In the Workspace, there are secure versions of standard Android apps. These apps are designed around the container and provide an extra layer of protection for your data. This section explains the differences in the apps and how to take advantage of some of the added Workspace functionality.
The Email app in Workspace supports POP3, IMAP, and Microsoft Exchange ActiveSync mail accounts. For popular email accounts just enter your e-mail address and password. The e-mail app automatically sets up the correct settings to get e-mail from the account. You just select a name for the account and how often to get e-mails.
If your workplace uses Microsoft Exchange ActiveSync, you can also read your work email in Workspace. Use the Manual setup, under account settings, to enter your Exchange ActiveSync, information.
Emails, file attachments, and other data cannot be accessed outside of Workspace. Your emails are protected with S/MIME (Secure/Multipurpose Internal Mail extension) or PGP (pretty good protection). In the Knox email app you can:
Q&A: Does the native Knox email client support S/MIME with two certificates, one for signing and one for encryption?
Yes, users can generate keys for encryption and decryption inside the Email app. Certificates can also be downloaded from the Exchange Server for each account.
On your device, you can create meetings and events in the Workspace the same way you would in the personal space. You can choose to keep Workspace and Personal calender events separate or you can share event information between both workspaces. In the Workspace, only Lightweight Directory Access Protocol (LDAP) and Microsoft Exchange ActiveSync (EAS) are permitted to sync calendars. A variety of accounts are supported in the personal space.
To share Calender information across workspaces, tap Workspace > Settings > Notification and data > Contacts and Calender. > Select the data to share.
On your device, you can create contacts in the Workspace the same way you would in the personal space. These contacts can be configured to only be visible in the Workspace, or in both the container and personal space (identified with a Knox shield).
In the Workspace, only Lightweight Directory Access Protocol (LDAP) and Microsoft Exchange ActiveSync accounts are permitted to sync contacts. A variety of accounts are supported in the personal space.
To show contacts outside of the Workspace, tap Settings > Workspace Settings > Notifications and data > Share data > Select your data to share.
You can configure caller ID to display information about your Workspace contacts when in personal mode. By default, Workspace contacts information will be displayed in the caller ID of the personal space when you receive an incoming call.
The camera in Workspace is the same camera available in your personal space. Photos in Workspace are not shared with photos in the personal space to avoid the risk of mixing sensitive company pictures with personal pictures. To prevent sensitive data from being captured and shared, screenshots can be disabled with an IT policy. By default, screenshots are enabled.
IT admins can configure policies to restrict device features, such as Camera. If an unpermitted action is initiated the user will be blocked from the action and a popup message will be displayed.
The file systems outside and inside the Workspace are similar in appearance. However, you cannot see the Knox files from your personal space, or the personal files from Workspace. My Files allows the user to open and view a wide variety of files including word documents, images, and PDF files. IT admins can configure policies to restrict features of the device. If an unpermitted feature or action is initiated the user will be blocked from the action and a popup message will be displayed.