KPE feature update — Knox 3.4

This section highlights what's changed in each iteration of the Knox Platform for Enterprise. For a full list of all Knox features across all versions, see our Knox on Android feature page.

Dual DAR

Knox 3.4 includes enhancements to Dual Data-at-Rest (DualDAR) encryption, which was introduced with Knox 3.3. With this enhancement, DualDAR provides improvements to security, stabilization, and performance.

• Zero Day Support: IT admins are now empowered to use DualDAR features the moment they're released. Through the Knox Service Plugin (KSP) and Knox Mobile Enrollment (KME), IT admins can now create DualDAR workspace containers and configure policies, before UEM providers include customized DualDAR support through their web consoles. For more, see the Release Notes for KSP and KME.
• Device Encrypted Storage : To enhance app stabilization, work apps can now write to DE storage by default. DE storage is available both during Direct Boot mode and after the user has unlocked the device. The default value for the configurable parameter DE restriction in the DualDARPolicy class is now set to false. To restrict writes to DE storage, you must create a package allowlist and set the value for DE restriction to true.

Deep settings customization

Use the Knox Service Plugin (KSP) to customize device settings from day zero such as:

• Location tracking
• Wi-Fi and NFC control
• Status bar notifications
• Biometrics and security

For more information about how enterprise IT admins can configure new device features using the Knox Service Plugin, see the KSP Admin Guide.

DeX management

The Knox 3.4 release includes new DeX customization features made available through the Knox Service Plugin. You can:

• Hide certain app icons.
• Customize the DeX Panel.
• Turn the Suggested Apps on or off.
• Turn the Mouse Cursor Flow on or off.
• Turn the Keyboard toolbar and Predictive text on or off.
• Skip the DeX welcome screen.
• Hide the Samsung DeX launcher icon from the quick panel.

Custom tab names

Knox 3.2.1 originally introduced a tab-based UI for Personal and Workspace apps.

With Knox 3.4, IT admins can now customize the names of the Personal and Workspace tabs.

Deprecated: Knox Workspace containers

We continue to harmonize Knox Platform for Enterprise (KPE) and Android Enterprise (AE) features to simplify your deployment of solutions across all Android devices.

To this end, we are deprecating the Corporate Liable (CL) mode of the Knox Workspace on the Note 10 and later devices. The Corporate Liable mode will however continue to work on S10 and earlier devices, even if they are upgraded to Knox 3.4.

Instead, use either of these AE use models:

• Work Managed Device (as a DO) and Work Profile (as a PO). This replaces the Corporate Liable mode.
• Work Managed Device (as a DO). This replaces the Container Only Mode (COM) that was deprecated in Knox 3.3.