- *BASICS*
- The Knox Ecosystem
- Samsung Knox Portal
- Knox Licenses
- *FOR IT ADMINS*
- Knox Suite
- Knox Platform for Enterprise
- White paper
- Get started with UEMs
- Introduction
- Blackberry UEM
- Samsung Knox Manage
- Admin Guide
- Knox Service Plugin
- Knox Mobile Enrollment
- Introduction
- FAQs
- KBAs
- Release notes
- Get Started
- Features
- Register resellers
- Add an admin
- Create profiles
- Google Device Owner Support
- MDM Compatibility Matricies
- Device users
- Activity log
- Enrolling and unenrolling devices
- Configure devices
- Providing KME feedback
- Using the Knox Deployment App (KDA)
- Recovering Google FRP locked devices using KME
- Role-based access control (RBAC)
- Troubleshoot
- Knox Configure
- Mobile
- Wearables
- Shared Device
- Knox Manage
- Introduction
- FAQs
- KBAs
- Release Notes
- How-to videos
- Getting Started
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Knox E-FOTA
- Introduction
- White paper
- Knox E-FOTA One Admin Guide
- Knox E-FOTA Advanced Admin Guide
- *FOR RESELLERS*
- Knox Deployment Program
- *FOR MANAGED SERVICE PROVIDERS*
- Knox MSP Program
This section highlights what's changed in each iteration of the Knox Platform for Enterprise. For a full list of all Knox features across all versions, see our Knox on Android feature page.
Dual DAR
Knox 3.4 includes enhancements to Dual Data-at-Rest (DualDAR) encryption, which was introduced with Knox 3.3. With this enhancement, DualDAR provides improvements to security, stabilization, and performance.
- Zero Day Support: IT admins are now empowered to use DualDAR features the moment they're released. Through the Knox Service Plugin (KSP) and Knox Mobile Enrollment (KME), IT admins can now create DualDAR workspace containers and configure policies, before UEM providers include customized DualDAR support through their web consoles. For more, see the Release Notes for KSP and KME.
- Device Encrypted Storage : To enhance app stabilization, work apps can now write to DE storage by default. DE storage is available both during Direct Boot mode and after the user has unlocked the device. The default value for the configurable parameter DE restriction in the DualDARPolicy class is now set to false. To restrict writes to DE storage, you must create a package whitelist and set the value for DE restriction to true.
Deep settings customization
Use the Knox Service Plugin (KSP) to customize device settings from day zero such as:
- Location tracking
- Wi-Fi and NFC control
- Status bar notifications
- Biometrics and security
For more information about how enterprise IT admins can configure new device features using the Knox Service Plugin, see the KSP Admin Guide.
DeX management
The Knox 3.4 release includes new DeX customization features made available through the Knox Service Plugin. You can:
- Hide certain app icons.
- Customize the DeX Panel.
- Turn the Suggested Apps on or off.
- Turn the Mouse Cursor Flow on or off.
- Turn the Keyboard toolbar and Predictive text on or off.
- Skip the DeX welcome screen.
- Hide the Samsung DeX launcher icon from the quick panel.
Custom tab names
Knox 3.2.1 originally introduced a tab-based UI for Personal and Workspace apps.
With Knox 3.4, IT admins can now customize the names of the Personal and Workspace tabs.
Deprecated: Knox Workspace containers
We continue to harmonize Knox Platform for Enterprise (KPE) and Android Enterprise (AE) features to simplify your deployment of solutions across all Android devices.
To this end, we are deprecating the Corporate Liable (CL) mode of the Knox Workspace on the Note 10 and later devices. The Corporate Liable mode will however continue to work on S10 and earlier devices, even if they are upgraded to Knox 3.4.
Instead, use either of these AE use models:
- Work Managed Device (as a DO) and Work Profile (as a PO). This replaces the Corporate Liable mode.
- Work Managed Device (as a DO). This replaces the Container Only Mode (COM) that was deprecated in Knox 3.3.
