Add internal Android, iOS, and macOS apps

All internal apps are uploaded to the Knox Manage console as standalone files. Version control consists of manually uploading newer instances of the app. Different platforms support different file formats, and depending on the app technology, the file may require a well-formed manifest and certificate. Consult your platform’s developer documentation for precise details about how to correctly bundle an app for distribution.

Adding internal apps

To add internal Android, iOS, or macOS apps, complete the following steps:

1. Go to Application, then click Add. The Select Application Type page opens.

2. Select the app’s platform, select Internal - Knox Manage Portal, then click Next. The Add Application page opens.

3. Configure the app’s properties in Knox Manage:

   Action	Description
   Platform	Select the OS.
   Application File	Click and select an APK file for an Android app, an IPA file for an iOS app, or a PKG file for a macOS app. The file is scanned for malware before upload. While it's possible to upload two copies of the same APK (as an internal app and a private Managed Google Play app), it results in duplicate apps in the Knox Manage agent and the Managed Google Play store, and should be avoided. PKG files must be signed using an Apple Developer account prior to app distribution.
   Name	Enter the app's name. For macOS apps, you must manually enter the app name, version, bundle ID, and bundle name.
   Version	The retrieved app version. If there's no value, - displays.
   Package Name (Android)	The retrieved package name. If there's no value, - displays.
   Bundle ID (iOS, macOS)	The retrieved bundle ID for the app.
   Bundle Name (iOS, macOS)	The retrieved bundle name. If there's no value, - displays.
   URL Scheme (iOS)	The retrieved URL scheme. If there's no value, - displays.
   Platform & Source	The app's platform and source.
   Type	The app type is displayed as Internal.
   Managed Configuration (Android Enterprise)	Select Yes to enable managed configuration for the internal app.
   Category	Select the app category. If you click Manage Category, you can add or modify app categories.
   App Wrapper (Android)	Reconfigure and save the app so that security policies, such as text copy and screen capture, can be controlled in the console.
   Uninstall option	Select Uninstall the app from all unassigned devices if you want to uninstall the app when its unassigned from a device. As Samsung One UI Home is an essential app for Samsung devices, it can't be uninstalled through the Knox Manage console. The Uninstall the app from all unassigned devices option is always disabled for this app to prevent the device from malfunctioning.
   Managed App Setting (iOS)	Select Yes if you're adding an app that's designed to change the Mobile Device Management (MDM) settings of apps on iOS devices.
   Key & Value (iOS)	If you selected Yes in Managed App Setting, click Add and enter the key and value of a MDM setting you want to change. You can add one key and its value at a time. Ask the app developers about the key and value for the MDM settings. For example, if you want to add the ManagedAppConfig app and set its default URL to http://www.samsungsds.com, the key is the server URL and the value is http://www.samsungsds.com.
   Description	Enter a description for the app.
   Icon	Select the app icon image.
   Screenshot	Select screenshots of the app to provide a preview for Android device users.

4. Do one of the following:

   • Click Save to save the information and return to the Application page.

   • Click Save & Assign to assign the configuration right away, then follow the on-screen instructions. For more information, see Assign internal Android, iOS, and Windows apps.

App wrapping

App Wrapper allows you to insert code that controls security policies for internal apps used by customers and then reconfigure the apps, without having to modify the source code. Thus, you can add new functions in a short amount of time, even if you aren’t knowledgeable in platform development.

Note the following while using the Knox Manage App Wrapper:

• Conversion using the Knox Manage App Wrapper is limited to internal apps. There may be copyright issues when converting public apps.
• The security logic app that checks the signing key may not function normally.

The functions that you can configure using App Wrapper are screen capture, screen lock, and copy and paste (text only). The existing and wrapped internal apps are distinguished by different icons on the user device.