Menu

Managed key mappings

An enterprise IT admin can associate configurable XCover Pro keys with business apps, Over the Air (OTA) using a web-based EMM console, the Knox Service Plugin, or similar device management service. The IT admin can:

  • Push out a single policy with hardware key associations to an ISV app across an entire device fleet so end users are not burdened with figuring out the steps themselves.
  • Enforce hardware key associations to an ISV app so device users cannot make changes to the corporate policy.
  • Map both the XCover and Top keys seamlessly.
NOTE — There is no cost to ISVs to integrate. However, a IT admin needs to have any one of the following paid Knox licenses loaded into their EMM or similar device management service to use this functionality:
  1. EMM Service Licenses (to be used on a customer’s EMM service)
    1. Knox Platform for Customization license
    2. Knox Platform for Enterprise - Premium Edition license
  2. Non EMM Licenses (Standalone Knox configuration product)
    1. Knox Configure Setup or Dynamic License (Coming soon. Expected timeline: September 2020)

Handle hardware key intents

Setting up an ISV app for a managed integration requires two things:

  • Ensure the ISV app includes logic to receive and handle XCover and Top key intents by registering a receiver intent for KEY_ACTION_UP and KEY_ACTION_DOWN for each key.
  • Include metadata in your AndroidManifest.xml file to register your static intents as shown below

Define custom intents

Register a custom intent so the Knox Service Plugin can wake the app to handle a button event. Define the intents in your manifest file as follows:

<receiver
  android:name=".PTTKeyReceiver"
  android:permission="com.samsung.android.knox.permission.KNOX_CUSTOM_SETTING"
  android:exported="true" >
  <intent-filter>
    <action android:name="com.vendor.intent.action.PTT_PRESS" />
    <action android:name="com.vendor.intent.action.PTT_RELEASE" />
  </intent-filter>
</receiver>

To ensure your app is listening to intent actions only from the Knox Service Plugin, you add the above KNOX_CUSTOM_SETTING permission in the receiver, which is platform signature protected.

Provide custom intents to IT admin

The customer can plug the custom intents into the Knox Service Plugin in their preferred EMM service.

There are two settings for each Hardware Key:

  • Button Press: Ask IT admins to enter the custom intent defined for KEY_ACTION_DOWN.
  • Button Release: Ask IT admins to enter the custom intent defined for KEY_ACTION_UP.