How to enable Smart Switch on Knox Manage devices

Environment

• Samsung Smart Switch
• Knox Manage
• Android Enterprise (AE) device owner (DO) mode
• Android Enterprise (AE) corporate-owned, personally-enabled (COPE) mode

Overview

Some users are unable to launch the Smart Switch app on devices enrolled through Knox Manage (KM) in Android Enterprise device owner (AE DO) mode. The following warning appears on the device:

Security policy restricts use of Smart Switch

This article walks you through the steps on how to enable Smart Switch in Knox Manage for devices enrolled in AE DO mode, both for those enabling it for the first time and those modifying existing deployments.

NOTE—Due to a Google Mobile Services (GMS) limitation, this workaround cannot be used to enable Smart Switch on AE COPE deployments.

Cause

On June 5th, 2020, v3.7.05.8 of the Smart Switch app removed its unofficial functionality on enterprise AE DO and AE COPE deployments.

While Smart Switch previously worked in both AE DO and AE COPE, the feature was not officially supported for B2B applications. By AE security design, all backup features including Smart Switch are now disabled by default.

As a workaround, you may enable Smart Switch on AE DO devices on the personal (User 0) side of the device using KM, explained in the steps below.

NOTE—The above workaround is intended only for devices running Android 9 and above, and is not guaranteed to work on earlier OS versions.

How do I enable Smart Switch in Knox Manage if I am adding it for the first time?

If you are enabling Smart Switch for the first time, you must first add it in the Managed Google Play Store:

1. In your KM console, in the left sidebar, click Application.
2. In the horizontal menu bar, click Add.
3. Under Select Application Type, select Public.
4. In the search bar, enter "com.sec.android.easyMover".
5. Select "Samsung Smart Switch Mobile, then click Approve > Approve.
6. Choose how you would like to handle app permission requests, then click Done.
7. On the Add Application screen, click Save & Assign > OK.

To assign the Smart Switch app to your organization:

1. In the left sidebar, click Organization.
2. Select the checkbox next to the organization your devices belong to, then click Application in the menu that appears.
3. Select the checkbox next to "Samsung Smart Switch Mobile", then click Assign.
4. Under Android Enterprise Settings, click Set Configuration.
5. In the dialog box that appears, enter a configuration name.
6. Toggle Allow SmartSwitch Run to On, then click Assign > OK.

Then, to ensure Smart Switch can run on the devices in your organization:

1. In the left sidebar, click Application.
2. Click "Smart Switch Mobile", then click Assign.
3. Under Android Enterprise Settings, click Set Configuration.
4. In the dialog box that appears, enter a configuration name.
5. Toggle Allow SmartSwitch Run to On, then click Save > OK.
6. Under Target, select the group or organization to assign the application to, then click Assign > OK.

NOTE—The workaround is intended only for devices running Android 9 and above, and may not work on earlier OS versions.

How do I enable Smart Switch in Knox Manage if I have already added it to my organization?

If you have already added Smart Switch to your organization:

1. Click on your organization's name, then navigate to the Application tab.
2. Select the checkbox next to "Samsung Smart Switch Mobile", then click Modify Setting.
3. Under Android Enterprise Settings, click Set Configuration.
4. In the dialog box that appears, enter a configuration name.
5. Toggle Allow SmartSwitch Run to On, then click Save > OK.

Then, to ensure Smart Switch can run on the devices in your organization:

1. In the left sidebar, click Application.
2. Click "Smart Switch Mobile", then click Assign.
3. Under Android Enterprise Settings, click Set Configuration.
4. In the dialog box that appears, enter a configuration name.
5. Toggle Allow SmartSwitch Run to On, then click Save > OK.
6. Under Target, select the group or organization to assign the application to, then click Assign > OK.