Knox Workspace

The best of both worlds

In the business world, IT admins want a secure, robust mobile ecosystem that integrates easily with their infrastructure. And employees want reliable devices that keep them productive and protect their privacy. Samsung designed Knox Workspace to meet both their needs.

Isolate business applications and data from personal ones with Knox Workspace. Workspace creates an encrypted container on Samsung Galaxy devices, which IT admins can remotely manage by integrating it with their EMM.

Dual-persona

Knox Workspace allows your employees to store and access confidential data in an encrypted container on a smartphone or tablet, while using the rest of the device as they normally would.

Defense-grade security for your enterprise

Unlike other containerization solutions, the keys for encrypting and decrypting the Knox Workspace container are stored in the device chipset, making it impervious to attacks. Any apps, email or files stored in the Workspace container are encrypted when the container is locked. The data can only be decrypted and accessed when the user enters their PIN, password, pattern, or through biometric authentication.

If the device is ever compromised, the Knox Warranty Bit will fuse and the Knox container will permanently lock down to prevent data leakage.

Granular control & management

Remotely manage a fleet of devices across your organization, without intruding on personal data. Push corporate apps and security policies to them. Knox Workspace features hundreds of IT policies with regular feature updates.

Knox Workspace seamlessly integrates with more than 100 EMM providers, including Blackberry Enterprise Server (BES), IBM MaaS360, VMware AirWatch, and MobileIron.

Easy deployment

Apps can be installed automatically on the device from your EMM console, without the need for user interaction.

Container Only Mode

Enterprises can force employees to work in Knox Workspace by toggling 'Container Only Mode'.

Whitelist / blacklist

IT admins can allow employees to search and install only authorized apps from the Play Store.

Run Android apps without modification

Deploying in-house apps, or apps from Google Play or your EMM, is easy with Knox Workspace, as they don’t have to be modified to install and run in the Knox container. And device users can copy any app from their personal side to the container, and keep the user data for each app separate.

To add apps in the Knox container, IT admins can push APKs from their EMM, or send a Google Play link for user download. IT admins can also whitelist and blacklist apps from Google Play for greater security.

Features


General

Container unlock with AD credentials

Unlock container using Microsoft Active Directory credentials

Launcher or Folder view

Different UI styles of the Workspace container

Security

Permanent container lock

If a device is compromised, the container gets locked permanently

Container-only mode

Provides a mechanism to always boot to the container

Sensitive Data Protection

Added security for email body and attachments in the container

Chamber folder

Added security for files in the Chamber folder

Enable Iris authentication to access Knox

Iris authentication for accessing Knox container

VIEW MORE FEATURES
Management

Container lock, wipe

Lock or wipe the container in case the device is lost or stolen

Container configurations

Configurations for browser, email, password, Wi-Fi, VPN, firewall, etc.

SD card access

Audit logs

Audit log allows IT admins to select events and push an audit log to their server

Google Play or Play for Work inside container

App management using Google Play (for work) inside Knox Workspace

Clipboard copy & paste from outside to inside

Information Rights Management (IRM)

Allows admins to enforce tighter policies on enterprise data

Enhanced Knox container isolation granularity

Data Loss Prevention (DLP)

Designate apps that can create, consume, and set expiration rules for content

App shortcuts on personal home screen

Data Loss Prevention logs

Data Loss Prevention from browser

Productivity

Enterprise billing

Allows a separate bill for personal and enterprise data usage

IPv6 support for enterprise billing

S-Pen Air Command support

USB access inside container

Multi-window support

Speech-to-text

PBA (Phonebook Access) profile support

Sharing contact information in the Workspace container via Bluetooth

Enterprise billing on dual SIM devices

Accessibility apps access to Knox Workspace

Whitelist the accessibility apps that can access the Knox Workspace container

Availability

Server options

Server options

Cloud or on-premise
License types

License types

Monthly or yearly
Supported devices

Supported devices

Devices running Knox 1.0+
Supported EMMs

Supported EMMs

View all EMMs

Manufacturing

Anton Paar's salespeople are on the road four days a week, and it is crucial that their mobile devices are managed and protected.

Get started

Start your 30-day trial, or purchase a standard Workspace license from a reseller. You will need an EMMprovider to activate Knox Workspace.

Knox Workspace

30-day free trial

Get 30-day full access to Knox Workspace.

Knox Workspace

Commercial license

Get a monthly or yearly license. Contact your local Knox reseller for details.

Have any more questions?
View Knox Workspace FAQs
Have any more questions?
View Knox Workspace FAQs
TRY FOR FREE

Knox IT solutions are designed to work together to help you from deployment to daily use.

Knox Configure
Configure device settings in bulk
Learn more
Knox Mobile Enrollment
Enroll devices to an MDM in bulk
Learn more
Knox Manage
Manage devices in the cloud
Learn more
Knox Workspace
Secure company data in an encrypted container
Learn more
Samsung E-FOTA
Maintain device OS versions
Learn more