Knox Platform for Enterprise knowledge base articles (KBAs)

Explore our knowledge base for:

  • General Knox Platform for Enterprise (KPE) articles
  • Knox legacy workspace articles
  • Known KPE issues and their workarounds
  • How-to articles for less common setups
  • Guides

General articles

Upgrade managed Android devices to Android Device Policy by March 19, 2022

"Sending of Diagnostic Data" message shown in Android 12

Do Separated Apps (SA) have access to corporate VPNs?

Guidance documents for Common Criteria evaluation

Common Criteria Mode

Knox Platform for Enterprise features not supported on One UI Core devices

Knox PAC Support (Proxy Auto Config)

Understanding and using Knox VPNs

Intelligent Wi-Fi

Real-time Kernel Protection explained

Enhanced Roaming Algorithm

Master list of Android Q issues in Knox Platform for Enterprise

File-based encryption (FBE) and full-disk encryption (FDE)

Can I push an app into the personal space instead of the Knox container using Samsung SDS IAM & EMM?

What policy do I use to block users from adding additional accounts on the device?

"Network may be monitored" shown after installing a private CA certificate on device

Why are my contacts, events and tasks inside the Knox Workspace container saving to my EAS account automatically instead of my device?

Why are some emails addresses highlighted when I compose an email inside the Knox Workspace container?

Does the Samsung email client support "opaque signed" emails?

Can a network operator configure an E_APN on an employee's device?

If two similar Knox policies are applied to a device with an MDM, which one takes precedence?

Should the Knox VPN client be installed inside or outside the Knox container?

What are the package names for the Samsung Cisco AnyConnect and Juniper VPN clients?

Does the native Knox email client support S/MIME with two certificates, one for signing and one for encryption?

Why does the Knox Workspace container email client continually prompt to update security settings?

What is the minimum level of unlock method required to install a certificate in Android credential storage?

What is the proper way to wildcard APK package names?

Protocol for Knox device to Active Directory

Which servers do EMMs need to communicate with in order to conduct device attestation?

What is the order of precedence for firewall rules?

What URLs do I have to add to an allowlist to make Samsung apps work with an authenticated proxy?

Does Samsung email client support "triple wrapped" emails?

Can I disable power saving mode on Knox supported devices?

If I cannot resolve an SE for Android issue, who do I escalate to?

Is there a way to automatically enable email sync while roaming?

What does the term "Maximum number of licenses" mean for KPE Standard licenses?

Knox legacy workspace articles

Using SSO with a Common Access Card (CAC) in the Work Profile

How many certificates can be stored in the Knox platform TrustZone?

Device is locked out of the Knox Workspace container by the IT admin

Accessing Knox Workspace without connecting to Active Directory network

Unlocking the Knox Workspace container using Active Directory credentials

Can I share data and resources inside a Knox Workspace container on two devices?

Requirements to set up Active Directory credentials as the Knox Workspace container unlock method

Knox SSO service prompting for Active Directory password in Knox Workspace

What is the certificate length limit in the Knox CCM keystore?

Can I create an RSA Key Pair on a Knox Platform for Enterprise device?

Known issues

Certificates missing after updating Samsung devices to Android 12

Devices can't reach sites with .local domain

KSP APN Setting Policy not added to WP-C device

Knox Service Plugin cannot be uninstalled from user devices

Smart Switch compatibility on different Android Enterprise activations

Devices with a legacy Knox Workspace container stuck in Android Recovery Mode after the OS 11 update

Cannot activate email client as a device admin app during account setup

Walkie Talkie feature is not visible in Microsoft Teams on XCover Pro devices

KSP Battery Optimization allowlist policy does not appear to be immediately applied to a device

Copy and paste from Personal space to Work profile is not blocked after applying UEM policy

Settings App crashes in Android 11 if Samsung Account package is disabled

Cannot create work profile on Galaxy Tab A7

Samsung Gallery app cannot be installed in Android 11 work profile

Personal apps cannot be installed from Google Play in Android 11

Fingerprint registration fails during Android Enterprise enrollment in Android 11

Black PC screen after device connected to Samsung DeX on PC

Unable to authenticate using Certificate-based Authentication on Samsung Email v6.1.30.30

Android Nearby Share cannot be disabled through application management policy

Changes to Device and Settings customization in the Knox Service Plugin are not applied

Cannot reset device password from UEM console

Cannot pass schema version with Managed Configuration in Knox Service Plugin

createApnSettings returns -1 "Invalid MVNO type" error

Cannot send or receive emails on managed device when Data Saver is on

"Account already exists" appears when creating Samsung Account

Exporting a contact from the Work profile to the Personal profile causes phone number type metadata to be incorrectly tagged as "Phone"

Cannot copy and paste text between Personal and Workspace device profiles

Samsung Email account cannot be removed on managed device

Device in AE DO mode requires factory reset when Knox Platform for Enterprise license expires or is deactivated

Policy set through Knox service is not applied on device

Push notifications not appearing in the work profile

Work profile is removed if UEM client is upgraded in Android 8.1 or 9

Knox Service Plugin crashes after being installed in Knox Workspace

Cannot modify settings in Samsung Email client

Boot banner not displaying upon device startup

Unable to open Samsung Calendar attachments in Knox Workspace

"Workspace License Expired" error appears without any change to the UEM, Knox Workspace/Android Enterprise profile type, or license key

Dual Messenger is not working on corporate-enabled devices

Smart Switch is not available on Fully Managed with Work Profile devices (DO+PO)

Device stops receiving SMS/Text messages after FOTA update

Disabled work profile is deleted when the MDM/UEM app is upgraded

Calendar events duplicated in Samsung Calendar

Cannot enter PIN on managed device

Blank content in email body on Knox supported devices

Remote Desktop stops capturing screen when device's screen orientation is changed

Password compliance check returning the wrong result on device

Device is locked with "Workspace License Expired" error after migrating from a Knox Workspace to an Android Enterprise profile

BlackBerry Dynamics fails to install on S9 and S9+ in Knox Workspace

Why is the error message "Invalid license key" displayed when I try to create a Knox Workspace container?

