Built into Samsung mobile devices, Samsung Knox protects all your customer’s data – so they can focus on what matters to them and their business.
Samsung Knox
Stay Connected, Protected and Productive
Introducing Samsung Knox Suite
An end-to-end solution that covers all your steps throughout your enterprise mobility journey
Including: Knox Platform for Enterprise, Knox Mobile Enrollment, Knox Manage, and Knox E-FOTA.
Stay secure, no matter what you do
Every Knox device is built from the hardware chip up to isolate, encrypt, and secure your customer’s data – including confidential files, credit card transactions, passwords, and health data – so they can protect everything they care about.
Your customers can protect their business with a multi-layered defense-grade security platform including advanced security and management features.
Quick and simple out-of-the-box device setup, configuration, rebranding, and enrollment for all enterprise use cases.
Powerful yet flexible cross-platform device control and management of enterprise devices.
Focus on your business
The Knox product suite allows your customers enterprise IT admins to address business needs throughout the entire device lifecycle. Easily secure, deploy, and manage mobile devices for business use, while allowing employees to stay productive.
Adapt devices to your needs
Knox enterprise solutions allow customisation, rebranding, and deployment of fit-for-purpose mobile devices. Your customers can transform Samsung devices into their digital brand ambassadors or set up interactive kiosks for retail.
What is Samsung Knox?
Samsung Knox is a combination of a proven security foundation built into Samsung devices, and a mature suite of business solutions leveraging this platform, Secured by Knox.
Knox security platform
The Knox platform is anchored in the actual chipset of the device during the manufacturing stage. Knox protects both businesses and consumers using Samsung phones, tablets, and wearables.
Knox cloud solutions
Samsung’s portfolio of Knox cloud solutions allows your customer’s businesses to configure, customize, deploy, and manage their devices to meet various and specific needs.
The Knox security platform is built into Samsung devices, securing them from the moment your customers unpack and turn them on.
These devices are Secured by Knox, with multi-layered hardware and software security features that are always enabled. The Knox platform contains overlapping defense and security mechanisms that protect your customers data against intrusion, malware, and malicious threats.
The Knox security platform is also the foundation for various solutions and services, including personal Samsung apps and Knox business solutions.
Look for Samsung products marked with 
as Samsung’s vouch for security.
Chip-up manufacturingSamsung designs, manufactures, and validates every piece of hardware that goes into Samsung devices.
Data isolationBuilt into every component, your customer’s sensitive data can be completely isolated in a secure place.
Data encryptionWith the Knox security platform, your customer’s data is stored and remains in an encrypted state, even in the event of theft or loss.
Run-time protectionYour customer’s Samsung device is always running in a safe state, blocking any unauthorised access to their phone’s kernel, in real-time.
Advanced platform features
Samsung Knox Platform for Enterprise provides advanced security and management features for business users. See the features available for Samsung Android and Tizen wearable devices.
Or learn more about key security features only available on Knox.
Devices supporting Samsung Knox solutions
See Samsung smartphones, tablets, and wearables Secured by Knox, and Knox solutions supported.
Samung Knox is trusted by security experts and government agencies
Knox platform 3.2 received 27 of 30
Strong
ratings in Gartner report*
Knox has elevated the perception of Android as a secure, stable, and enterprise-capable mobile operating system across a wide range of use cases. In a 2019 Gartner report*, Knox platform received 27 out of 30 strong ratings.
Knox for Enterprise Mobility
Mobile solutions for IT admins
Samsung Knox offers IT admins a comprehensive enterprise mobility solution portfolio to address business needs throughout the entire device life cycle.
SECURE
Market-proven security to forward your business.
Because one security hole is all that is needed to take control of the device, Samsung Knox secures your device in every layer and at all times. So you can focus on your business no matter what.
End-to-end device securityHardware-based trusted environment ensures device integrity, from manufacturing to booting to runtime.
Advanced and ever-evolving securityKnox integrates hardware and software for the highest level of protection – extending capabilities on top of Android Enterprise.
Samsung’s security governanceSecurity is the guiding principle behind every choice Samsung makes – from research, design, assembly, and manufacturing.
DEPLOY
Transform phones, tablets, and wearables into work devices instantly.
Deployment and configuration made easy. As soon as they are powered on, work devices are automatically provisioned, right out of the box.
Automated device provisioningJust power on the device. Settings are applied instantly, out of the box.
Mandatory EMM setup and configurationIT policies are automatically pushed and activated, making life easier for both IT and device users.
Fit for purposeTransform devices into purpose-built appliances for any industry.
MANAGE
Versatile and comprehensive features for all stages in device management.
With features built to manage all stages of your customer’s device life cycle, ensure their devices for work are always under IT control. Anytime, anywhere, and in any industry.
Wide range of IT policies and devicesTo meet diverse compliance needs
Complete OS update managementRemotely control OS versions on corporate-owned devices.
Available through various partner solutionsAdvanced Knox management features.
Knox for Device Customisation
Mobile solutions for businesses and channels
Customise Samsung devices for almost any business purpose. Knox tools let your customers remotely configure their phones, tablets, and wearables in bulk.
Staging and Kitting
Tools for device resellers and managed service providers
Configure a large number of devices with custom settings and business apps and make them out-of-the-box ready for end-users. Supply different teams with devices ready for work. All done efficiently and inexpensively over the cloud.
Work tools readyPre-install required business apps, and remove unwanted apps.
Setup for workPre-configure default device settings and key business apps such as email or browser.
