Knox Platform for Enterprise knowledge base articles

Explore our knowledge base for:

• General Knox Platform for Enterprise (KPE) articles
• Knox legacy workspace articles
• Known KPE issues and their workarounds
• How-to articles for less common setups
• Guides

General articles

Verify if your device is Secured by Knox

Reduced network performance through VPN connection

Can’t remove permissions for unused apps in Android 13

Automatic license assignment release exceptions

Upgrade managed Android devices to Android Device Policy by March 19, 2022

“Sending of Diagnostic Data” message shown in Android 12

Do Separated Apps (SA) have access to corporate VPNs?

Guidance documents for Common Criteria evaluation

Common Criteria Mode

Knox Platform for Enterprise features not supported on One UI Core devices

Knox PAC Support (Proxy Auto Config)

Android VPN Management for Knox — configuration and troubleshooting

Intelligent Wi-Fi

Enhanced Roaming Algorithm

File-based encryption (FBE) and full-disk encryption (FDE)

What policy do I use to block users from adding additional accounts on the device?

“Network may be monitored” shown after installing a private CA certificate on device

Does the Samsung email client support “opaque signed” emails?

Can a network operator configure an E_APN on an employee’s device?

If two similar Knox policies are applied to a device with an MDM, which one takes precedence?

Should the Knox VPN client be installed inside or outside the Knox container?

What are the package names for the Samsung Cisco AnyConnect and Juniper VPN clients?

What is the minimum level of unlock method required to install a certificate in Android credential storage?

What is the proper way to wildcard APK package names?

Which servers do EMMs need to communicate with in order to conduct device attestation?

What is the order of precedence for firewall rules?

What URLs do I have to add to an allowlist to make Samsung apps work with an authenticated proxy?

Can I disable power saving mode on Knox supported devices?

If I cannot resolve an SE for Android issue, who do I escalate to?

Is there a way to automatically enable email sync while roaming?

What does the term “Maximum number of licenses” mean for KPE Standard licenses?

Knox legacy workspace articles

Using SSO with a Common Access Card (CAC) in the Work Profile

How many certificates can be stored in the Knox platform TrustZone?

Accessing Knox Workspace without connecting to Active Directory network

Unlocking the Knox Workspace container using Active Directory credentials

What is the certificate length limit in the Knox CCM keystore?

Can I create an RSA Key Pair on a Knox Platform for Enterprise device?

Known issues

Unable to make or receive phone calls with Knox VPN

Unable to enroll device with zero-touch enrollment

Remote control to a kiosk mode device displays a black screen

Unable to access the internet from a mobile hotspot

Connected without internet status after connecting to Wi-Fi

Unable to access internet with a VPN

Confirm PIN without tapping OK isn’t available for lock screen

Unable to install Samsung Calendar app and Samsung Clock app

Samsung Email app security patch for CWE-297

Unable to sign in to or sync Samsung Email app

Device randomly reboots without warning

Samsung devices reboot after Android System WebView update

Wireless emergency alerts missing from Settings app

Unable to edit contact information on lock screen

Device losing permissions after upgrading to Android 13

Device locked with Workspace License Expired error after updating VMware Workspace ONE® Intelligent Hub

Apps experiencing connectivity or sync issues after upgrading to Android 13

S22 device enrollment failure for Android 13

Certificates missing after updating Samsung devices to Android 12

Devices can’t reach sites with .local domain

KSP APN Setting Policy not added to WP-C device

Knox Service Plugin cannot be uninstalled from user devices

Smart Switch compatibility on different Android Enterprise activations

Cannot activate email client as a device admin app during account setup

Walkie Talkie feature is not visible in Microsoft Teams on XCover Pro devices

KSP Battery Optimization allowlist policy does not appear to be immediately applied to a device

Copy and paste from Personal space to Work profile is not blocked after applying UEM policy

Samsung Gallery app cannot be installed in Android 11 work profile

Black PC screen after device connected to Samsung DeX on PC

Android Nearby Share cannot be disabled through application management policy

Changes to Device and Settings customization in the Knox Service Plugin are not applied

createApnSettings returns -1 “Invalid MVNO type” error

“Account already exists” appears when creating Samsung Account

Cannot copy and paste text between Personal and Workspace device profiles

Samsung Email account cannot be removed on managed device

Device in AE DO mode requires factory reset when Knox Platform for Enterprise license expires or is deactivated

