Add internal Android, iOS, and macOS apps
Last updated September 12th, 2024
On this tab
All internal apps are uploaded to the Knox Manage console as standalone files. Version control consists of manually uploading newer instances of the app. Different platforms support different file formats, and depending on the app technology, the file may require a well-formed manifest and certificate. Consult your platform’s developer documentation for precise details about how to correctly bundle an app for distribution.
Adding internal apps
To add internal Android, iOS, or macOS apps, complete the following steps:
Go to Application, then click Add. The Select Application Type page opens.
Select the app’s platform, select Internal - Knox Manage Portal, then click Next. The Add Application page opens.
Configure the app’s properties in Knox Manage:
Action Description Platform Select the mobile OS. Application File Click
and select either an APK file for an Android application or an IPA file for an iOS application.It's possible to upload two copies of the same APK, both as an internal app and a private Managed Google Play app. This is undesirable, as it results in duplicate apps in the Knox Manage agent and the Managed Google Play store.
Name Enter the app's name.
For macOS apps, you must manually enter the app name, version, bundle ID, and bundle name.
Version The retrieved app version. If there's no value, - displays. Package Name (Android) The retrieved package name. If there's no value, - displays. Bundle ID (iOS, macOS) The retrieved bundle ID for the app. Bundle Name (iOS, macOS) The retrieved bundle name. If there's no value, - displays. URL Scheme (iOS) The retrieved URL scheme. If there's no value, - displays. Platform & Source The app's platform and source. Type The app type is displayed as Internal. Managed Configuration (Android Enterprise) Select Yes to enable managed configuration for the internal app. Category Select the app category. If you click Manage Category, you can add or modify app categories. App Wrapper (Android) Reconfigure and save the app so that security policies, such as text copy and screen capture, can be controlled in the console. Uninstall option Select Uninstall the app from all unassigned devices if you want to uninstall the app when its unassigned from a device.
As Samsung One UI Home is an essential app for Samsung devices, it can't be uninstalled through the Knox Manage console. The Uninstall the app from all unassigned devices option is always disabled for this app to prevent the device from malfunctioning.
Managed App Setting (iOS) Select Yes if you're adding an app that's designed to change the Mobile Device Management (MDM) settings of apps on iOS devices. Key & Value (iOS) If you selected Yes in Managed App Setting, click Add and enter the key and value of a MDM setting you want to change. You can add one key and its value at a time.
Ask the app developers about the key and value for the MDM settings. For example, if you want to add the ManagedAppConfig app and set its default URL to http://www.samsungsds.com, the key is the server URL and the value is http://www.samsungsds.com.
Description Enter a description for the app. Icon Select the app icon image. Screenshot Select screenshots of the app to provide a preview for Android device users. Do one of the following:
Click Save to save the information and return to the Application page.
Click Save & Assign to assign the configuration right away, then follow the on-screen instructions. For more information, see Assign internal Android, iOS, and Windows apps.
App wrapping
Starting Knox Manage 24.06, App wrapper is deprecated. Existing apps can continue using the feature, but new apps will not be able to use the feature.
App Wrapper allows you to insert code that controls security policies for internal apps used by customers and then reconfigure the apps, without having to modify the source code. Thus, you can add new functions in a short amount of time, even if you aren’t knowledgeable in platform development.
Note the following while using the Knox Manage App Wrapper:
- Conversion using the Knox Manage App Wrapper is limited to internal apps. There may be copyright issues when converting public apps.
- The security logic app that checks the signing key may not function normally.
The functions that you can configure using App Wrapper are screen capture, screen lock, and copy and paste (text only). The existing and wrapped internal apps are distinguished by different icons on the user device.
For screen lock, if the Knox Manage agent’s screen is locked by the Expiration After (days) and If Password Compliance is Violated policies in the device profile, then the wrapped internal apps are also locked. If you want to use the wrapped internal apps, you need to unlock the screen of the device followed by the screen of the Knox Manage agent.
