Solution summary Knox is a multi-layered technology built into both the hardware and software of Samsung’s latest devices. From the Hardware Root of Trust to the Android Framework, Knox constantly verifies the integrity of the device and detects any tampering, ensuring your data is more secure.
Solution website https://www.samsungknox.com/en/knox-technology#knox-platform
Discover the suite of enterprise mobility management solutions built on the award-winning, defense-grade Knox platform. Increase your company's productivity by deploying and managing Samsung devices with Knox.
Knox Mobile Enrollment
Add new devices to your MDM with a few clicks. Knox Mobile Enrollment makes deploying thousands of devices quick and easy. Just turn on the device, connect to Wi-Fi, and your MDM profile will start loading. https://www.samsungknox.com/en/solutions/mobile-enrollment
Knox Workspace is an on-device container that isolates business applications and data from personal ones with government-grade security. Knox Workspace also provides enhanced granular controls over device features to enterprise IT administrators. Manage the container by integrating Knox IT policies with your existing MDM solution. https://www.samsungknox.com/en/solutions/knox-workspace
Secure folder creates a private, encrypted space on your Samsung Galaxy smartphone by leveraging the defense-grade Samsung Knox security platform. Apps and data moved to Secure Folder are sandboxed separately on the device and gain an additional layer of security and privacy, thus further protecting them from malicious attacks. https://www.samsungknox.com/en/solutions/secure-folder
Key features and benefits
SE for Android
Security Enhancements for Android protect applications and data by strictly defining what each process is allowed to do, and what data it can access. SE for Android help to secure a device by using domains, rights, security policies and Mandatory Access Control.
Knox leverages a processor architecture known as ARM TrustZone. In TrustZone, there are two worlds: the Normal World, and the Secure World. Virtually all smartphone software as we know today still runs in Normal World. The Secure World is reserved for highly sensitive computations, and is used extensively by Knox for protecting confidential enterprise data.
TrustZone consists of three core components:
Real-time Kernel Protection
Secure Boot & Trusted Boot
Secure Boot prevents unauthorized bootloaders and kernels from being loaded onto the device. This means that your device has not been tampered with and the Knox container can be loaded.
Trusted Boot ensures that the bootloader and OS kernel are the originals from the factory. This is done by recording the original device measurements and consistently checking the device at the start up to make sure these measurements haven't changed.
Hardware Root of Trust
The Hardware Root of Trust is a set of security mechanisms built into device hardware that flag any time the device's default controls have been altered. These include Secure Boot Key and Device Root Key, which perform authentication and encryption operations associated with the device.
Geographic presence Global.
For more information, go to www.samsungknox.com