Fundamentals

Last updated October 29th, 2024

The Big Picture

Samsung provides a wide range of both web-based and device-based APIs to manage our devices and services, allowing developers to integrate our device management features into their applications. Here is a high-level overview:

knox ecosystem

Register and upload devices

Knox Deployment Program — Device resellers use the Knox Deployment Program to register the IMEIs or serial numbers of devices purchased by enterprises. Resellers can do this through the Knox Deployment Program reseller portal. Or, they can use our Knox Deployment Program REST APIs to integrate this functionality into their own apps. The device information is stored on our Knox cloud servers for other services to access.

Enroll devices for management

Knox Mobile Enrollment — Enterprise IT admins can set up automatic UEM enrollment with Knox Mobile Enrollment, so they are compliant with management profiles and ready for enterprise use right out of the box. Enterprises can do this through the Knox Admin Portal, or they can use our Knox Mobile Enrollment REST APIs to integrate this functionality into their own services. The UEM information is stored on our Knox cloud servers for other services to access.

Device management

With Knox cloud services, enterprise IT admins can access a range of device management, monitoring, security, and customization solutions for their fleet of devices. Developers can integrate these device management features through the Knox cloud services APIs.

Knox Manage — Enterprise IT admins use Knox Manage to manage and control their fleet of devices with a wide range of available policies. As Samsung’s own UEM solution, IT admins can seamlessly set up Knox Manage with other Knox cloud services such as Knox Mobile Enrollment and Knox Asset Intelligence for automatic enrollment and device fleet monitoring capabilities.
Knox Configure — System Integrators use Knox Configure to customize devices for a wide range of vertical applications. For example, they can develop purpose-built info kiosks, point-of-sales terminals, inventory trackers, or entertainment systems. System Integrators can do this through the Knox Admin Portal or the Knox Configure REST API. Alternatively, they can use the Knox SDK to fully customize the setup and operation of a device.
Knox Attestation — UEM vendors or Independent Software Vendors (ISVs) can use Knox Attestation to ensure that a device is running authorized firmware that was installed in the factory or upgraded through official updates. They use a combination of Attestation REST APIs and the Knox SDK.
Knox E-FOTA — Enterprise IT admins use Knox E-FOTA to control device firmware updates across their device fleet. They can do this through the Knox Admin Portal.
Knox Asset Intelligence — Enterprise IT admins use Knox Asset Intelligence to monitor and track the status and condition of their fleet of devices. Knox Asset Intelligence also provides data-driven analytics to produce meaningful business insights regarding the usage and lifecycle of their fleet of devices.
Knox Guard — Enterprise IT admins use Knox Guard to secure and protect devices from fraud and theft. Knox Guard can detect and lock devices that are lost, stolen, or non-compliant, to protect company assets and enforce payment plans.
Knox Webhook Notification — Developers can subscribe to events such as uploads and device status changes from Knox Guard and Knox Asset Intelligence with the Knox Webhook Notification API. When these events are triggered, Knox Webhook Notification will send a notification to the subscribed webhook.

Device management support

Developers can build apps to control and manage device capabilities using the Knox SDK.

Knox SDK — Developers use the Knox SDK to create apps that manage, secure, and customize Samsung devices. There is a Knox SDK for Android phones and tablets, and a Knox Tizen SDK for wearables. Apps can take management policies from a web-based UEM or Knox Configure, and implement them on the device using the Knox SDK. The Knox SDK extends functionality in the Android SDK (for phones and tablets) and Tizen SDK (for watches), offering enhanced device manageability, security, customization, and usability.
Knox Service Plugin — IT admins can use the Knox Service Plugin to deploy new Knox features the moment they’re released. UEM vendors can support Knox Service Plugin on their web consoles, allowing their IT admins to access device management features offered by Knox Service Plugin. The Knox Service Plugin client app on the device handles the new feature configuration, so that the UEM client app doesn’t need to.

Managed service providers

Knox MSP Program — Partners can sign up as a managed service provider through the Knox MSP Program and onboard IT admin customers for Knox cloud services. Managed service providers can deploy and manage Knox cloud services on behalf of their customers through the Knox MSP portal, or through Knox cloud services APIs.