Minimum requirements

You must meet the following requirements to use the Knox Service Plugin on your managed devices.

What you need

1. Samsung devices that support Knox and run Android 9 or higher.

2. A Unified Endpoint Management (UEM) solution that supports Android Enterprise deployments and is compatible with Knox Service Plugin.

3. A valid Knox Platform for Enterprise (KPE) license. For more information about Knox licenses, see Knox Platform for Enterprise licenses.

4. You must set up your devices in one of the supported Android Enterprise deployments.

Supported deployments

Before you can use Knox Service Plugin, your devices must be deployed in one of the following Android Enterprise deployment modes.

In an enterprise deployment, Google provides three modes of Android Enterprise, fully managed (DO), work profile (PO), and fully managed with a work profile.

• Fully-managed — Also known as Company Owned, Business Only (COBO)—lets admins manage devices that are owned by the enterprise, and are devices intended exclusively for work purposes. IT admins have full control over fully-managed devices.

• Work profile on company-owned device — Also known as a fully managed device with a work profile on Android 10, and WP-C on Android 11 and higher, are company-owned devices that have a personal profile and a work profile. Employees can use these devices for personal and work purposes. For more information, see the Android Enterprise documentation.

• Work Profile — Helps admins manage the BYOD (Bring Your Own Device) use case, where devices are owned by the employee and a managed work profile is deployed to the device. IT admins can only control the work area, and have no visibility or access outside of it.

Knox Service Plugin works with the following Android Enterprise deployment modes:

• Android 9.0, 10.0 — Fully-managed devices, fully-managed device with a work profile, Work Profile — Profile Owner (PO), and Android dedicated devices (COSU) (Corporate-Owned Single Use) mode.

• Android 11 and higher — Fully-managed devices, work profile on company-owned device, work profile for employee-owned devices (BYOD), and Android dedicated devices (COSU).

Supported features

Your deployment must use policy configurations that Knox Service Plugin supports. Knox Service Plugin inherits its policies from the Knox Platform for Enterprise framework. These policies can be either standard or premium features. Premium features require a free Knox Platform for Enterprise Premium license.

Supported UEMs

You need a UEM that supports Android Enterprise based deployments, device management APIs, and complies with the OEMConfig specification. Check with your UEM vendor to confirm which version of the UEM console you need to use with Knox Service Plugin. Some UEMs offer more than one console, and some consoles may not support Knox Service Plugin.

For information about configuring UEMs, see Set up with a UEM.