Policy set through Knox service is not applied on device

Push notifications not appearing in the work profile

Knox Service Plugin crashes after being installed in Knox Workspace

Cannot modify settings in Samsung Email client

Boot banner not displaying upon device startup

“Workspace License Expired” error appears without any change to the UEM, Knox Workspace/Android Enterprise profile type, or license key

Dual Messenger is not working on corporate-enabled devices

Smart Switch is not available on Fully Managed with Work Profile devices (DO+PO)

Device stops receiving SMS/Text messages after FOTA update

Disabled work profile is deleted when the MDM/UEM app is upgraded

Remote Desktop stops capturing screen when device’s screen orientation is changed

Password compliance check returning the wrong result on device

Device is locked with “Workspace License Expired” error after migrating from a Knox Workspace to an Android Enterprise profile

BlackBerry Dynamics fails to install on S9 and S9+ in Knox Workspace

Why can’t I download files with this S-browser when using a proxy configured to my server?

Why do I see “Your device is not authorized to enter Knox mode” when I try to unlock my container?

Why aren’t devices displaying missed call notifications while in Kiosk mode?

Why can’t users connect to my new Wi-Fi profile in the Knox container or the device side?

Why is my email message body missing when sending an email from within a locked Knox Workspace container?

Why is the Samsung SSO Authenticator for Kerberos is returning error code 1765328230?

Why do I get the following error trying to set up email in the Knox Workspace container - “Try again with network provider’s default APN”

Why does the Knox Workspace container hide my email content on the lock screen?

Why are MaxEmailBodyTruncationSize() and MaxEmailHTMLBodyTruncationSize() not working as expected?

Why do I lose a Knox license seat after factory resetting my device?

Why am I unable to access Google Play while using Common Criteria (CC) mode?

Why does setting the EMM policy ‘share via…’ to false block composing an email?

Why am I still getting email notifications even after it has been marked as ‘read’ in my Outlook client?

My device displayed the notification: “SE Android has been turned off.” What do I do?

Why can’t I display SysDump on a Verizon Samsung device?

Why do I get the error, “No apps can perform this action” when trying to reply to a calendar event in SPlanner?

Why did my device display a notification, “Your phone’s security has blocked an action that is not permitted.”

Why can’t I download files in SBrowser when using an authenticated proxy?

Why does the native email application not show images in HTML messages when a proxy is used?

Why is my device not displaying the Security Software Version in the settings menu?

How-to articles

Restrict device users from deleting the VPN profile

How to block Google and Samsung Accounts using KSP

How to restrict importing and exporting of calendar events between profiles using KSP

How to limit battery charging on a Samsung Knox device

How to enable Device Key Mapping for applications in Work Profile

How to skip MAC address randomization using KSP

How to enable Smart Switch on Fully Managed (DO) devices

How to enable system apps in Work Profile on a Samsung device

How to set up notifications for Samsung Knox service outages

How to use third-party keyboards in a work profile

How do I set up S/MIME for exchange accounts using the Samsung email client?

How do I troubleshoot Exchange Active Sync configuration issues on Knox devices?

How do I enable speech to text and voice dictation in the Knox Workspace container?

How do I show Knox Workspace container contact names in the personal call logs?

How do I use the IRM (Information Rights Management) email templates?

How can I tell if my device is connected to a network?

Guides

BlackBerry UEM and Knox Platform for Enterprise - User Guide

Citrix Endpoint Management and Knox Platform for Enterprise - User Guide

FAMOC and Knox Platform for Enterprise - User Guide

Government Mobile Security - Configuration Guide

IBM MaaS360 and Knox Platform for Enterprise - User Guide

Knox Manage and Knox Platform for Enterprise - User Guide

Microsoft Intune and Knox Platform for Enterprise - User Guide

MobileIron Cloud and Knox Platform for Enterprise - User Guide

MobileIron Core and Knox Platform for Enterprise - User Guide

SOTI MobiControl and Knox Platform for Enterprise - User Guide

VMware Workspace One and Knox Platform for Enterprise - User Guide