Knox Service Plugin 23.06 release notes

Last updated February 20th, 2024

App version	Release date
1.4.17	August 6th, 2023

Deprecation of CMFA policies

Continuous Multi Factor Authentication (CMFA) policies are deprecated in this release because of low usage. Samsung strongly suggests that you no longer use these policies, starting from Android 13 (Knox 3.9.0).

Additional notes
These policies belong to the Work profile policies > Continuous Multi Factor Authentication Policy group.

Deprecation of Allow UWB policy

The Allow UWB policy is deprecated in this release because of low usage. Samsung strongly suggests that you no longer use this policy, starting from Android 13 (Knox 3.9.0).

Additional notes
This policy belongs to the Device-wide policies > Device Restrictions group.

Configuration of UCM lock screen PIN number

The PIN number for the Samsung Universal Credential Management (UCM) lock screen can now be programmatically configured. This capability lets IT admins remotely configure the PIN number of devices.

Parameters that can be configured:

The initial PIN number.
The number of failed sign-in attempts before the device is locked.
The minimum and maximum length of the PIN number.

To configure this policy:

Under Device-wide policies > Universal Credential Manager policy > UCM plugin for device lock, in the Name of UCM plugin configuration to use field, enter the name of a UCM plugin configuration.

UCM plugin configurations are defined in the UCM plugin configurations policy group section.
Under UCM plugin configurations, in the Package name of UCM plugin application field, enter a UCM plugin package name.
Under UCM plugin configurations, in the PIN properties section, configure the PIN properties as desired.

Policy name	License type	Supported deployment	Android version required
PIN properties	Premium	DO	Minimum supported OS version is Android 13

Additional notes
A UCM Embedded Secure Element (eSE) plugin must be installed on the device before applying this policy. For details, see Universal Credential Management (UCM). This policy belongs to the UCM plugin configurations policy group. To enable this policy, you need to also enable the following: Under Device-wide policies, turn on Enable device policy controls. Under Device-wide policies > Universal Credential Manager policy, turn on Enable UCM policy controls. Under Device-wide policies > Universal Credential Manager policy > UCM plugin for device lock, turn on Enable UCM plugin for device lock.

Additional notes

A UCM Embedded Secure Element (eSE) plugin must be installed on the device before applying this policy. For details, see Universal Credential Management (UCM).
This policy belongs to the UCM plugin configurations policy group.
To enable this policy, you need to also enable the following:
- Under Device-wide policies, turn on Enable device policy controls.
- Under Device-wide policies > Universal Credential Manager policy, turn on Enable UCM policy controls.
- Under Device-wide policies > Universal Credential Manager policy > UCM plugin for device lock, turn on Enable UCM plugin for device lock.

Automatic power-on for models using Mediatek chipset

When USB power is applied to a device, the device can be powered on fully, not just to the battery-charging state.

This capability is already available with models that use the LSI and Qualcomm chipsets, and is now also available for models with the Mediatek chipset.

Policy names	License type	Supported deployment	Android version required
Set Power ON when connected to power source	Premium	DO	On Android 12 and lower, this feature is compatible with Qualcomm and LSI chipsets only. On Android 13 and higher, the feature is compatible with all chipsets including Mediatek.

Policy names

License type

Supported deployment

Android version required

Set Power ON when connected to power source

Premium

On Android 12 and lower, this feature is compatible with Qualcomm and LSI chipsets only.

On Android 13 and higher, the feature is compatible with all chipsets including Mediatek.

Additional notes
This policy belongs to the Device-wide policies > Device Settings policy group. To enable this policy, you need to also enable the following: Under Device-wide policies, turn on Enable device policy controls. Under Device-wide policies > Device Settings, turn on Enable device settings controls.

Heat management control

Battery heat management provides improved battery performance by limiting resource consumption of background apps. However, some apps can be affected by the reduction in available resources.

For example, if a location app runs in the background, the location accuracy can be affected by battery heat management.

IT admins can disable battery heat management to prevent app resources from being limited.

Policy name	License type	Supported deployment	Android version required
Disable Heat Management	Premium	DO, WP-C (device side)	Galaxy G715 and G736 devices running Android 13. Planned support for all Galaxy devices running Android 14.

Policy name

License type

Supported deployment

Android version required

Disable Heat Management

Premium

DO, WP-C (device side)

Galaxy G715 and G736 devices running Android 13.

Planned support for all Galaxy devices running Android 14.

Additional notes
This policy belongs to the Device-wide policies > Application management policies group. To enable this policy, you need to also enable the following: Under Device-wide policies, turn on Enable device policy controls. Under Device-wide policies > Application management policies, turn on Enable application management controls.