Knox Service Plugin 26.03 Beta release notes
Last updated February 13th, 2026
| App version | Release date |
|---|---|
| 1.5.53 | February 13th, 2026 |
The Knox Service Plugin Beta app version 1.5.53 is now available, providing early access for testing new features and improvements. The features will be included in the official Knox Service Plugin release in March.
New
Manage Tap2DeX
You can now enable or disable Tap2DeX with Knox Service Plugin. Tap2DeX allows device users to connect DeX to an external monitor with a single tap, allowing for seamless display setup.
You can find this policy at Device-wide policies > DeX policy > Enable Tap2DeX mode.
Tap2DeX requires DeX, Wi-Fi Direct, and NFC enabled to function on your devices. If any of the following Knox Service Plugin policies are set, Enable Tap2DeX mode won’t apply to your devices.
| Policy | Value |
|---|---|
| Device-wide policies > DeX policy > Manage DeX restrictions | |
| - Allow Dex connection | OFF |
| - Enforce the use of Ethernet connection | ON |
| Device-wide policies > Device Restrictions | |
| - Allow Wi-Fi | OFF |
| - Allow Wi-Fi Direct | OFF |
| Device-wide policies > Device Controls > NFC Policy | |
| - Turn on NFC | OFF |
| - Allow User to Change NFC State | OFF |
If Tap2DeX fails to connect, verify the following:
- Check that the correct local MAC address for your display device is loaded to it’s corresponding NFC tag.
- Ensure that your device users unlock their devices before using Tap2DeX.
- Ensure that DeX, Wi-Fi Direct, and NFC are enabled on your devices.
Show Galaxy Store app in the work profile
On One UI 8.5, the Galaxy Store is hidden by default in the work profile of managed devices. You can use Knox Service Plugin’s Show Galaxy Store application policy to show the Galaxy Store app in the work profile of your devices.
- For company-owned devices with a work profile, go to Device-wide policies > Application management policies > Show Galaxy Store application.
- For personal devices with a work profile, go to Work profile policies > Application management policies > Show Galaxy Store application.
Disable call recording on company devices
You can now disable call recording, preventing device users from recording calls on company-owned devices. To use this policy, set Device-wide policies > Device Restrictions > Allow call recording to False.
This feature is only supported on models released in the United States.
Updates
Automatic policy updates after app installation
With this release, Knox Service Plugin automatically applies the Disable application without user interaction policy when it detects that a target app is installed. This feature ensures that app policies are enforced even if apps are re-installed or were installed after the profile was applied. This enhancement is only available on devices running Knox 3.10 and higher.
For details, see Application management policies.
Improvement to UCM plugin configuration
You can now enter either the raw or hashed app signature while granting apps access to credential storage and certificates.
For details, see:
- UCM plugin configurations > UCM plugin configuration > Application access controls > Application signature
- UCM plugin configurations > UCM plugin configuration > Certificate alias access controls > List of application signatures
Drawing assist renamed to Creative studio
With One UI 8.5, Drawing assist has been renamed to Creative studio. Its corresponding menu item on Knox Service Plugin for the Block individual galaxy AI operations policy is also updated accordingly.
On this page
Is this page helpful?