The Knox container is auto-configured upon selection. This one-time configuration can be expanded with more container profiles. When complete, you can access corporate configurations from Knox Workspace.

All Applications and data inside the Knox container are isolated from applications located on the personal side. If users unenroll their device from the Workspace ONE Intelligent Hub, that removes the Knox container from their device.

While Knox is installing, users are prompted to set the Knox password and password timeout. The Knox container only requires the passcode setup for activation. Other settings come down with the passcode profile. The password and timeout settings can be changed or reset from the Workspace ONE UEM console. Users cannot create the Knox container without completing this step. The password timeout determines how long Knox can be inactive before the user is required to enter the password to open Knox. Users are also prompted to set a backup pin if they are using the fingerprint passcode setting. The backup pin setting is a Samsung requirement and cannot be changed by Workspace ONE UEM Knox container provides a separate Android environment within the mobile device, complete with its own home screen, launcher applications, and widgets.

Here are some tips on features and actions end users may perform from their device home screen:

  • Users can add shortcuts to their Knox applications on the personal side of their device. Tapping the Knox application shortcut opens the application in the Knox container. The Knox container passcode and timeout rules still applies.
  • Users are notified of Knox messages or email from the notification tray while they are using their device as a personal device. Tapping a notification from the tray starts the Knox container.

  • End-users return to the personal container by tapping the Personal home icon within the Knox container.