November 3, 2020

Important: Impact of Android 11 on Knox services and EMM solutions

Samsung Knox Team

For several months now, Samsung has collaborated closely with Google and EMM solution providers on the upcoming Android 11 update, which has a significant impact on a wide range of Knox and EMM services. Please read this blog post carefully to avoid issues when you deploy Android 11 on your devices. This blog post covers the following areas:

  • Background: Google’s changes in Android 11
  • Changes in Knox services
  • EMM recommendations

 

Background: Google’s changes in Android 11

As you may be aware, Android 10 introduced extensive changes to protect user privacy and give users more control over the personal data that apps could access. Android 11 further enhances privacy, on corporate devices that are enabled for personal use.

Specifically, Corporate Owned Personally Enabled (COPE) devices will be enhanced to protect user privacy. In Android 11, Google is no longer addressing COPE through fully managed device with work profile (also known as Corporate Owned Managed Profile or COMP). Instead, customers can deploy the work profile on company-owned devices, which offers the same privacy protections employees enjoy on personally-owned devices along with added device controls like asset management tools and personal usage policies. The goals are twofold:

  • Offer greater privacy to the end user.
  • Offer the right level of control to the IT admin to manage corporate data and assets.

For instance, to preserve user privacy Enterprises that deploy work profile on company-owned devices are no longer able to mandate installation of apps in the personal profile, but to keep devices in compliance with IT usage policies are instead able to create allow and block lists which dictate which apps users can install for personal use. You can find information about this in the recent work profile article  on the Android Enterprise blog.

For more about these changes, please see:

A reminder too that Google deprecated the device admin (DA) management mode in Android 10. By November 2, 2020, Google requires app updates to target API level 29 or Android 10. From this date onwards, app updates will also start throwing exceptions if they call the four deprecated DA policies. For more about these changes, please see:

 

Changes in Knox services

The Android 11 changes have wide-ranging impact on Knox Platform features and cloud services.

Read the following linked content carefully to ensure a seamless transition to Android 11 and avoid any service disruptions.

Knox Platform

With fully managed device with work profile being deprecated in Android 11, Samsung exclusively offers a new option called Separated apps, which gives enterprises full (Device Owner) control over a device and device users the ability to install authorized third-party business apps (like flight, hotel, or ride-sharing apps) in a folder that’s securely isolated from other work apps.

Knox cloud services

For complete details, read Prepare Knox for Android 11.

 

EMM recommendations

Depending on each EMM solution provider’s readiness, supported schedules for Android 11 update and management modes will differ. For detailed information about each EMM solution, please refer to vendor articles such as the following:

 

Get Support

If after reviewing the content linked above you still have questions or issues, always feel free to reach out to us for support.

If you are a Samsung Knox Partner log in to your personal dashboard and click Support to access our support ticketing system If you are not (yet) a Knox Partner, enroll or contact us to get answers to general questions

[Icon] close

Get the right solution for your business

Join 25,000+ organizations around the world.

[Icon] suitcase
Are you a reseller or solution partner?

Get access to the Knox Partner Program for helpful partner tools, such as the Knox Deployment Program portal, Knox MSP portal, partner SDKs, and more.

[Icon] info
Unified Endpoint Management
Knox Suite
Rebranding and customization
Knox Configure
Fraud and theft protection
Knox Guard
Device protection plan
Samsung Care + for Business
Other products & services

Get started with

[Image] Knox Suite

All-in-one solution bundle for enterprise mobility.

[Icon] Check mark

Join us and get a 90-day free trial for Knox Suite and other Knox products. *Approval required

[Icon] Check mark

A complete set of tools to secure, deploy, manage, and analyze your enterprise's corporate mobile devices.

[Icon] Check mark

Try powerful features bundled with Knox Suite, such as Knox Remote Support.

Knox Suite include:

[Icon] Knox Platform for Enterprise Knox Platform for Enterprise
[Icon] Knox E-FOTA Knox E-FOTA
[Icon] Knox Mobile Enrollment Knox Mobile Enrollment
[Icon] Knox Asset Intelligence Knox Asset Intelligence
[Icon] knox manage Knox Manage
[Icon] knox capture Knox Capture

Get started with

[Image] Knox Configure Logo

Remotely configure Samsung devices in bulk and tailor them to specific needs, right out of the box.

[Icon] Check mark

After approval, you can try both the:

  • Setup edition — designed for a one-time deployment
  • Dynamic edition — deploy and update policies as many times without a factory reset.
[Icon] Check mark

Try either the Setup edition or Dynamic edition of Knox Configure on up to 30 devices.

[Icon] Check mark

Get a free Knox Suite trial upon approval to try our UEM.

Get started with

[Icon] Knox Guard Logo

Remotely control Samsung devices to reduce financial risks and protect assets.

[Icon] Check mark

After you get approved, generate your free trial license for 90 days.

check-mark

Try all the features of Knox Guard on up to 30 devices, including SIM control and device locking.

[Icon] Check mark

Get a free Knox Suite trial upon approval to try our UEM.

Get started with

[Image] Samsung Care Plus For Business Logo

Protect your business devices against accidental damage and mechanical breakdowns.

[Icon] Check mark

Are you already a Samsung Care+ for Business customer? Create an account and access the Samsung Care+ for Business console.

[Icon] Check mark

Contact the Samsung sales team and get peace of mind for your devices.

Other products & services

[Image] Others logo
[Icon] Check mark

Samsung offers additional solutions to serve the unique needs of your business. Talk to a Samsung expert today.

CONTACT SALES
Back to top