This document was updated for the Knox cloud services 24.09 UAT.
On this tab
All internal apps are uploaded to the Knox Manage console as standalone files. Version control consists of manually uploading newer instances of the app. Different platforms support different file formats, and depending on the app technology, the file may require a well-formed manifest and certificate. Consult your platform’s developer documentation for precise details about how to correctly bundle an app for distribution.
Adding internal apps
To add internal Android, iOS, or macOS apps, complete the following steps:
Go to Application, then click Add. The Select Application Type page opens.
Select the app’s platform, select Internal - Knox Manage Portal, then click Next. The Add Application page opens.
Configure the app’s properties in Knox Manage:
Action Description Platform Select the mobile OS. Application File Click
and select either an APK file for an Android application or an IPA file for an iOS application. The file is scanned for malware before upload.It's possible to upload two copies of the same APK, both as an internal app and a private Managed Google Play app. This is undesirable, as it results in duplicate apps in the Knox Manage agent and the Managed Google Play store.
Name Enter the app's name.
For macOS apps, you must manually enter the app name, version, bundle ID, and bundle name.
Version The retrieved app version. If there's no value, - displays. Package Name (Android) The retrieved package name. If there's no value, - displays. Bundle ID (iOS, macOS) The retrieved bundle ID for the app. Bundle Name (iOS, macOS) The retrieved bundle name. If there's no value, - displays. URL Scheme (iOS) The retrieved URL scheme. If there's no value, - displays. Platform & Source The app's platform and source. Type The app type is displayed as Internal. Managed Configuration (Android Enterprise) Select Yes to enable managed configuration for the internal app. Category Select the app category. If you click Manage Category, you can add or modify app categories. App Wrapper (Android) Reconfigure and save the app so that security policies, such as text copy and screen capture, can be controlled in the console. Uninstall option Select Uninstall the app from all unassigned devices if you want to uninstall the app when its unassigned from a device.
As Samsung One UI Home is an essential app for Samsung devices, it can't be uninstalled through the Knox Manage console. The Uninstall the app from all unassigned devices option is always disabled for this app to prevent the device from malfunctioning.
Managed App Setting (iOS) Select Yes if you're adding an app that's designed to change the Mobile Device Management (MDM) settings of apps on iOS devices. Key & Value (iOS) If you selected Yes in Managed App Setting, click Add and enter the key and value of a MDM setting you want to change. You can add one key and its value at a time.
Ask the app developers about the key and value for the MDM settings. For example, if you want to add the ManagedAppConfig app and set its default URL to http://www.samsungsds.com, the key is the server URL and the value is http://www.samsungsds.com.
Description Enter a description for the app. Icon Select the app icon image. Screenshot Select screenshots of the app to provide a preview for Android device users. Do one of the following:
Click Save to save the information and return to the Application page.
Click Save & Assign to assign the configuration right away, then follow the on-screen instructions. For more information, see Assign internal Android, iOS, and Windows apps.
App wrapping
Starting Knox Manage 24.06, App wrapper is deprecated. Existing apps can continue using the feature, but new apps will not be able to use the feature.
App Wrapper allows you to insert code that controls security policies for internal apps used by customers and then reconfigure the apps, without having to modify the source code. Thus, you can add new functions in a short amount of time, even if you aren’t knowledgeable in platform development.
Note the following while using the Knox Manage App Wrapper:
- Conversion using the Knox Manage App Wrapper is limited to internal apps. There may be copyright issues when converting public apps.
- The security logic app that checks the signing key may not function normally.
The functions that you can configure using App Wrapper are screen capture, screen lock, and copy and paste (text only). The existing and wrapped internal apps are distinguished by different icons on the user device.
For screen lock, if the Knox Manage agent’s screen is locked by the Expiration After (days) and If Password Compliance is Violated policies in the device profile, then the wrapped internal apps are also locked. If you want to use the wrapped internal apps, you need to unlock the screen of the device followed by the screen of the Knox Manage agent.
Is this page helpful?