The Knox platform was designed in multiple layers across hardware and software so the device can constantly ensure data is secure. The design philosophy is to first build a trusted environment rooted in the hardware, to maintain it once the device is running, and to prove its integrity when asked. Only then can you make it truly ready for enterprise use.

The Knox platform ensures only approved versions of system-critical software are loaded. As the platform is built-in, the trust starts in the hardware, with unique certificates burnt into the chipset of each device.

With these unique certificates, the Knox platform can verify each piece of software that loads. If verification fails, Knox either records the tampering by flipping a one-time fuse called the Knox Warranty Bit, or prevents further booting. Devices with compromised Knox Warranty Bits cannot use certain Knox features and services, such as Knox Workspace or Samsung Pay.

Rollback prevention ensures that a Samsung device is not downgraded to an earlier, vulnerable software version.

Loaded, verified software can still be modified by the user, either intentionally or unintentionally. i.e. Downloading a malicious app or malware.

The Knox platform ensures that system-critical software is not modified once loaded. The platform uses a set of technologies to protect the device kernel - the core of the operating system. It also protects applications and its data during runtime to detect malicious attacks as well as monitoring policy settings to quickly isolate any threat.

Samsung Knox is designed to protect the kernel and prevent rooting. This keeps the system processes and resources protected from hostile access and malware attacks.

For IT admins intending to manage mobile devices with an EMM, Knox-enabled devices can provide you with an attestation, which lets you see if a device has been tampered with or not. Based on that, you can decide if the device can be trusted, and if it is allowed to receive sensitive corporate data.

The Knox platform only loads and runs approved system-critical software on a device and can prove this to a third-party when requested.

The final step of the design philosophy is to make the trusted platform ready for enterprise use. This involves giving enterprises complete control and configurability over their data and applications using an EMM.

Knox supplies a collection of controls and utilities:
Encryption that keeps data secure and confidential; VPN allows data to be easily and securely sent and received when working out of office; SSO allows data to be easily accessed with consolidated authentication for apps and data.