Configure OEMConfig for Samsung devices with Knox Service Plugin

OEMConfig is a standard used for adding, creating, and customizing device-specific settings on Android Enterprise enrolled devices that address different kinds of enterprise use cases. The Knox Service Plugin (KSP) is Samsung’s OEMConfig application that allows enterprises to access all the latest Knox management features as soon as they are released in the market. The OEMConfig app enables you to reduce the time delay between a device-specific feature release and the feature incorporation into the UEM. This enables you to roll out the feature customization in no time.

To configure Knox devices with OEMConfig,

1. Enroll your organization in the Android Enterprise.
2. Enroll the device in the Android Enterprise (Device Owner, Profile Owner or Knox Device Owner).
3. Approve and add Knox Service Plugin (KSP) to the Hexnode app repository.
4. Set up the app configurations for KSP.
5. Associate the configurations with target entities.

Add Knox Service Plugin to the app inventory

1. On your Hexnode UEM console, navigate to the Apps tab.
2. Click on +Add Apps > Managed Google Apps.
3. Search for Knox Service Plugin and select the app.
4. Click on Approve.
5. A pop-up specifying the permissions required by the app will be displayed. Go through it and click Approve.
6. This will take you to the Approval Settings page. Select a method by which you would handle new app permission requests. You can choose from:
   1. Keep approved when app requests new permissions: Select this to ensure that the app is kept approved in the portal even if new permissions are requested. The users will be able to install the updated app.
   2. Revoke app approval when this app requests new permissions: Select this option to remove the app from the app repository until it is reapproved when it requests new permissions.
7. On the same pop-up wizard, navigate to the Notifications tab. To subscribe to email notifications when the approved apps request new permissions, enter the email address in the Add subscriber field and click on Add. You can add as many subscribers as you need.
8. Click on Done.

This will add the app to the Hexnode app repository. Before deploying the OEM configurations to the devices, you have to make sure that the Knox Service Plugin is installed on the devices. You can use the remote action Install Application or the Mandatory App policy to remotely roll out the app to the devices.

Set up App Configurations for Samsung Knox devices

1. On your Hexnode UEM console, navigate to the Policies tab.
2. Click on New Policy to create a new policy or edit an existing policy. Provide a policy name and description (Optional) if you are creating a new policy.
3. Go to Android > App Management > App Configurations.
4. Click on Configure > + Add new configuration.
5. Search and select Knox Service Plugin from the list of apps.
6. Configure the available settings and click Done.
7. Click on Add.

Following are some of the settings that can be configured with the Knox Service Plugin. Check out Knox’s example schema to know more about the configurations.

Associate target devices

If the policy has not been saved,

1. Navigate to Policy Targets.
2. Click on Devices/ Device Groups/ Users/ User Groups/ Domains.
3. Choose the targets and click OK and then Save.

If you have the policy saved already,

1. Go to Policies tab and choose the desired policy.
2. Click on the Manage drop-down and select Associate Targets.
3. Choose the target entities and click Associate.

You can choose devices, users, device groups, user groups, and domains as the policy targets.