How to authorize remote control permissions for Android 15 or higher

Environment

• Knox Service Plugin
• Knox SDK
• Devices running Android 15 (Knox 3.11) and higher

Overview

Starting with Android 15 OS (Knox 3.11) and higher, Knox SDK remote control features are restricted to applications running in Android Enterprise device management modes. This includes fully managed devices and work profiles on managed devices.

In response to this change, Knox Service Plugin offers a feature that allows you to grant an uploaded application permission to use Knox remote control APIs. Once applications are authorized, third-party developers can remotely control any assigned device, regardless of UEM or EMM management.

You might encounter unexpected behavior with third-party apps that use these remote-control features, if permissions are not authorized.

How to authorize remote control permissions for applications using Knox Service Plugin:

1. On your EMM console, go to your Knox Service Plugin configuration.

2. Configure the following Device-wide policies:

   Policy	Value
   Enable device policy controls	True
   Application management policies > Enable application management controls	True
   Application management policies > Enable Add applications for accessing the Knox SDK	True

3. Create a configuration for the Add applications for accessing the Knox SDK policy (by default, the first configuration is called Configuration 1):

   Field	Value
   Package name	Specify the app's package name.
   Signature	(Optional) Specify the app's signature.
   Scope	Select REMOTE CONTROL from the Knox SDK features drop-down menu.

4. Save the profile and apply the changes to your devices.