Back to top

Add internal Android, iOS, and macOS apps

Last updated May 8th, 2024

All internal apps are uploaded to the Knox Manage console as standalone files. Version control consists of manually uploading newer instances of the app. Different platforms support different file formats, and depending on the app technology, the file may require a well-formed manifest and certificate. Consult your platform’s developer documentation for precise details about how to correctly bundle an app for distribution.

Adding internal apps

To add internal Android, iOS, or macOS apps, complete the following steps:

  1. Go to Application, then click Add. The Select Application Type page opens.

  2. Select the app’s platform, select Internal - Knox Manage Portal, then click Next. The Add Application page opens.

  3. Configure the app’s properties in Knox Manage:

    Action Description
    Platform Select the mobile OS.
    Application File

    Click and select either an APK file for an Android application or an IPA file for an iOS application.

    It's possible to upload two copies of the same APK, both as an internal app and a private Managed Google Play app. This is undesirable, as it results in duplicate apps in the Knox Manage agent and the Managed Google Play store.


    Enter the app's name.

    For macOS apps, you must manually enter the app name, version, bundle ID, and bundle name.

    Version The retrieved app version. If there's no value, - displays.
    Package Name (Android) The retrieved package name. If there's no value, - displays.
    Bundle ID (iOS, macOS) The retrieved bundle ID for the app.
    Bundle Name (iOS, macOS) The retrieved bundle name. If there's no value, - displays.
    URL Scheme (iOS) The retrieved URL scheme. If there's no value, - displays.
    Platform & Source The app's platform and source.
    Type The app type is displayed as Internal.
    Managed Configuration (Android Enterprise) Select Yes to enable managed configuration for the internal app.
    Category Select the app category. If you click Manage Category, you can add or modify app categories.
    App Wrapper (Android) Reconfigure and save the app so that security policies, such as text copy and screen capture, can be controlled in the console.
    Unassign Option

    Select Uninstall if the app is unassigned if you want to uninstall the app from the device upon unassigning it.

    If Uninstall if the app is unassigned is selected for an app installed on the device and the app isn't assigned to a group or organization in the Knox Manage console, the app is deleted from the device. This applies to all installed apps, whether or not installed through Knox Manage.

    As Samsung One UI Home is an essential app for Samsung devices, it can't be uninstalled through the Knox Manage console. Uninstall if the app is unassigned is always disabled for this app to prevent the device from malfunctioning.

    Managed App Setting (iOS) Select Yes if you're adding an app that's designed to change the Mobile Device Management (MDM) settings of apps on iOS devices.
    Key & Value (iOS)

    If you selected Yes in Managed App Setting, click Add and enter the key and value of a MDM setting you want to change. You can add one key and its value at a time.

    Ask the app developers about the key and value for the MDM settings. For example, if you want to add the ManagedAppConfig app and set its default URL to, the key is the server URL and the value is

    Description Enter a description for the app.
    Icon Select the app icon image.
    Screenshot Select screenshots of the app to provide a preview for Android device users.
  4. Do one of the following:

    • Click Save to save the information and return to the Application page.

    • Click Save & Assign to assign the configuration right away, then follow the on-screen instructions. For more information, see Assign internal Android, iOS, and Windows apps.

App wrapping

App wrapper is sunsetting with Knox Manage 24.04 and will be deprecated with the Knox Manage 24.06 release. Support will continue for existing apps using the feature, but new apps will not be able to use the feature.

App Wrapper allows you to insert code that controls security policies for internal apps used by customers and then reconfigure the apps, without having to modify the source code. Thus, you can add new functions in a short amount of time, even if you aren’t knowledgeable in platform development.

Note the following while using the Knox Manage App Wrapper:

  • Conversion using the Knox Manage App Wrapper is limited to internal apps. There may be copyright issues when converting public apps.
  • The security logic app that checks the signing key may not function normally.

The functions that you can configure using App Wrapper are screen capture, screen lock, and copy and paste (text only). The existing and wrapped internal apps are distinguished by different icons on the user device.

For screen lock, if the Knox Manage agent’s screen is locked by the Expiration After (days) and If Password Compliance is Violated policies in the device profile, then the wrapped internal apps are also locked. If you want to use the wrapped internal apps, you need to unlock the screen of the device followed by the screen of the Knox Manage agent.

Is this page helpful?