Unable to deploy internal apps because of Safe-install warnings

Environment

• Knox Platform for Enterprise
• Android Enterprise
• Android 15
• Fully managed device or company-owned device with a work profile

Overview

On fully managed devices and company-owned devices with a work profile that are running Android 15 OS, you may receive a security warning when deploying internal applications (APKs):

Installing this app isn’t recommended

Two options display beneath the security warning:

1. Install Anyway
2. Don’t Install

When you select Don’t Install on the device, the app deployment fails.

Cause

In a B2B environment, like devices in fully managed mode or company-owned devices with a work profile with the Auto Blocker feature disabled, when you install internal APKs from sources other than official app stores (sideloading), such as the Google Play store, a warning pop-up from Android’s Safe Install feature displays. If you select Don’t Install, the APK installation process cancels and fails to complete.

Samsung has implemented certain restrictions on sideloading. For example, Auto Blocker is enabled by default on Galaxy devices running Android 15, which prevents users from sideloading on the devices.

However, starting with the Galaxy S25 and all existing devices with One UI 7.0, a warning displays when attempting to sideload apps, even if Auto Blocker is disabled.

Resolution

The following changes will be implemented on devices running Android 16 OS and higher:

• On devices enrolled in Android Enterprise, IT admins have strict control over which apps can be installed. As they can control permissions through their MDM console, warning pop-ups for sideloading aren’t necessary and won’t be displayed.

• For other devices, once the system verifies whether the device is operating in fully managed mode or it’s a company-owned device with a work profile, the warning pop-up no longer displays.