Back to top

Knox SDK 3.11 release notes

Last updated February 14th, 2025

February 2025

The Knox 3.11 platform introduces these updates:

Changes to Knox SDK access

With Knox 3.11, we’re introducing changes to Knox SDK access to prioritize enterprise use cases, and improve data security on Samsung Galaxy devices. With the release of Android 15, apps must run as the Android Enterprise Device Owner (DO) of a fully-managed device, or the Profile Owner (PO) of a work profile to access the full range of features provided by Knox SDK.

  • Managed devices — Apps running as the Device Owner or Profile Owner can continue to access the full range of Knox SDK features.
  • Unmanaged devices — Apps running purely in Device Administrator (DA) mode are not allowed to access certain Knox SDK methods.

To see which Knox SDK methods are restricted on Android 15 (Knox 3.11), please refer to Restricted API methods.

This release also introduces restrictions to remote control features included in the RemoteDesktop and RemoteInjection classes. These features are only accessible to apps running as the DO or PO, or apps running within a DO or PO-managed environment, with authorization from the IT admin to access remote control features.

The following table shows the different levels of Knox SDK access available to apps of various management modes with the Android 15 (Knox 3.11) release.

Knox SDK methods AE (DO/PO) apps DA mode apps Other apps
DA restricted methods Accessible Not accessible Not accessible
Remote control methods Accessible *Accessible *Accessible
Other methods Accessible Accessible Not accessible

*Only within a DO/PO environment, with the IT admin’s permission.

For more information, please see Restricted API methods and our FAQ.

Enhancement to work profile screenshots

Previously, screenshots taken within the Work profile were saved to the Work profile by default, but IT admins were able to configure Knox SDK policies to save the screenshots in the personal profile.

With Android 15, we’re removing the RESTRICTION_PROPERTY_SCREENCAPTURE_SAVE_TO_OWNER property from the ProfilePolicy class in Knox SDK, making it impossible for work screenshots to be saved in the personal profile, further securing enterprise data assets.

API deprecation

As part of Samsung’s ongoing upkeep and maintenance of services, we deprecate Knox APIs from time to time. We recommend that you replace newly deprecated APIs before they are removed permanently.

The APIs deprecated in Knox 3.11 continue to work normally for Android 15. For more information, see the complete list of Deprecated API methods in Knox developer documentation.

Technical support for the deprecated APIs is available for up to one year after the deprecation. The APIs continue to be available in the second year after deprecation, but satisfactory operation is not guaranteed. Please see our FAQ for details about deprecated API support.

For more information

To learn more about the Knox SDK, check out these resources:

Back to release notes

Is this page helpful?