Knox SDK FAQs
General
Where can I obtain a whitepaper for Samsung Knox?
What versions of Android support the Knox SDK?
How can I check if my device firmware is an engineering or commercial build?
How can I access the binaries before they are released?
What is a deprecated API method?
What kind of support is offered after an API is deprecated?
Why were the API classes deprecated?
What are the features by default set to hidden/disabled in ProKiosk mode?
Is Knox supported on other platforms such as windows?
Which hardware control features can be managed inside Knox Workspace using the Knox SDK?
Why do a few Knox SDK APIs not work on some devices?
Can Google Play used to deploy Knox apps?
Can a third-party app use the Knox SDK to get LDAP information?
How do I enable users to select a 3rd party keyboard?
How does my device's serial number change with Knox 3.2.1?
If I don't use the UCM APIs of the Knox SDK what are my options for credential storage?
What is Universal Credential Management (UCM)?
What are the changes in Samsung Calendar data sharing in Knox SDK 3.8?
What are the alternative Google APIs for Samsung Knox Wi-fi deprecation?
ML Model Protection
Are there any additional steps for Linux to give execute permissions to the Encryption Tool?
Do I need to change my app to run the encrypted model?
Where are the encrypted files saved?
Which devices support Knox for Model Protection?
Which ML file types are supported by Knox for Model Protection?
Which operating systems (OS) support Knox ML Encryption Tool?
Installation
How do I use an SDK packaged as an Eclipse IDE add-on with the Android Studio IDE?
Is it possible to install an app silently on a device using Knox SDK?
How can an app find out which apps are installed in and outside a container using the Knox SDK?
How can an app block the installation of a non-trusted app using the Knox SDK?
What does "Security policy prevents installation of this application" mean?
Can I prevent an end user from installing certificates using the Knox SDK?
Why is the installCertificate API method not successfully installing a certificate on my device?
Licensing
What is the KPE Premium license key and why should I use it?
What is the backwards compatible key?
When do I need to use the backwards compatible key?
Do I need to associate my app with a backwards compatible key?
How have license key names changed?
What is happening to existing KLM license keys?
What is happening to existing ELM license keys?
Which keys can be used in combination with each other?
What is automatic license seat release?
What is the difference between Standard and Premium permissions?
ELM License End of Service
When is the ELM license key terminated?
What should I do if I want to service my app which uses an ELM license?
Operation
Is there a limit to the number of applications that can be blocked or allowed using the Knox SDK?
What should I do if I find API errors?
Can I use SDP for an app that is outside the Knox container?
How do I disable the USB port except for charging, using the Knox SDK?
Can I use Google push notifications inside a Knox Workspace container?
How can an enterprise disable roaming access over an enterprise APN, using the Knox SDK?
How do I use the Knox SDK to allow or block phone numbers?
How do I use the SDK to prevent launching the screen saver when an app is running?
Is it possible to block application access to data while roaming, using the Knox SDK?
Is there any way to create IMAP, POP, or Exchange accounts in the emulator?
What does the RCPPolicy.NOTIFICATIONS argument do in the API method setAllowChangeDataSyncPolicy?
What kind of phone numbers are allowed after setting setEmergencyCallOnly(true) in the Knox SDK?
Why are app shortcuts not showing up in Kiosk mode for the Knox SDK?
Why are Knox Customization policies still active on my device even after my app is uninstalled?
Why can't you enable the camera inside a container when it is blocked in the personal space?
Why does the API method call setEnableApplication(), using the Knox SDK, disable the app?
Why does the createVpnProfile method, in the Knox SDK, fail when a Profile name has whitespace?
Why does the SDK return a NullPointerException when I access the SMS/MMS content URI?
Are the Knox SDK browser policies applicable to Chrome as well?
Can I add system or pre-installed app packages, using the Knox SDK, to the notification blacklist?
Is an APN validated when I use the Knox SDK to add it to a device?
How can I disable GPS on the device using the Knox SDK?
Can an app using the Knox SDK clear an email signature?
Can multi-window mode be disabled through blocklisting, using the Knox SDK?
How does the Knox API method EmailPolicy.setAllowEmailForwarding work?
Why is video recording also blocked when I use the Knox SDK to block audio recording?
Does my launcher app need a special intent to work in Kiosk mode?
What secure hardware can I use with the UCM APIs to store credentials?
Premium Features
Why does BluetoothDevice.getName() return NULL in Knox Workspace?
Customization
Can I use a Custom license with the Knox SDK?
Why are Customization policies still active even after app is uninstalled?
Workspace
When will Samsung support COMP?
What licenses does a developer have to enable to make an app work?
Which Samsung devices support the harmonized container?
SDP
What is the Sensitive Data Protection feature in the Knox SDK?
Which devices support the Sensitive Data Protection APIs?
What is the difference between the SDP and the Knox Chamber?
When using the SDP APIs, what is the difference between default engine and custom engine?
UCM
What is Universal Credential Management (UCM)?
Samsung DeX
How do I enable and disable DeX display?
How do I specify how a device USB can be used?
What features to control Samsung DeX are in the Knox SDK?
Can I control the Samsung Dex loading screen?
Can I display a work profile through Samsung DeX?
How can I block an app in Samsung DeX mode?
How do I modify my app so that it displays in Samsung DeX mode?
Security
Can I use the Knox SDK to encrypt the SD card?
Does a Knox container enforce authentication by default?
Do the SDP APIs support a security standard?
As a developer, how can I access the device root key?
How can I ensure that certificates are stored in the TIMA KeyStore, using the Knox SDK?
What does "Security policy prevents installation of this application" mean?
What is the maximum length allowed for a Wi-Fi SSID, when using the Knox SDK?
What is the scope of the setPasswordVisibilityEnabled() API method, in the Knox SDK?
Why do I see "Cannot safely connect to server" when I create an email account using SSL?
Why doesn't the Knox method "isActivePasswordSufficient" check for forbidden strings?
Why is the Knox API method setMaximumTimeToLock() not showing the time I configured?
Can I use the Knox SDK to modify the fingerprint passcode requirements?
How does SDP secure the cryptographic keys used for data encryption?
Can I use the Knox SDK to disable the "Unlock Via Google" password unlock option?
Can an app prevent access to specific networks, using the Knox SDK?
Why are HTTPS requests bypassing global proxy settings in the Knox SDK?
Standard Features
What Knox SDK API methods are available to manage device firmware?
Will the legacy ELM and KLM keys still work with the Knox Platform for Enterprise (KPE) key?
Why do a few Knox SDK APIs not work on some devices?
What is the difference between hideStatusBar() and hideSystemBar() in the Knox SDK?
Can multi-window mode be disabled through blacklisting, using the Knox SDK?
Can I force a device to update to the latest firmware?
VPN
Why does the Knox SDK API method call to clear certificates remove VPN connections?
VPN Provider
Do I need a license to use the Knox VPN SDK?
How do I add all apps inside AND outside the container to a VPN profile?
What is VPN On-Premise Bypass?
What API do I use to create a On-Premise Bypass VPN profile?
Does the Knox framework store any type of data passed during profile creation?
How is the Knox container affected by VPN On-Premise Bypass?
How should the network state change be handled by the VPN Client Integration?
The framework is not starting the VPN connection for the given profile as expected.
Under what circumstances does the framework trigger the start connection?
When should the various Android VPN service APIs be called?
Containers
How does an app detect if a container was created using the Knox SDK?
How do I install the MDM agent inside the Knox container?
Why do I get error KnoxContainerManager.ERROR_INTERNAL_ERROR(-1014) while creating a container?
Device admin deprecation
What is being deprecated with Android device admin?
What is API level 29, as it relates to DA deprecation?
What is the impact of DA deprecation to Knox?
As a Knox partner what actions do I need to take for DA deprecation?
What happens to DA apps when upgraded to Android Q?
With DA deprecation, when can I safely upgrade to Android Q?
What if a device already has Android Q before I'm ready for DA deprecation?
Can my DA app coexist with a UEM app running as DO?
Are there any changes to Knox Configure due to DA deprecation?
Can I use my DA app alongside Knox Configure?
Does KME still support the enrollment of devices using DA mode?
As DA management mode is not available in Android Q, can I enroll via KME to Work Profile only?