- No additional re-staging
Configured devices are always tailored again automatically, even after factory reset.
Rebranding
Tools for MVNOs (Mobile operators), content providers, and marketers
Samsung Galaxy devices make an enticing offer to your customers. Go one step further with Samsung Knox. Promote and embed their company’s brand on Samsung devices, including animated boot-up screens, customised home and lock screens, their own apps.
With Samsung Knox, any off-the-shelf Samsung devices can turn into a special edition.
Preloaded with your appsYour customers can preload devices with their apps and content, and provide home screen shortcuts to business websites and call numbers.
Custom user experienceYour customers can set their own boot-up and shut down screens, home and lock screens, wallpaper, and more.
Remotely configuredDevices are delivered to end-users in tightly sealed, mint-condition boxes.
Repurposing
Tools for educators, retailers, hospitality providers, and more.
Fulfill your customer’s unique use cases with Samsung devices and Knox customization capabilities, without heavy investment into dedicated gadgets.
Modify default device behavior, and limit functionality to in-house apps for use in education, retail, hospitality, healthcare, and other industries.
Locked to a specific appFine-tune phones and tablets to single app mode or other business settings during initial device setup.
Hardware keys remappedRemap physical buttons on Samsung devices to a specific application or a feature, such as push-to-talk and barcode scanner.
Customised system UIOptimize a wide range of device features as needed, hide notification and navigation bars, and change app icons and names.
Our Perspective on Samsung Knox
By Darren Rawlinson, Mobile Solutions Manager
A lot of resellers will come to us and say, “My customer would like to have Samsung Knox”. This is excellent, as it means they’re interested in managing, protecting and securing their mobile devices. But it’s usually a surprise when my answer is “That’s great; what part of Samsung Knox is it they want?”
Samsung Knox isn’t just one piece of software; it’s not even only software. It’s a whole solution from the device chipset right through to defence grade encryption.
So, let’s start with the device itself
Samsung Knox starts out as a chipset, unique to Samsung devices. Even at the point of manufacture, the security kicks in, with the casing of the chip shredded so no one can know what unique chip is inside the device!
The device is secured from the very moment it’s activated, the hardware checks the software and vice versa, making sure nothing has been hacked. Until you open up the device with your fingerprint or pattern or PIN, everything is encrypted.
Now the opportunity really starts
The range of software allows us to maximise the unique Samsung Knox chipset to its full potential. All the software is accessible and managed by the customer at www.samsungknox.com, and your customer will create their login there.
Knox Mobile Enrolment (KME)
KME is free of charge and doesn’t require a licence. KME enrolls your device, seamlessly over the air, to a given Mobile Device Management (MDM) solution. There are many MDM solutions out there, and KME can handle most, if not all.
We load the IMEI of the devices into a master Samsung portal, and they will present themselves within the customers portal. From there, the customer creates a simple profile that will point the device at the MDM solution. When the device powers on for the first time, it calls ‘home’ to Samsung, who instruct the device ‘hey we know you, this is who you belong to’ and sends the profile, as created, to the device. The person holding the device cannot stop this process, it’s nice and simple and all done over-the-air.
Knox Configure
Knox Configure is unique to Samsung as a customisation and configuration solution. Requiring a licence, Knox Configure will change the look, feel and use of a device, to make it your device in the user’s hands. From the home and lock screens fixed with an organisations logo, setting the volume or other features so changes cannot be made, right through to applications being placed on the device or blocked.
Content such as a PDF, maybe a User Guide, and applications can be placed by the administrator exactly where you want them to be on the screen. No other manufacturer allows you to tailor the look and feel of a device like this.
All this is sent over-the-air, and to create the profiles takes just a few minutes of work, using a simple set of menus.
Knox Manage
Knox Manage is Samsung’s’ full MDM solution. Of all the Knox elements, this one isn’t just restricted to just Samsung devices either. Knox Manage stands up to scrutiny against all the other best in class MDM solutions and can manage other Android devices as well as Apple.
Fully featured, this MDM can do all the usual find, lock, wipe etc. of a device and so much more. Using Android Enterprise device management or DEP for Apple, this is a fully-fledged device management tool allowing total control of a device for the administrator. It also includes a simple to use Kiosk Studio, allowing us to create fixed templates of how a device should present itself to the user. Also, we can set device behaviours to change automatically based on the day of the week and even the time of the day, or where the device physically is.
Knox E-FOTA
Unique to Samsung devices, Knox E-FOTA allows your customers to control the system updates and security patches the devices receive. All devices are on a FOTA (Firmware Over The Air) server. This is how important updates are sent.
E-FOTA takes Samsung devices ‘off the grid’, and gives the administrator full control of the updates, not only when, but how they are sent to the devices. Maybe only on Sundays, only if there is Wi-Fi and enough battery left; all these parameters can be set.
Knox Platform For Enterprise (KPE)
KPE is where we deliver the defence grade solution. It is a secure container on a Samsung device, essentially giving another device within a device; it could be used to split work and personal use and applications, or more likely, use this separate container (requiring its own PIN or pattern to get into it) for other work applications.
Nothing can move between the ‘standard’ part of the device and the secure KPE folder. If your customer takes a photo while in the secure area. It will not be in the gallery on the standard part of the device, and so on.
All the solutions are available as separate licences and can be combined to provide a solution to fit the customer’s needs. Moreover, a combined package of KME, Knox Manage, E-FOTA and KPE are now available combined (known as ‘Knox Suite’) delivering all the very best of Samsung Knox at an attractive package price.