Skip to content 
Samsung Knox
In brief
Samsung Knox is the security and management platform in Samsung smartphones and tablets. It includes hardware-backed protection features in the device and cloud services for companies, for example for the automatic enrollment and management of corporate devices. When decommissioning, Knox is important because enrolled devices may be bound to the company again after a reset and must be released beforehand.
Components of Knox
| Component | Task |
|---|---|
| Knox platform in the device | Hardware-backed protection of keys and system boot, separation of work and personal data |
| Knox Mobile Enrollment | Automatic enrollment of corporate devices in device management at power-on |
| Knox Manage and partner solutions | Management of devices, apps, and policies (mobile device management) |
| Other services | For example control of firmware updates and device configuration |
A counterpart at other Android manufacturers is the Android Zero-Touch enrollment.
For companies, automatic enrollment is especially practical: new devices set themselves up with the company settings the first time they are switched on.
What to note when retiring devices
- Remove from enrollment: If a device is entered in Knox Mobile Enrollment, it connects to the company management again after a reset. Remove it before handing it over.
- Release management: Unenroll devices from the MDM, remove corporate profiles.
- Release account locks: Sign out of the Google account and Samsung account, otherwise the FRP lock.
- Prove erasure: A factory reset is not proof of erasure.
More in the guide Retiring company phones and erasing data. Second IT erases smartphones and tablets with Blancco and issues a digitally signed erasure certificate for every device.
Frequently asked questions about Samsung Knox
Do I have to deactivate Knox to sell a company phone?
The security functions in the device remain. What you must remove is the corporate binding, that is, the enrollment and the management.
Is Knox an MDM?
Knox also includes its own management solution, but is primarily a platform that works together with many MDM systems.
What happens if a device stays enrolled?
It cannot be freely set up by the new owner. This significantly reduces the resale value.
What is Knox Mobile Enrollment?
It is the automatic enrollment of corporate devices in device management. New devices set themselves up with the company settings the first time they are switched on. When decommissioning, the device must be removed from this enrollment.
Is a factory reset enough for a Samsung company phone?
No. A factory reset is not proof of erasure. With Knox enrollment, the device connects to the company management again afterward. If the Google or Samsung account remains signed in, the FRP lock also applies.
Decommission Samsung corporate devices – erased and with a certificate for each device.
Send us your device list. You will receive your offer in 48 hours on average.