Menu

Knox Platform for Enterprise licenses

Knox Platform for Enterprise (KPE) licenses are designed to be activated and managed from within your existing enterprise mobility management (EMM) or unified endpoint management (UEM) solution, and are also included as part of Samsung Knox Suite.

There are currently two types of KPE licenses — Standard and Premium.

  • Standard licenses provide basic KPE features, and have typically been activated by EMM and UEM partners.
  • Premium licenses, also known as Commercial licenses, provide premium KPE features, and have typically been activated by customers. A Premium license is also required to make use of Knox Service Plugin features.

However, to simplify the KPE licensing model and improve customer satisfaction, Samsung plans to retire the Standard license in the future. Samsung provides KPE Premium licenses at no cost.

The Samsung Knox team recommends that EMM partners activate KPE Premium licenses for customers using Samsung devices. Customers no longer need to acquire their own KPE licenses — instead, they can use their EMM providers' Premium license keys.

NOTE — Specialized KPE licenses such as Knox Dual Data-At-Rest (DualDAR) and Knox Universal Credential Management (UCM) still exist, and continue to be paid licenses.

Obtain a license

You can get a Knox Platform for Enterprise license in three ways:

  • If you want to use EMM features, including Knox Service Plugin, follow these steps to get a KPE Premium license:

    1. Sign in to the Knox Admin Portal.

    2. On the Licenses page, click Manage license keys.

      manage license keys

    3. Click Actions > Generate Knox Platform for Enterprise Premium license key. A new KPE license is added to your license key list:

      newly added KPE license

      NOTE — If you're an EMM partner, Samsung recommends that you generate a new KPE Premium license to ensure that your license key is the latest type.
  • If you're a developer, get a KPE Premium license through the Knox Developer Portal. For details, see Get a license in the Knox Developer documentation.
  • Purchase a device and software bundle from a solutions provider, independent software vendor, managed service provider, or reseller, and receive a license when your device provider includes a Knox license key with your purchase. If you received such a bundle, contact the vendor of your supported EMM or device reseller for more details.

Activate a license

Once you have a KPE license, you can activate it in your EMM. Your EMM may have already activated your Knox license key for you upon purchase. Contact your EMM vendor to check if you need to input the license key manually.

Activate the KPE license on your EMM console. Consult your solution's documentation for details about how it has integrated KPE.

For example, the following image shows the license page in Knox Manage. If you use Knox Manage, this page is where you activate your KPE license.

knox manage licenses page

Activate a license without an internet connection

If your enterprise is highly regulated and doesn't allow communication with external servers, you can request the paid Knox License On-Premises Server software, which handles license verification within your firewall. For more information, contact your Samsung representative or reseller, or Samsung Support.

Renew a license

If your KPE license will expire within the next 90 days, or if the license has expired but has not been terminated, you can renew the license for another two years.

  • KPE Premium license

    1. Sign in to the Knox Admin Portal.
    2. On the Licenses page, click Manage license keys.
    3. Click Actions > Renew Knox Platform for Enterprise Premium license key.

    4. Select the license key you want to renew, and click Renew.

      renew a KPE Premium license key

  • KPE Standard license

    1. Sign in to the Knox Developer Portal.
    2. On the My license keys page, click Actions > Renew Knox Platform for Enterprise Standard license key.

    3. Select the license key you want to renew, and click Renew.

      renew a KPE Standard license key

Validate a license key

You can validate your license key as follows:

  1. Sign in to the Knox Admin Portal.
  2. On the Licenses page, click Manage license keys.
  3. Enter your license key in the Check license keys field.

check license key tool

FAQ

ClosedHow do I add more assignments to an existing KPE license key?

The KPE Premium license, available at no cost, includes 10,000,000 seats, which expire 2 years from the date of activation.

If you need more than 10,000,000 assignments, contact the Knox Reseller or your Samsung account representative. You do not need to obtain and activate another KPE license.

ClosedWhy do I lose an assignment after factory resetting a device?

If you factory reset a device without first unenrolling it from your EMM, that KPE license remains consumed. By design, the assignment isn't automatically freed.

If you have already wiped a device without unenrolling it from an EMM and want to restore its Knox license seat, use the device deactivation tool. For details, see How to disassociate a device from a Knox Platform for Enterprise license key.

ClosedWhat happens to the Work container if the license expires?

The Knox Workspace license expires two years after its activation date. If the license expires, access to the Work container depends on the device's Android version:

  • Android 11 and higher — The Work container can be used, but KPE APIs can no longer be called. You won't be able to apply KPE policies until the license is reactivated.

  • Android 10 and lower — The Work container locks, and KPE APIs can no longer be called. But the data inside the container is unaffected, and the user regains access to the container and data after the license is extended or reactivated.

    NOTE — Some Android 10 devices may exhibit behavior similar to Android 11 devices.

The following limitations apply to the container when the license expires:

  • For any device running Android 9 and lower, and some Android 10 devices, the container will be locked and inaccessible until the license is extended or reactivated.
  • You can't push any Knox Workspace policies to devices.
  • All Knox Workspace policies set in the EMM tenant persist and can't be updated.