The newly launched Samsung Galaxy Note20 and Note 20Ultra provide so many cool and compelling features for enterprises adapting to new ways of working. Samsung Knox 3.6 extends Samsung's commitment to helping you customize and secure enterprise devices and lead through differentiated solutions.

The Knox 3.6 platform is built into the firmware of the new Samsung Galaxy Note20 and Note20 Ultra. Other devices such as the Galaxy S20 will receive firmware updates with Knox 3.6, following the release schedule of mobile service providers.

Let’s dive into the new Knox 3.6 features!

XCover Pro hardware keys

Get the most out of the new ruggedized Samsung XCover devices by customizing the XCover and Top hardware keys. The latest version of the Knox Service Plugin lets you:

• Set up short or long key presses to launch selected device apps
• Disable hardware key options in a device's Android Settings menu

For more information, see the Device Key Mapping.

Deep Settings Customization

This release expands the list of deep settings introduced with Knox 3.4, delivering options to configure the following settings through the Knox Service Plugin.

Each KSP release introduces additional deep settings so you are encouraged to browse the KSP release notes for all the latest capabilities. Coming soon: Deep settings to manage Picture-in-Picture and DeX monitor resolution.

Knox VPN in work profiles

The Android VPN Management for Knox app extends the capabilities of the built-in Android VPN client, which provides only basic configuration as seen in the Android Settings app. The Knox app enables many more advanced Knox VPN capabilities on Samsung Knox devices.

Previously, the Android VPN Management for Knox app supported only Device Owner (DO) mode. Knox 3.6 now supports Profile Owner (PO) mode, enabling the same advanced Knox VPN capabilities from within a work profile. When installed inside a work profile, the new Knox app (v3.0.5) accesses an end-user/CA certificate inside the PO keystore to secure data transmission from within the work profile.

NOTE — The new Knox app is backwards compatible with devices running earlier, pre-3.6 versions of Knox.

To deploy the new Android VPN Management for Knox Strongswan app in a work profile:

1. Log in to Knox Partner Portal > Dashboard > Download.
2. Download the new Android VPN Management for Knox Strongswan
3. Configure a UEM profile to push and deploy the APK in a work profile.

For more info about the advanced Knox VPN capabilities, see the Knox White Paper.

Certificate authentication for USB-tethered laptops

With Knox 3.5, Samsung Knox devices could extend a VPN tunnel to a laptop connected through USB. This provided laptop users with the ability to access internal enterprise resources using our defense-grade mobile VPN network. In addition to providing convenience when laptops do not have network connectivity, this offers company cost savings by removing the need to buy additional VPN licenses for laptops.

Knox 3.6 enhances this feature with better security. There is a new app that enables Samsung Knox devices to verify that a laptop is owned by the device user. When the user connects a laptop to a Samsung Knox device via USB, the app validates the user certificate on the laptop with allowed certificates identified by the IT admin for the device.

To deploy the new app to authenticate connected laptops:

1. Log in to Knox Partner Portal > Dashboard > Download.
2. Download the new USB Tethering Authentication for VPN
3. Configure a UEM profile to push and deploy the APK to devices.
4. Identify the certificates of laptops allowed to connect via USB to each device for VPN access.

NOTE — The APK provided on the Knox Partner Portal supports only Samsung One UI flagship devices such as the Galaxy S/A/J and Tab S/A. We also have One UI Core devices such as the A21, Tab A7, M51, M31s, and A12. To deploy USB-tethered VPNs on a One UI Core device, please contact us to get another APK that uses a different Samsung platform signing key.

Keep exploring…

We encourage you to learn more about Knox.

If you’re new to Knox, browse our White PaperWhitepaper Find out about the Knox Service Plugin, and how it delivers new features on the day of release Learn about our entire Knox Ecosystem, and how our services ease mobile deployments

We are already working on the next Knox platform release, and adding new features that will help you deliver the most compelling enterprise solutions. Stay tuned!