Knox Service Plugin 26.03 release notes
Last updated March 16th, 2026
| App version | Release date |
|---|---|
| 1.5.56 | March 16th, 2026 |
New
Manage Tap2DeX
You can now enable or disable Tap2DeX with Knox Service Plugin. Tap2DeX allows device users to connect DeX to an external monitor with a single tap, allowing for seamless display setup.
You can find this policy at Device-wide policies > DeX policy > Enable Tap2DeX mode.
For details, see DeX.
Tap2DeX requires DeX, Wi-Fi Direct, and NFC enabled to function on your devices. If any of the following Knox Service Plugin policies are set, Enable Tap2DeX mode won’t apply to your devices.
| Policy | Value |
|---|---|
| Device-wide policies > DeX policy > Manage DeX restrictions | |
| - Allow Dex connection | OFF |
| - Enforce the use of Ethernet connection | ON |
| Device-wide policies > Device Restrictions | |
| - Allow Wi-Fi | OFF |
| - Allow Wi-Fi Direct | OFF |
| Device-wide policies > Device Controls > NFC Policy | |
| - Turn on NFC | OFF |
| - Allow User to Change NFC State | OFF |
If Tap2DeX fails to connect, verify the following:
- Check that the correct local MAC address for your display device is loaded to it’s corresponding NFC tag.
- Ensure that your device users unlock their devices before using Tap2DeX.
- Ensure that DeX, Wi-Fi Direct, and NFC are enabled on your devices.
Show Galaxy Store app
On One UI 8.5, the Galaxy Store is hidden by default on managed devices. You can use Knox Service Plugin’s Show Galaxy Store application policy to show the Galaxy Store app on your devices.
- For company-owned devices with a work profile, go to Device-wide policies > Application management policies > Show Galaxy Store application.
- For personal devices with a work profile, go to Work profile policies > Application management policies > Show Galaxy Store application.
For details, see Application management policies.
Disable call recording on company devices
You can now disable call recording, preventing device users from recording calls on company-owned devices. To use this policy, set Device-wide policies > Device Restrictions > Allow call recording to False.
For details, see Device restrictions.
This feature is only supported on models released in the United States.
Updates
Automatic policy updates after app installation
With this release, Knox Service Plugin automatically applies the Disable application without user interaction policy when it detects that a target app is installed. This feature ensures that app policies are enforced even if apps are re-installed or were installed after the profile was applied. This enhancement is only available on devices running Knox 3.10 and higher.
For details, see Application management policies.
Improvement to UCM plugin configuration
You can now enter either the raw or hashed app signature while granting apps access to credential storage and certificates.
For details, see:
- UCM plugin configurations > UCM plugin configuration > Application access controls > Application signature
- UCM plugin configurations > UCM plugin configuration > Certificate alias access controls > List of application signatures
Drawing assist renamed to Creative studio
With One UI 8.5, Drawing assist has been renamed to Creative studio. Its corresponding menu item on Knox Service Plugin for the Block individual galaxy AI operations policy is also updated accordingly.
For details, see Advanced Restriction policies.
On this page
Is this page helpful?