Use Workspace (Android P)
This section provides information for using Knox Workspace and modifying settings to streamline your deployments.
NOTE – The following instructions are for Workspace running on Android P. See the following page for Workspace in Android O.
Switch to Workspace
Once a container is created, an additional tab called Workspace appears in your app drawer. To switch between the Workspace and personal side, simply tap the desired tab. This is shown in the screenshots below.
Workspace Settings
Workspace settings have moved in Android P. They are now found under Settings > Workspace.
Change unlock method
Changing the Workspace unlock method allows you to choose between PIN, password, pattern or fingerprint authentication methods You can disable certain unlock methods if desired through your MDM. In this case, the unlock options are greyed out. You can also require a strong password with a combination of uppercase and lowercase characters, numbers, and special symbols, or two-factor authentication. You can set up a biometric fingerprint password to access the secure Knox container, and select either a PIN, password, or pattern as the second authentication method.
To Change the Workspace unlock method do as follows.
- Open Settings > Workspace Settings >Workspace lock type.
- Follow the on screen instructions to change your unlock method: PIN, password, pattern, or biometrics.
Manage Apps
There is no limit to the number of apps that can be installed or used in the container. The number of apps that can run within a container is only limited by the CPU and RAM of the device. When you install an app inside the container, it operates independently than the apps on the personal side. They do not share data, user accounts or settings.
Install apps
You install apps into your Workspace container using Google Play or by pushing them manually with an MDM command. By default, Google Play is enabled. If you don't see the Google Play icon inside the container, then you need to enable it with an MDM policy .
Delete apps
You can delete apps from your Workspace if you are no longer using them. Deleting apps removes all data and personal settings from the app. You can control what apps can be deleted with an IT policy.
To delete apps from the Workspace:
- In the Workspace, long press the app you want to delete.
- Tap Uninstall.
Manage data
Knox Workspace utilizes the same physical memory as the personal space, but the memory blocks for the Knox Workspace container are logically isolated and secured.
However, there is no specific amount of memory or storage dedicated to Knox Workspace, and it’s not possible to set a maximum storage size either. The memory used by the Knox Workspace container dynamically changes based on the total and remaining device memory size and data size in the container.
Some data can be moved in and out of the Workspace. The types of data a device user can move is controlled by an IT policy.
To move data in and out of the Workspace:
- Highlight or check the desired file.
- If the file can be moved, the following options are displayed: Move to Workspace or Move to Personal Mode.
Workspace shortcuts in personal mode
Direct shortcuts to apps in the Workspace can be added in your personal space.These direct shortcuts allow you to open a Workspace app without having to navigate to the Workspace tab/ None of the security benefits of the container are lost by using Workspace shortcuts in your personal mode. If a shortcut is created, it still prompts the device user for authentication before allowing access.
To ensure you are always using the secure Workspace version of an app in your personal space, look for the blue badge icon in the bottom right corner.
To create a shortcut,
- Long press an app while in the Workspace
- Select Add to Home.
Change Workspace session timeout
The Workspace session timeout is the length of time that must pass before the container locks itself and require re-authentication to access it's files. By default, the timeout is 10 minutes. If you don't do anything in the Workspace for this length of time, you to unlock the Workspace using your chosen unlock method. There are a few options to choose from: when the screen turns off, when the device restarts, or after 5, 10 or 30 minutes.
To change the Workspace session timeout:
- In the Workspace, tap Workspace Settings.
- Tap Auto lock Workspace
- Select the new timeout period.
Modify caller ID display information
You can configure caller ID to display information about your Workspace contacts when in personal mode. By default, Workspace contacts information are displayed in the caller ID of the personal space when you receive an incoming call.
To modify the caller ID.
- In the Workspace, tap Workspace Settings.
- Tap Notifications and Data.
- Turn Show caller IDs on or off.
To modify the types of data shared between the personal side and Workspace, tap Contacts and Calender. Modify the settings to fit your needs.
Chamber
Chamber is a folder inside the Workspace that is secured with defense-grade Sensitive Data Protection (SDP) technology. Data remains encrypted even after the user has exited the Workspace or has turned off the device. Here is an image of Chamber.
You use Chamber the same way you use any other folder inside the container. can create folders within Chamber and move files in and out of Chamber as necessary.
- In the Workspace, open the App drawer and tap My Files
- Navigate to the file that you want to move.
- Tap and hold the file to select it.
- Tap More options ⋮ > Move.
- Select Internal Storage > Chamber.
- Tap Move Here.
Check Knox version
Check what version of the Knox Platform your device is running by going to Settings > About Phone > Software information > Knox version