Knox Workspace

The best of both worlds

In the business world, IT admins want a secure, robust mobile ecosystem that integrates easily with their infrastructure. And employees want reliable devices that keep them productive and protect their privacy. Samsung designed Knox Workspace to meet both their needs.

Isolate business applications and data from personal ones with Knox Workspace. Knox Workspace creates an encrypted container on Samsung Galaxy devices, which IT admins can remotely manage by integrating it with their EMM.


Knox Workspace allows your employees to store and access confidential data in an encrypted container on a smartphone or tablet, while using the rest of the device as they normally would.

Defense-grade security for your enterprise

Unlike other containerization solutions, the keys for encrypting and decrypting the Knox Workspace container are stored in the device chipset, making it impervious to attacks. Any apps, email or files stored in the Knox Workspace container are encrypted when the container is locked. The data can only be decrypted and accessed when the user enters their PIN, password, pattern, or through biometric authentication.

If the device is ever compromised, the Knox Warranty Bit will fuse and the Knox container will permanently lock down to prevent data leakage.

Granular control & management

Remotely manage a fleet of devices across your organization, without intruding on personal data. Push corporate apps and security policies to them. Knox Workspace features hundreds of IT policies with regular feature updates.

Knox Workspace seamlessly integrates with more than 100 EMM providers, including Blackberry Enterprise Server (BES), IBM MaaS360, VMware AirWatch, and MobileIron.

Easy deployment

Apps can be installed automatically on the device from your EMM console, without the need for user interaction.

Container Only Mode

Enterprises can force employees to work in Knox Workspace by toggling 'Container Only Mode'.

Whitelist / blacklist

IT admins can allow employees to search and install only authorized apps from the Play Store.

Run Android apps without modification

Deploying in-house apps, or apps from Google Play or your EMM, is easy with Knox Workspace, as they don’t have to be modified to install and run in the Knox container. And device users can copy any app from their personal side to the container, and keep the user data for each app separate.

To add apps in the Knox container, IT admins can push APKs from their EMM, or send a Google Play link for user download. IT admins can also whitelist and blacklist apps from Google Play for greater security.



Container unlock with AD credentials

Unlock container using Microsoft Active Directory credentials

Launcher or Folder view

Different UI styles of the Knox Workspace container


Permanent container lock

If a device is compromised, the container gets locked permanently

Container-only mode

Provides a mechanism to always boot to the container

Sensitive Data Protection

Added security for email body and attachments in the container

Chamber folder

Added security for files in the Chamber folder

Enable Iris authentication to access Knox

Iris authentication for accessing Knox container


Container lock, wipe

Lock or wipe the container in case the device is lost or stolen

Container configurations

Configurations for browser, email, password, Wi-Fi, VPN, firewall, etc.

SD card access

Audit logs

Audit log allows IT admins to select events and push an audit log to their server

Google Play or Play for Work inside container

App management using Google Play (for work) inside Knox Workspace

Clipboard copy & paste from outside to inside

Information Rights Management (IRM)

Allows admins to enforce tighter policies on enterprise data

Enhanced Knox container isolation granularity

Data Loss Prevention (DLP)

Designate apps that can create, consume, and set expiration rules for content

App shortcuts on personal home screen

Data Loss Prevention logs

Data Loss Prevention from browser


Enterprise billing

Allows a separate bill for personal and enterprise data usage

IPv6 support for enterprise billing

S-Pen Air Command support

USB access inside container

Multi-window support


PBA (Phonebook Access) profile support

Sharing contact information in the Workspace container via Bluetooth

Enterprise billing on dual SIM devices

Accessibility apps access to Knox Workspace

Whitelist the accessibility apps that can access the Knox Workspace container


Server options

Server options

Cloud or on-premise
License types

License types

Monthly or yearly
Supported devices

Supported devices

Devices running Knox 2.4+
Supported EMMs

Supported EMMs

View all EMMs

Case Study


Anton Paar's salespeople are on the road four days a week, and it is crucial that their mobile devices are managed and protected.

Get started

Knox Workspace

30-day free trial

Start a free full-feature trial of Knox Workspace.

Knox Workspace

Commercial license

Purchase a monthly or yearly license from your local Knox reseller.

Have any more questions?
View Knox Workspace FAQs
Have any more questions?
View Knox Workspace FAQs

Knox IT solutions are designed to work together to help you from deployment to daily use.

Knox Configure
Configure device settings in bulk
Learn more
Knox Mobile Enrollment
Enroll devices to an EMM in bulk
Learn more
Knox Manage
Manage devices in the cloud
Learn more
Knox Workspace
Secure company data in an encrypted container
Learn more
Samsung E-FOTA
Maintain device OS versions
Learn more