, - is listed as the value.

    • Package Name (Android) — The retrieved package name is displayed. If there is no value, - is displayed.

    • Bundle ID (iOS) — The retrieved bundle ID for the application is displayed.

    • Bundle Name (iOS) — The retrieved bundle name is displayed. If there is no value, - is displayed.

    • URL Scheme (iOS) — The retrieved URL scheme is displayed. If there is no value, - is displayed.

    • Platform & Source — The application’s platform and source are displayed.

    • Type — The application type is displayed as Internal.

    • Managed Configuration (Android Enterprise) — Select Yes to enable managed configuration for the internal app.

    • Category — Select the application category. If you click Manage Category, you can add or modify application categories.

    • App Wrapper (Android) — Reconfigure and save the application so that security policies, such as text copy and screen capture, can be controlled in the console.

    • Unassign Option — Select Uninstall if the app is unassigned, if you want to uninstall the app from the device upon unassigning it.


      If the Uninstall if the app is unassigned option is selected for an app installed on the device and the app is not assigned to a group or organization in the Knox Manage console, the app is deleted from the device. This applies to all installed apps, whether or not installed through Knox Manage.

    • Managed App Setting (iOS) — Select Yes if you are adding an application that is designed to change the Mobile Device Management (MDM) settings of applications on iOS devices.

    • Key & Value (iOS) — If you selected Yes in Managed App Setting, click Add and enter the key and value of a MDM setting you want to change. You can add one key and its value at a time.


      Ask the app developers about the key and value for the MDM settings. For example, if you want to add the ManagedAppConfig application and set its default URL to, the key is the server URL and the value is

    • Description — Enter a description for the application.

    • Icon — Select the app icon image.

    • Screenshot — Select screenshots of the app to provide a preview for Android device users.

  5. Do one of the following:

    • Click Save to save the information and return to the Application list.
    • Click Save & Assign to save this information and proceed to assign the information. Continue on to the next step.
  6. Assign the application. For more information, see Assigning internal applications.

App wrapping

App Wrapper allows you to insert code that controls security policies for internal apps used by customers and then reconfigure the apps, without having to modify the source code. Thus, you can add new functions in a short amount of time, even if you aren’t knowledgeable in platform development.

Note the following while using the Knox Manage App Wrapper:

  • Conversion using the Knox Manage App Wrapper is limited to internal apps. There may be copyright issues when converting public apps.
  • The security logic app that checks the signing key may not function normally.

The functions that you can configure using App Wrapper are screen capture, screen lock, and copy and paste (text only). The existing and wrapped internal apps are distinguished by different icons on the user device.


For screen lock, if the Knox Manage agent’s screen is locked by the Expiration After (days) and If Password Compliance is Violated policies in the device profile, then the wrapped internal apps are also locked. If you want to use the wrapped internal apps, you need to unlock the screen of the device followed by the screen of the Knox Manage agent.

Is this page helpful?