- Basics
- The Knox Ecosystem
- White Paper
- Samsung Knox Portal
- Knox Cloud Services
- General Knox Support
- Knox Licenses
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
Knox Remote Support minimum requirements
Check the supported platform and firewall settings before using Knox Remote Support.
Supported platforms
IT admins can use the Knox Remote Support Viewer from their computer. Device users must download the Knox Remote Support Agent to their device before IT admins can connect to their devices.
Component | Supported system |
---|---|
Knox Remote Support Viewer |
Microsoft Windows 7 and higher Supported web browsers:
|
Knox Remote Support Agent | Android 6 and higher |
Install and enable the Knox Remote Support agent
For non-Samsung devices, several features, such as the Home, left/right controls, screen rotation buttons, and touch controls, are not available while using Knox Remote Support. Devices should be controlled by the user.
Fully enable Knox Remote Support for Knox Manage
If the device is enrolled in Knox Manage, you must also enable the appropriate Knox Service Plugin policy in the device's profile. Without this policy, some essential Knox Manage features, like the Force Run feature, won't function when applied to the Knox Remote Support agent.
To fully enable the Knox Remote Support agent on devices enrolled in Knox Manage:
- On the Knox Manage console, go to Profile, then click the name of the device's profile.
- Click Modify Policy.
-
Set the following policies depending on the device's platform and enrollment type:
-
Personally-owned Android Enterprise device:
- Samsung Knox > Knox Service Plugin > Work Profile Policies (Profile Owner) > Enable work profile Policies — True
- Samsung Knox > Knox Service Plugin > Work Profile Policies (Profile Owner) > Advanced Restriction Policies in work profile (Premium) > Allow remote control — True
-
Fully managed or company-owned Android Enterprise device:
- Samsung Knox > Knox Service Plugin > Device-wide policies... > Enable device policy controls — True
- Samsung Knox > Knox Service Plugin > Device-wide policies... > Advanced Restriction policies (Premium) > Allow remote control — True
-
Android Legacy device with Knox Workspace:
- Knox Workspace > System > Remote Control — Allow
-
Automatically grant app permissions to Knox Remote Support agent
If needed, you can deploy policies on company-owned and fully managed devices that automatically grant certain permissions to the agent during installation. Doing so bypasses the need for the device user to manually grant the permissions when they first launch the agent.
To configure these policies:
- If you haven't already, add Knox Remote Support as an app in your tenant. For instructions on adding an app, see Add apps using Managed Google Play.
- Begin modifying the policies in your profile.
- Set the Android Enterprise > Application > App Permission policy to Grant, then click Add.
- In the app dialog, search for and select Knox Remote Support (com.sds.emm.sers).
-
In the app permissions dialog, Grant the following:
- read phone status and identity
- android.permission.READ_PHONE_NUMBERS
- post notifications (for Android 13 and higher)
- Save your profile and deploy it to the devices.
Resolve device admin errors with Android Enterprise
In some cases, Android Enterprise devices might display error notifications related to device admin toasting, and Knox Remote Support might fail to launch. If this behavior occurs after setting the KSP policies in the previous section, then you should enable the following additional KSP policy to resolve the issue:
- On the Knox Manage console, go to Profile, then click the name of the device's profile.
- Click Modify Policy.
-
Under Samsung Knox > Knox Service Plugin > Device-wide policies... > Device Admin allowlisting, set the following policies:
- Enable device admin controls — True
- Allowlisted DAs — Add an admin named Knox Remote Support
Disable the firewall
You may need to open certain domains and ports in your firewall to ensure Knox Remote Support can extend beyond your local and protected network domains and connect to the Knox server and its supporting resources.
Refer to the following table for regional firewall information.
Region | Server | Domain | IP | Port | Connection |
---|---|---|---|---|---|
Asia | Relay | ap-rs-relay.manage.samsungknox.com | 18.141.250.233 | 45001 | Mobile |
13.213.198.62 | |||||
WAS | ap-rs-web.manage.samsungknox.com | N/A | 443 | PC browser | |
US | Relay | us-rs-relay.manage.samsungknox.com | 35.83.188.168 | 45001 | Mobile |
52.36.230.249 | |||||
WAS | us-rs-web.manage.samsungknox.com | N/A | 443 | PC browser | |
EU | Relay | eu-rs-relay.manage.samsungknox.com | 54.155.132.151 | 45001 | Mobile |
63.34.35.115 | |||||
WAS | eu-rs-web.manage.samsungknox.com | N/A | 443 | PC browser |