- *BASICS*
- The Knox Ecosystem
- Samsung Knox Portal
- General Knox Support
- Knox Licenses
- *FOR IT ADMINS*
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- White paper
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Introduction
- Get started
- Features
- Register resellers
- Add an admin
- Create profiles
- Google device owner support
- MDM compatibility matrices
- Device users
- Activity log
- Enroll and unenroll devices
- Configure devices
- Provide KME feedback
- Use the Knox Deployment App (KDA)
- Recover Google FRP locked devices using KME
- Role-based access control (RBAC)
- Release notes
- FAQs
- Troubleshoot
- KBAs
- Knox Configure
- Mobile
- Wearables
- Shared Device
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQs
- Troubleshoot
- Knox Manage
- Introduction
- How-to videos
- Get started
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- FAQs
- KBAs
- Knox E-FOTA
- Introduction
- White paper
- Knox E-FOTA One
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQs
- Troubleshoot
- KBAs
- Migrate from Knox E-FOTA Advanced to Knox E-FOTA One
- Knox E-FOTA Advanced
- Knox E-FOTA on MDM
- Samsung Care+ for Business
- *FOR RESELLERS*
- Knox Deployment Program
- *FOR MANAGED SERVICE PROVIDERS*
- Knox MSP Program
This section highlights what's changed in each iteration of the Knox Platform for Enterprise. For a full list of all Knox features across all versions, see our Knox on Android feature page.
Dual DAR
Knox 3.4 includes enhancements to Dual Data-at-Rest (DualDAR) encryption, which was introduced with Knox 3.3. With this enhancement, DualDAR provides improvements to security, stabilization, and performance.
- Zero Day Support: IT admins are now empowered to use DualDAR features the moment they're released. Through the Knox Service Plugin (KSP) and Knox Mobile Enrollment (KME), IT admins can now create DualDAR workspace containers and configure policies, before UEM providers include customized DualDAR support through their web consoles. For more, see the Release Notes for KSP and KME.
- Device Encrypted Storage : To enhance app stabilization, work apps can now write to DE storage by default. DE storage is available both during Direct Boot mode and after the user has unlocked the device. The default value for the configurable parameter DE restriction in the DualDARPolicy class is now set to false. To restrict writes to DE storage, you must create a package allowlist and set the value for DE restriction to true.
Deep settings customization
Use the Knox Service Plugin (KSP) to customize device settings from day zero such as:
- Location tracking
- Wi-Fi and NFC control
- Status bar notifications
- Biometrics and security
For more information about how enterprise IT admins can configure new device features using the Knox Service Plugin, see the KSP Admin Guide.
DeX management
The Knox 3.4 release includes new DeX customization features made available through the Knox Service Plugin. You can:
- Hide certain app icons.
- Customize the DeX Panel.
- Turn the Suggested Apps on or off.
- Turn the Mouse Cursor Flow on or off.
- Turn the Keyboard toolbar and Predictive text on or off.
- Skip the DeX welcome screen.
- Hide the Samsung DeX launcher icon from the quick panel.
Custom tab names
Knox 3.2.1 originally introduced a tab-based UI for Personal and Workspace apps.
With Knox 3.4, IT admins can now customize the names of the Personal and Workspace tabs.
Deprecated: Knox Workspace containers
We continue to harmonize Knox Platform for Enterprise (KPE) and Android Enterprise (AE) features to simplify your deployment of solutions across all Android devices.
To this end, we are deprecating the Corporate Liable (CL) mode of the Knox Workspace on the Note 10 and later devices. The Corporate Liable mode will however continue to work on S10 and earlier devices, even if they are upgraded to Knox 3.4.
Instead, use either of these AE use models:
- Work Managed Device (as a DO) and Work Profile (as a PO). This replaces the Corporate Liable mode.
- Work Managed Device (as a DO). This replaces the Container Only Mode (COM) that was deprecated in Knox 3.3.
