Android Samsung Knox Container Settings

Enter brief text that identifies this group of Samsung Knox container settings.

Enter additional text that clarifies the purpose of this group of Samsung Knox container settings.

Select On to require the device user to enter both a password and a fingerprint to access the Samsung Knox container.

Therefore, the device user must create a fingerprint on the device.

The default is Off.

Enforcing multi-factor authentication requires the following on the device:



Important: After multi-factor authentication has been enforced on a device, changing this setting to Off has no impact on the device. Multi-factor authentication is still enforced, as designed by Samsung.

Select the kind of password to require:

Specify a minimum length for the password. Valid range is 4-16. The default value is 6.

Specify the minimum number of complex characters for the passcode. Valid range is 0-10.

For example, to require at least two complex characters in the passcode, enter 2.

Specify a limit for the number of times a specific character can occur in the passcode.

For example, to prevent a specific character from occurring 3 or more times, enter 2.

Specify a limit for the number of characters that can appear in sequence in a passcode.

For example, to prevent abc from occurring in a passcode, enter 2.

Specify a limit for the number of numeric characters that can appear in sequence in a passcode.

For example, to prevent “123” from occurring in a passcode, enter 2.

Specify a minimum number of characters that must change when the passcode is reset.

For example, to ensure that at least 2 characters change, enter 2.

Specify any strings that must not be present in the passcode.

To add a string:

For example, to prevent the passcode from including the user’s email address or last name, enter $EMAIL$, $LAST_NAME.

Use the tool tip to see a list of substitution variables you can use here.

Specify the idle time duration after which the lock should be enabled. If the password is set, the user is prompted for a password when unlocking the container.

Specify the number of days after which the password expires.

Specify the number of previous passwords that are stored and cannot be used when setting a new password.

Specify the maximum number of failed password attempts to allow. When this number is exceeded, the Knox container is disabled.

Select Off to disable the “Make password visible” option.

Select the in-house apps to be installed in the container:

Select the + button.

Select an app from the Name list.

The Version and Identifier fields are filled in automatically.

The default setting is Off. Select the On radio button to enable whitelisting Google accounts.

Enter the domains of accounts that can be added in the Knox container.

Select to allow the device user or third-party apps to use the photo camera, video camera, and video telephony features.

If the camera is allowed in the Knox container restriction policy, but not allowed via the device lockdown policy, the camera does not function in the Knox container.

Select to allow use of the Share Via List, which is displayed in certain apps that share content with other apps.

Select to allow the user to create email accounts. By default, this is unselected and end users cannot create email accounts in the Knox container.

Select to allow keyboards inside the container, regardless of whether they are pre-loaded or third-party keyboards.

Select to allow device users to download apps from the Samsung Knox app store (www.samsungknox.com).

Select to allow user to take a screenshot to help with troubleshooting.

Select to allow alternate provisioning of the Knox container.

Select to allow enrollment of the device using the NFC bump.

Select to allow so that apps that need USB access function properly.

Select to deploy CA certificates inside and outside of the Knox container to secure traffic on apps inside the Work Profile mode with a self-signed or well-known certificate. If you deselect this option, CA certificates are only installed on the outside of the container and certificates installed on the inside of the container are removed.

Specifies the Android Samsung Browser configuration to use in the Knox container. You need to create the Samsung Browser configuration separately. Otherwise, this list will be empty.

Specifies the Exchange configuration to use in the Knox container. You need to create the Exchange configuration separately. Otherwise, this list will be empty.