Knox Service Plugin 21.09 release notes

Control the Network Mode

IT admins can configure and control the Mobile Network menu in DO mode. Once an IT admin changes the Network mode through an API, the customer will not be able to change the network settings. This feature can be operated in each Network mode (3G/LTE/5G).

License Type — Standard

Supported Deployment — DO, WP-C(device side)

KPE version required — Knox 3.7+ for S21+

Additional notes — Minimum supported OS version is Android 11.

Deprecating E-billing and UCM functions

The E-billing feature has been deprecated from Knox version 3.7. The UCM function will be deprecated from Knox 3.7.1 and onwards.

License Type — Premium

Supported Deployment — DO, WP-C (device side)

KPE version required — Knox 3.7+ for S21+

Additional notes — Minimum supported OS version is Android 11.

Roaming configuration

IT admins can configure the roaming settings of a device. The roaming configuration can be changed and locked by the IT admin and the settings can only be configured in DO mode.

License Type — Standard

Supported Deployment — DO

KPE version required — Knox 3.7.1+ for XCover Pro / Knox 3.7+ for S20

Additional notes — Minimum supported OS version is Android 11.

Enable onscreen keyboard

Customers can manually provision their setting to allow an onscreen keyboard to display after plugging in a physical keyboard. For devices with Knox version 3.7.1 and older, the onscreen keyboard setting can be toggled ON/OFF. If this policy is disabled by IT admins, the on-screen keyboard will not be displayed after a physical keyboard has been plugged in.

License Type — Standard

Supported Deployment — DO, KIOSK

KPE version required — Knox 3.7.1+ for Tab Active Pro / Tab Active 3. Knox 3.7+ for S21

Additional notes — Minimum supported OS version is Android 11.

Removal of insecure VPN types

In Android S, Google is removing the ability to create the following VPN types directly from the Settings app:

• L2TP
• PPTP
• IPSec Xauth PSK
• IPSec Xauth RSA
• IPSec Hybrid RSA

IKEv2 VPN types will remain the only types supported by the Settings app.

License Type — Standard

Supported Deployment — DO, WP-C(device side)

KPE version required — Knox 3.7+ for S21+.

Additional notes — Minimum supported OS version is Android 12.

Prevent users from dismissing KPE T&C popup permanently

IT admins can prompt end-users to agree to the KPE terms and conditions by displaying it through a popup every two minutes. If accepted, the popup will stop. If the popup is skipped, policies won’t be applied to the managed device and the popup will continue to display every two minutes.

License Type — Standard

Supported Deployment — DO, WP-C (device side)

KPE version required — Knox 3.7+.

Additional notes — Minimum supported OS version is Android 10.

Multi-time configuration via QR scanning

IT admins can change the settings of a device that has already been distributed and running. A device with existing KSP policies can scan a QR code generated by KME Direct to upload and apply new policies to the device.

License Type — Standard

Supported Deployment — DO, WP-C (device side)

KPE version required — Knox 3.7.1+ for XCover Pro. Knox 3.7.1+ for Tab Active Pro / Tab Active 3.

Additional notes — Minimum supported OS version is Android 11.