Configure Knox Service Plugin Features


The Knox Service Plugin (KSP) is an app that supports a subset of the Samsung Knox Platform for Enterprise (KPE) features. It enables enterprise devices to have a Knox Platform for Enterprise features as soon as they are commercially available. IT admins can use the latest Knox features on the day of launch even without integrating these features in MDM. 

Prerequisites

This feature is supported on Samsung devices:

  • Running Android version 9.0 or later and Knox version 3.2.1 or later
  • Configured with Android Enterprise (Profile Owner/Device Owner)

The KSP app uses Android’s OEMConfig to support features such as flexible VPN configuration, advanced Wi-Fi configuration, and more. IT admins will have the option to allow or restrict these functionalities for the device users.

For more information on KSP, see Knox Service Plugin Admin Guide.


To configure KSP features and apply it to the Samsung Knox device(s), follow these steps:

On the console side

  1. Configure Android Enterprise (Profile Owner/Device Owner) in SureMDM. 
  2. On the SureMDM Web Console, navigate to Profiles > Android > Add > OEMConfig Policy > Configure.
  3. Enter a Profile Name and from the Select the Required App dropdown list, select Knox Service Plugin.
  4. Enter the KPE Premium License Key.

       Note:  

a. Standard features of KSP will work without this license. If you are looking for premium features and do not have the Premium License Key, then you can contact your Samsung Reseller.

b. The features that are specified as Premium will work only when the Premium License key is entered here.

5.  Toggle On the Debug Mode to display the policy results or errors on the device.

      The status of the policy results will be displayed as Successful or Completed with Errors on the KSP app. 

6.  Configure the desired restriction settings.

  1. Save the profile.

Note: Once the profile is saved, the Knox Service Plugin application will get automatically added to the Application Policy profile.

      The newly created profile gets listed under the Profiles section.

8.  Go back to the Home tab and select the Samsung Knox device(s) or group(s).

9.  Click Apply to launch the Apply Job/Profile To Device prompt.

10.  In the Apply Job/Profile To Device prompt, select the created profile and click Apply.

       The profile gets applied to the Samsung Knox device(s).

 On the device side

The device has to be enrolled in Android Enterprise (Profile Owner/Device Owner) mode. On successful installation of the KSP app, the user has to activate the premium license. Once activated, the specified restrictions will be successfully configured on the device.