August 13, 2020

What’s new in Knox 3.6

Samsung Knox Team

The newly launched Samsung Galaxy Note20 and Note 20Ultra provide so many cool and compelling features for enterprises adapting to new ways of working. Samsung Knox 3.6 extends Samsung's commitment to helping you customize and secure enterprise devices and lead through differentiated solutions.

The Knox 3.6 platform is built into the firmware of the new Samsung Galaxy Note20 and Note20 Ultra. Other devices such as the Galaxy S20 will receive firmware updates with Knox 3.6, following the release schedule of mobile service providers.

Let’s dive into the new Knox 3.6 features!

 

XCover Pro hardware keys

Get the most out of the new ruggedized Samsung XCover devices by customizing the XCover and Top hardware keys. The latest version of the Knox Service Plugin lets you:

  • Set up short or long key presses to launch selected device apps
  • Disable hardware key options in a device's Android Settings menu

For more information, see the Device Key Mapping.

 

Deep Settings Customization

This release expands the list of deep settings introduced with Knox 3.4, delivering options to configure the following settings through the Knox Service Plugin.

Each KSP release introduces additional deep settings so you are encouraged to browse the KSP release notes for all the latest capabilities. Coming soon: Deep settings to manage Picture-in-Picture and DeX monitor resolution.

 

Knox VPN in work profiles

The Android VPN Management for Knox app extends the capabilities of the built-in Android VPN client, which provides only basic configuration as seen in the Android Settings app. The Knox app enables many more advanced Knox VPN capabilities on Samsung Knox devices.

Previously, the Android VPN Management for Knox app supported only Device Owner (DO) mode. Knox 3.6 now supports Profile Owner (PO) mode, enabling the same advanced Knox VPN capabilities from within a work profile. When installed inside a work profile, the new Knox app (v3.0.5) accesses an end-user/CA certificate inside the PO keystore to secure data transmission from within the work profile.

NOTE — The new Knox app is backwards compatible with devices running earlier, pre-3.6 versions of Knox.

To deploy the new Android VPN Management for Knox Strongswan app in a work profile:

  1. Log in to Knox Partner Portal > Dashboard > Download.
  2. Download the new Android VPN Management for Knox Strongswan
  3. Configure a UEM profile to push and deploy the APK in a work profile.

For more info about the advanced Knox VPN capabilities, see the Knox White Paper.

 

Certificate authentication for USB-tethered laptops

With Knox 3.5, Samsung Knox devices could extend a VPN tunnel to a laptop connected through USB. This provided laptop users with the ability to access internal enterprise resources using our defense-grade mobile VPN network. In addition to providing convenience when laptops do not have network connectivity, this offers company cost savings by removing the need to buy additional VPN licenses for laptops.

Knox 3.6 enhances this feature with better security. There is a new app that enables Samsung Knox devices to verify that a laptop is owned by the device user. When the user connects a laptop to a Samsung Knox device via USB, the app validates the user certificate on the laptop with allowed certificates identified by the IT admin for the device.

To deploy the new app to authenticate connected laptops:

  1. Log in to Knox Partner Portal > Dashboard > Download.
  2. Download the new USB Tethering Authentication for VPN
  3. Configure a UEM profile to push and deploy the APK to devices.
  4. Identify the certificates of laptops allowed to connect via USB to each device for VPN access.

NOTE — The APK provided on the Knox Partner Portal supports only Samsung One UI flagship devices such as the Galaxy S/A/J and Tab S/A. We also have One UI Core devices such as the A21, Tab A7, M51, M31s, and A12. To deploy USB-tethered VPNs on a One UI Core device, please contact us to get another APK that uses a different Samsung platform signing key.

 

Keep exploring…

We encourage you to learn more about Knox.

If you’re new to Knox, browse our White PaperWhitepaper Find out about the Knox Service Plugin, and how it delivers new features on the day of release Learn about our entire Knox Ecosystem, and how our services ease mobile deployments

 

We are already working on the next Knox platform release, and adding new features that will help you deliver the most compelling enterprise solutions. Stay tuned!

[Icon] close

Get the right solution for your business

Join 25,000+ organizations around the world.

[Icon] suitcase
Are you a reseller or solution partner?

Get access to the Knox Partner Program for helpful partner tools, such as the Knox Deployment Program portal, Knox MSP portal, partner SDKs, and more.

[Icon] info
Unified Endpoint Management
Knox Suite
Rebranding and customization
Knox Configure
Fraud and theft protection
Knox Guard
Device protection plan
Samsung Care + for Business
Other products & services

Get started with

[Image] Knox Suite

All-in-one solution bundle for enterprise mobility.

[Icon] Check mark

Join us and get a 90-day free trial for Knox Suite and other Knox products. *Approval required

[Icon] Check mark

A complete set of tools to secure, deploy, manage, and analyze your enterprise's corporate mobile devices.

[Icon] Check mark

Try powerful features bundled with Knox Suite, such as Knox Remote Support.

Knox Suite include:

[Icon] Knox Platform for Enterprise Knox Platform for Enterprise
[Icon] Knox E-FOTA Knox E-FOTA
[Icon] Knox Mobile Enrollment Knox Mobile Enrollment
[Icon] Knox Asset Intelligence Knox Asset Intelligence
[Icon] knox manage Knox Manage
[Icon] knox capture Knox Capture

Get started with

[Image] Knox Configure Logo

Remotely configure Samsung devices in bulk and tailor them to specific needs, right out of the box.

[Icon] Check mark

After approval, you can try both the:

  • Setup edition — designed for a one-time deployment
  • Dynamic edition — deploy and update policies as many times without a factory reset.
[Icon] Check mark

Try either the Setup edition or Dynamic edition of Knox Configure on up to 30 devices.

[Icon] Check mark

Get a free Knox Suite trial upon approval to try our UEM.

Get started with

[Icon] Knox Guard Logo

Remotely control Samsung devices to reduce financial risks and protect assets.

[Icon] Check mark

After you get approved, generate your free trial license for 90 days.

check-mark

Try all the features of Knox Guard on up to 30 devices, including SIM control and device locking.

[Icon] Check mark

Get a free Knox Suite trial upon approval to try our UEM.

Get started with

[Image] Samsung Care Plus For Business Logo

Protect your business devices against accidental damage and mechanical breakdowns.

[Icon] Check mark

Are you already a Samsung Care+ for Business customer? Create an account and access the Samsung Care+ for Business console.

[Icon] Check mark

Contact the Samsung sales team and get peace of mind for your devices.

Other products & services

[Image] Others logo
[Icon] Check mark

Samsung offers additional solutions to serve the unique needs of your business. Talk to a Samsung expert today.

CONTACT SALES
Back to top