Why can't I turn on "Background Network usage" in COM mode?

Why does the VOIP/SIP application that is using the dialer not work properly in the Knox container?

Why can't I download files with this S-browser when using a proxy configured to my server?

Why do I see "Your device is not authorized to enter Knox mode" when I try to unlock my container?

Why do I receive an error message when I try to configure VPN using a certificate?

Why aren't devices displaying missed call notifications while in Kiosk mode?

Why don't my end users have any Google apps in the Knox Workspace container?

Why can't users connect to my new Wi-Fi profile in the Knox container or the device side?

Why is my email message body missing when sending an email from within a locked Knox Workspace container?

Why can't my Skype app receive incoming calls when it is installed in a Knox Workspace container?

Why is the Samsung SSO Authenticator for Kerberos is returning error code 1765328230?

Why doesn't my device support photo edit features inside the Knox Workspace container

Why are my Knox Workspace container contacts not visible when the device to connected to a car's Bluetooth?

Why does my Knox Enabled App install give the error message - “App not authorized”

Why do I get the following error trying to set up email in the Knox Workspace container - “Try again with network provider's default APN”

Why does my device exit Kiosk mode when toggling Ultra Power savings mode?

Why are my app icons overlapping each other while using Kiosk mode on a Knox device?

Why does the Knox Workspace container hide my email content on the lock screen?

Why are MaxEmailBodyTruncationSize() and MaxEmailHTMLBodyTruncationSize() not working as expected?

Why is my device losing connectivity with my EMM server?

Why does my device on Android N randomly reboot when using Knox VPN?

Why is the email client in the Knox Workspace container not syncing?

Why is the Knox Workspace container not deleted after unenrolling from the EMM?

Why do I lose a Knox license seat after factory resetting my device?

Why does my Knox email client display the wrong email attachments?

Why am I unable to access Google Play while using Common Criteria (CC) mode?

Why does setting the EMM policy 'share via...' to false block composing an email?

Why do I get a device certificate error when trying to set up my email client with certificate based authentication?

Why is the Knox Workspace unresponsive to touch input?

Why does my device screen goes black when starting Knox Container Only Mode (COM)

Why I can't update my Knox Workspace container preloaded apps after a firmware upgrade.

Why are my Knox Workspace container preloaded apps crashing after a firmware update?

What can I do if I'm not receiving the verification email when registering for a Samsung Account?

Why am I still getting email notifications even after it has been marked as 'read' in my Outlook client?

Why are there sometimes quality differences between Wi-Fi networks and cellular data networks?

My device displayed a notification, "Unable to Perform Automatic Update?" What do I do?

Why do I get an error when I try to upload documents to the internet with the browser inside the Knox container?

I rooted my device and now I can't open my Knox Enabled App, what do I do?

My device displayed the notification: "SE Android has been turned off." What do I do?

Why can't I display SysDump on a Verizon Samsung device?

Why do I get the error, "No apps can perform this action" when trying to reply to a calendar event in SPlanner?

Why did my device display the notification, “Unable to Perform Automatic Update?”

Why did my device display a notification, “Your phone's security has blocked an action that is not permitted.”

Why can't I download files in SBrowser when using an authenticated proxy?

Why does the native email application not show images in HTML messages when a proxy is used?

Why is my device not displaying the Security Software Version in the settings menu?

How-to articles

How to block Google and Samsung Accounts using KSP

How to restrict importing and exporting of calendar events between profiles using KSP

How to limit battery charging on a Samsung Knox device

How to enable Device Key Mapping for applications in Work Profile

How to skip MAC address randomization using KSP

How to enable Smart Switch on Fully Managed (DO) devices

How to enable system apps in Work Profile on a Samsung device

How to set up notifications for Samsung Knox service outages

How to disassociate a device from a Knox Platform for Enterprise license key

How to find the number of seats in a Knox Platform for Enterprise license key

How to use third-party keyboards in a work profile

How to manage Knox Workspace using Microsoft Exchange ActiveSync

How do I set up S/MIME for exchange accounts using the Samsung email client?

How can I update the Knox Workspace Container preloaded apps to a different version without my device OS being updated?

How do I configure the built-in device VPN client for Knox?

How do I troubleshoot Exchange Active Sync configuration issues on Knox devices?

How do I configure Certificate Based Authentication in the Samsung email client?

How do I enable speech to text and voice dictation in the Knox Workspace container?

How do I transfer data from Knox Container Only Mode (COM) to my laptop?

How do I show Knox Workspace container contact names in the personal call logs?

How do I use the IRM (Information Rights Management) email templates?

How can I tell if my device is connected to a network?

How do I disable the SE for Android notifications?

How can I find out which app generated an SE for Android security violation?


BlackBerry UEM and Knox Platform for Enterprise - User Guide

Citrix Endpoint Management and Knox Platform for Enterprise - User Guide

FAMOC and Knox Platform for Enterprise - User Guide

Government Mobile Security - Configuration Guide

IBM MaaS360 and Knox Platform for Enterprise - User Guide

Knox Manage and Knox Platform for Enterprise - User Guide

Microsoft Intune and Knox Platform for Enterprise - User Guide

MobileIron Cloud and Knox Platform for Enterprise - User Guide

MobileIron Core and Knox Platform for Enterprise - User Guide

SOTI MobiControl and Knox Platform for Enterprise - User Guide

VMware Workspace One and Knox Platform for Enterprise - User Guide