Knox Service Plugin 25.02 release notes

New

Additional deep settings customizations

Knox Service Plugin 25.02 introduces several new deep settings customizations to provide enhanced control over your enterprise device’s settings.

To learn more, see Deep settings customizations.

Configure motion smoothness

With this release, you can now configure the motion smoothness on the displays of your devices with Knox Service Plugin. You can set Display > Adaptive motion smoothness to enable or disable this setting. Turning on adaptive motion smoothness provides a better display experience when scrolling, while turning it off can save battery life on your devices.

Improvement to external keyboard support

When using tablet devices with an external keyboard, the function keys map to the device’s virtual keyboard toolbar. To retain the functionality of the external keyboard’s function keys, Show toolbar with physical keyboard must be disabled so that the tablet’s virtual keyboard toolbar is disabled when an external keyboard is connected.

With Knox Service Plugin 25.02, you can disable Show toolbar with physical keyboard, allowing your device users to use the function keys on external keyboards.

Configure a Remote Identifier for strongSwan VPN clients

With this release, you can now configure a Remote Identifier for strongSwan VPN clients. A Remote Identifier is used for authentication during the VPN connection process, ensuring the security and privacy of the user connected to the VPN.

You can configure this policy at VPN profiles (Premium) > Parameters for Knox built-in VPN (for Strong Swan) > Remote Identifier.

Enhancements to VPN notifications

By default, devices display a persistent notification to indicate that it’s connected to a VPN, but this may needlessly clutter the notification tray on your devices.

With this release, you can disable Show persistent VPN notification with Knox Service Plugin, which provides a cleaner user interface for your devices.

You can configure this policy under Device-wide policies or Work profile policies, in VPN policy (Premium) > Show persistent VPN notification.

Support for third-party apps to access Knox SDK

Knox 3.11 introduces changes to Knox SDK access, which restricts the access some apps have to certain features in the Knox SDK.

To support your enterprise apps using the Knox SDK, this release of Knox Service Plugin lets you grant access to Remote control and Certificate management features in the Knox SDK for specific apps.

To learn more, see Allow apps to access Knox SDK.

Enhancements to Galaxy AI feature management

With this release of Knox Service Plugin, you can selectively enable and disable Galaxy AI features on Knox Service Plugin. This extra level of granularity allows you to use select Galaxy AI features for productivity while blocking other features to comply with your organization’s security policies.

You can control Galaxy AI with the new policies Block individual galaxy AI operations and Block all galaxy AI, under Advanced Restriction policies.

Improvements to SIM management

This release of Knox Service Plugin introduces enhanced SIM control for your enterprise devices. You can use these policies to better manage dual-SIM and eSIM devices, while ensuring that they follow your organization’s network and security policies.

• Specify a set number of allowed SIMs:
  • Allow 0, 1, or 2 physical SIMs
  • Allow 0, 1, or 2 eSIMs
• Only allow SIMs with a specific MCC and MNC combination

You can configure these with the new policies under Advanced Restriction policies > Sim Management operation.

Update

Ability to enroll multiple certificates with SCEP

Previously, you could use Simple Certificate Enrollment Protocol (SCEP) to enroll only one certificate per profile on fully-managed devices.

With this release, you can now enroll multiple certificates with SCEP, and it is also supported on company-owned devices with a work profile. This enhancement is only available on devices running Knox 3.11 and higher.

To learn more, see Certificate provisioning configurations.

Automatic policy updates after app installation

Previously, Knox Service Plugin app policies were applied only when a profile was pushed to devices. But this meant that if an app was re-installed or was installed after the profile was pushed, the policies didn’t apply to the app until the profile was pushed again.

With this release, Knox Service Plugin automatically applies the Battery optimization allowlist and Permission controls policies when it detects that the app is installed. This feature ensures that app policies are enforced even if apps are re-installed or were installed after the profile was applied. This enhancement is only available on devices running Knox 3.10 and higher.