November 3, 2020

Important: Impact of Android 11 on Knox services and EMM solutions

Samsung Knox Team

For several months now, Samsung has collaborated closely with Google and EMM solution providers on the upcoming Android 11 update, which has a significant impact on a wide range of Knox and EMM services. Please read this blog post carefully to avoid issues when you deploy Android 11 on your devices. This blog post covers the following areas:

  • Background: Google’s changes in Android 11
  • Changes in Knox services
  • EMM recommendations


Background: Google’s changes in Android 11

As you may be aware, Android 10 introduced extensive changes to protect user privacy and give users more control over the personal data that apps could access. Android 11 further enhances privacy, on corporate devices that are enabled for personal use.

Specifically, Corporate Owned Personally Enabled (COPE) devices will be enhanced to protect user privacy. In Android 11, Google is no longer addressing COPE through fully managed device with work profile (also known as Corporate Owned Managed Profile or COMP). Instead, customers can deploy the work profile on company-owned devices, which offers the same privacy protections employees enjoy on personally-owned devices along with added device controls like asset management tools and personal usage policies. The goals are twofold:

  • Offer greater privacy to the end user.
  • Offer the right level of control to the IT admin to manage corporate data and assets.

For instance, to preserve user privacy Enterprises that deploy work profile on company-owned devices are no longer able to mandate installation of apps in the personal profile, but to keep devices in compliance with IT usage policies are instead able to create allow and block lists which dictate which apps users can install for personal use. You can find information about this in the recent work profile article  on the Android Enterprise blog.

For more about these changes, please see:

A reminder too that Google deprecated the device admin (DA) management mode in Android 10. By November 2, 2020, Google requires app updates to target API level 29 or Android 10. From this date onwards, app updates will also start throwing exceptions if they call the four deprecated DA policies. For more about these changes, please see:


Changes in Knox services

The Android 11 changes have wide-ranging impact on Knox Platform features and cloud services.

Read the following linked content carefully to ensure a seamless transition to Android 11 and avoid any service disruptions.

Knox Platform

With fully managed device with work profile being deprecated in Android 11, Samsung exclusively offers a new option called Separated apps, which gives enterprises full (Device Owner) control over a device and device users the ability to install authorized third-party business apps (like flight, hotel, or ride-sharing apps) in a folder that’s securely isolated from other work apps.

Knox cloud services

For complete details, read Prepare Knox for Android 11.


EMM recommendations

Depending on each EMM solution provider’s readiness, supported schedules for Android 11 update and management modes will differ. For detailed information about each EMM solution, please refer to vendor articles such as the following:


Get Support

If after reviewing the content linked above you still have questions or issues, always feel free to reach out to us for support.

If you are a Samsung Knox Partner log in to your personal dashboard and click Support to access our support ticketing system If you are not (yet) a Knox Partner, enroll or contact us to get answers to general questions

[Icon] close

Get started with Samsung Knox

[Icon] suitcase
Are you a reseller, solution provider, or service provider?

Become a Knox Partner and grow your business today.

[Icon] info

Select a Knox product to start with:

All-in-one Bundle
Knox Suite
Rebranding and Customization
Knox Configure
Fraud and Theft Protection
Knox Guard
Device Protection Plan
Samsung Care+ for Business
Other products & services

Get started with

[Image] Knox Suite

All-in-one solution bundle for enterprise mobility.

  • Get a free 90-day trial for up to 30 devices.
  • A complete set of tools to secure, deploy, manage, and analyze your corporate devices.
  • Try powerful features bundled with Knox Suite.

Knox Suite includes:

Knox Mobile Enrollment Free
Knox Manage
Knox Asset Intelligence
Knox Platform for Enterprise Free
Knox Remote Support
Knox Capture
Knox Authentication Manager

Get started with

[Image] Knox Configure Logo

Rebrand and customize your Samsung devices.

  • Get a free 90-day trial for up to 30 devices.
  • Remotely configure Samsung devices in bulk and tailor them to specific needs, right out of the box.
  • Set up your devices for a one-time deployment, or update them as much as you want.

Get started with

[Icon] Knox Guard Logo

Fraud and theft protection for Samsung devices.

  • Get a free 90-day trial for up to 30 devices.
  • Reduce financial risks and protect assets by remotely controlling Samsung devices.
  • Try all the features of Knox Guard, including SIM control and device locking.

Get started with

[Image] Samsung Care Plus For Business Logo

Device protection plans for your Samsung devices.

  • Limit business interruptions with quick device repairs and replacements. Contact the Samsung sales team to get started.
  • See all your device coverage and claim information in one place.
  • Already purchased Samsung Care+ for Business? Create an account and activate your plan on the Samsung Care+ for Business console.

Other products & services

[Image] Others logo

Modern solutions to address your unique needs.