Menu

Which servers do EMMs need to communicate with in order to conduct device attestation?

[Environment] 
Any Samsung device supporting the Knox framework.

[Summary]
Your firewall must allow HTTPS traffic between the device management server and Samsung's Attestation service. The device management server initiates each session.

The general Attestation API domain is attest-api.secb2b.com. There are also three region specific domains.

China region — china-attest-api.secb2b.com.cn
European region — eu-attest-api.secb2b.com 
US region — us-attest-api.secb2b.com

Depending on your location and EMM configuration, you need to allow traffic to one, or several of these domains.
Share it: