Menu

Knox SDK FAQs

General

What is the Samsung Knox SDK?

Where can I obtain a whitepaper for Samsung Knox?

What versions of Android support the Knox SDK?

How can I check if my device firmware is an engineering or commercial build?

How can I access the binaries before they are released?

What is a deprecated API method?

What are the features by default set to hidden/disabled in ProKiosk mode?

What are credentials?

What is Knox TIMA CCM?

Is Knox supported on other platforms such as windows?

Which hardware control features can be managed inside Knox Workspace using the Knox SDK?

Why do a few Knox SDK APIs not work on some devices?

Can Google Play used to deploy Knox apps?

Can a third-party app use the Knox SDK to get LDAP information?

How do I enable users to select a 3rd party keyboard?

How does my device's serial number change with Knox 3.2.1?

If I don't use the UCM APIs of the Knox SDK what are my options for credential storage?

What is Universal Credential Management (UCM)?

ML Model Protection

Are there any additional steps for Linux to give execute permissions to the Encryption Tool?

Do I need to change my app to run the encrypted model?

Where are the encrypted files saved?

Which devices support Knox for Model Protection?

Which ML file types are supported by Knox for Model Protection?

Which operating systems (OS) support Knox ML Encryption Tool?

Installation

How do I use an SDK packaged as an Eclipse IDE add-on with the Android Studio IDE?

Is it possible to install an app silently on a device using Knox SDK?

Why am I still able to download an app even though I have added it to the blocklist with the method addAppPackageNameToBlackList() from the Knox SDK?

How can an app find out which apps are installed in and outside a container using the Knox SDK?

How can an app block the installation of a non-trusted app using the Knox SDK?

What does "Security policy prevents installation of this application" mean?

Can I prevent an end user from installing certificates using the Knox SDK?

Does API method installApplication(String packageName) download apps from the play store and install them silently?

Does the API method setApplicationUninstallationDisabled disable the uninstallation of apps inside the container when using the Knox SDK?

Why is the installCertificate API method not successfully installing a certificate on my device?

Licensing

How do I use license keys?

What is the KPE Premium license key and why should I use it?

What is the backwards compatible key?

When do I need to use the backwards compatible key?

Do I need to associate my app with a backwards compatible key?

How have license key names changed?

What is happening to existing KLM license keys?

What is happening to existing ELM license keys?

Which keys can be used in combination with each other?

What is automatic license seat release?

What are license permissions?

What is the difference between Standard and Premium permissions?

How do I declare permissions?

ELM License End of Service

When is the ELM license key terminated?

What should I do if I want to service my app which uses an ELM license?

Operation

Is there a limit to the number of applications that can be blocked or allowed using the Knox SDK?

What should I do if I find API errors?

Can I use SDP for an app that is outside the Knox container?

What Keystores can I use?

How do I disable the USB port except for charging, using the Knox SDK?

Can I use Google push notifications inside a Knox Workspace container?

Does the API method enforceMultifactorAuthentication(), in the Knox SDK, come into effect immediately?

How can an enterprise disable roaming access over an enterprise APN, using the Knox SDK?

How can I move an app from the user's personal mode to the Knox container using an API in the Knox SDK?

How do I use the Knox SDK to allow or block phone numbers?

How do I use the SDK to prevent launching the screen saver when an app is running?

How does the Knox SDK method, setAllowChangeDataSyncPolicy(), sync contacts with the container so they are visible on the personal side?

Is it possible to block application access to data while roaming, using the Knox SDK?

Is there any way to create IMAP, POP, or Exchange accounts in the emulator?

What does the RCPPolicy.NOTIFICATIONS argument do in the API method setAllowChangeDataSyncPolicy?

What kind of phone numbers are allowed after setting setEmergencyCallOnly(true) in the Knox SDK?

Why are app shortcuts not showing up in Kiosk mode for the Knox SDK?

Why are Knox Customization policies still active on my device even after my app is uninstalled?

Why can't you enable the camera inside a container when it is blocked in the personal space?

Why does the allowOTAUpgrade API method, in the Knox SDK, have no effect when allowFirmwareRecovery() is set to false?

Why does the API method call setEnableApplication(), using the Knox SDK, disable the app?

Why does the createVpnProfile method, in the Knox SDK, fail when a Profile name has whitespace?

Why does the SDK return a NullPointerException when I access the SMS/MMS content URI?

Are the Knox SDK browser policies applicable to Chrome as well?

Can I add system or pre-installed app packages, using the Knox SDK, to the notification blacklist?

Is an APN validated when I use the Knox SDK to add it to a device?

How can I disable GPS on the device using the Knox SDK?

Can an app using the Knox SDK clear an email signature?

Can multi-window mode be disabled through blocklisting, using the Knox SDK?

How does the Knox API method EmailPolicy.setAllowEmailForwarding work?

Why is video recording also blocked when I use the Knox SDK to block audio recording?

Does my launcher app need a special intent to work in Kiosk mode?

What secure hardware can I use with the UCM APIs to store credentials?

Premium Features

Why does BluetoothDevice.getName() return NULL in Knox Workspace?

Customization

Can I use a Custom license with the Knox SDK?

Why are Customization policies still active even after app is uninstalled?

Workspace

When will Samsung support COMP?

What licenses does a developer have to enable to make an app work?

Which Samsung devices support the harmonized container?

SDP

What is the Sensitive Data Protection feature in the Knox SDK?

Which devices support the Sensitive Data Protection APIs?

What is the difference between the SDP and the Knox Chamber?

When using the SDP APIs, what is the difference between default engine and custom engine?

UCM

What is Universal Credential Management (UCM)?

Samsung DeX

How do I enable and disable DeX display?

How do I specify how a device USB can be used?

What features to control Samsung DeX are in the Knox SDK?

Can I control the Samsung Dex loading screen?

Can I display a work profile through Samsung DeX?

How can I block an app in Samsung DeX mode?

How do I modify my app so that it displays in Samsung DeX mode?

Security

Can I use the Knox SDK to encrypt the SD card?

Does a Knox container enforce authentication by default?

Do the SDP APIs support a security standard?

As a developer, how can I access the device root key?

How can I ensure that certificates are stored in the TIMA KeyStore, using the Knox SDK?

How do you programmatically unlock the container after the maximum amount of failed attempts, using the Knox SDK?

What does "Security policy prevents installation of this application" mean?

What is the maximum length allowed for a Wi-Fi SSID, when using the Knox SDK?

What is the scope of the setPasswordVisibilityEnabled() API method, in the Knox SDK?

Why do I see "Cannot safely connect to server" when I create an email account using SSL?

Why doesn't the Knox method "isActivePasswordSufficient" check for forbidden strings?

Why is my timeout of 15 minutes not working for the resetContainerPassword() method, using the Knox SDK?

Why is the Knox API method setMaximumTimeToLock() not showing the time I configured?

Can I use the Knox SDK to modify the fingerprint passcode requirements?

When I call the Knox SDK API method setExternalStorageEncryption, why doesn't the device prompt the user to encrypt?

How does SDP secure the cryptographic keys used for data encryption?

Can fingerprint be used as a substitute for other forms of screen unlock methods, when using the Knox SDK?

Can I use the Knox SDK to disable the "Unlock Via Google" password unlock option?

Can an app prevent access to specific networks, using the Knox SDK?

Why are HTTPS requests bypassing global proxy settings in the Knox SDK?

Standard Features

What Knox SDK API methods are available to manage device firmware?

Does the API method setApplicationUninstallationDisabled disable the uninstallation of apps inside the container, when using the Knox SDK?

Will the legacy ELM and KLM keys still work with the Knox Platform for Enterprise (KPE) key?

Why do a few Knox SDK APIs not work on some devices?

What is the difference between hideStatusBar() and hideSystemBar() in the Knox SDK?

Can multi-window mode be disabled through blacklisting, using the Knox SDK?

Can I force a device to update to the latest firmware?

VPN

Why can't I set up VPN, using the Knox SDK, even after setting up a complex passcode policy and rebooting the device?

Why does the Knox SDK API method call to clear certificates remove VPN connections?

VPN Provider

Do I need a license to use the Knox VPN SDK?

How do I add all apps inside AND outside the container to a VPN profile?

What is VPN On-Premise Bypass?

What API do I use to create a On-Premise Bypass VPN profile?

Does the Knox framework store any type of data passed during profile creation?

How can I verify if the VPN connection that is starting belongs to the Knox profile or the default Android VPN profile?

How is the Knox container affected by VPN On-Premise Bypass?

How should the network state change be handled by the VPN Client Integration?

If the framework takes the responsibility of starting the VPN connection, and since it is MDM-controlled, how will the user be able to connect to the VPN if a time-out or networking error occurs?

The framework is not starting the VPN connection for the given profile as expected.

Under what circumstances does the framework trigger the start connection?

When should the various Android VPN service APIs be called?

Containers

How does an app detect if a container was created using the Knox SDK?

How do I install the MDM agent inside the Knox container?

I have created a "container only mode" container and I am locked inside, using the Knox SDK. How do I exit?

Why do I get error KnoxContainerManager.ERROR_INTERNAL_ERROR(-1014) while creating a container?

Device admin deprecation

What is DA Deprecation?

What is being deprecated with Android device admin?

What is API level 29, as it relates to DA deprecation?

What is the impact of DA deprecation to Knox?

As a Knox partner what actions do I need to take for DA deprecation?

What happens to DA apps when upgraded to Android Q?

With DA deprecation, when can I safely upgrade to Android Q?

What if a device already has Android Q before I'm ready for DA deprecation?

Can my DA app coexist with a UEM app running as DO?

Are there any changes to Knox Configure due to DA deprecation?

Can I use my DA app alongside Knox Configure?

Does KME still support the enrollment of devices using DA mode?

As DA management mode is not available in Android Q, can I enroll via KME to Work Profile only?

Share it: