KNOX Standard SDK - Samsung Knox · KNOX Standard and KNOX Premium SDKs: Samsung KNOX™ Standard...

Release Notes

KNOX™ Standard SDK Version 5.3 January 2015

Samsung KNOX™ Standard SDK Release Notes Copyright © 2015 Samsung Electronics Co. Ltd. ii

Copyright Notice

Copyright © 2015 Samsung Electronics Co. Ltd. All rights reserved. Samsung is a registered trademark of Samsung Electronics Co. Ltd.

Samsung KNOX is a trademark of Samsung Electronics, Co., Ltd. in the United States and other countries. Specifications and designs

are subject to change without notice. Non-metric weights and measurements are approximate. All data were deemed correct at time

of creation. Samsung is not liable for errors or omissions. Android and Google Play are trademarks of Google Inc. ARM and TrustZone

are registered trademarks of ARM Limited (or its subsidiaries) in the EU and/or elsewhere. iOS is a trademark of Apple Inc., registered

in the U.S. and other countries. Microsoft Azure and Microsoft Active Directory are either registered trademarks or trademarks of

Microsoft Corporation in the United States and/or other countries. All brand, product, service names and logos are trademarks and/or

registered trademarks of their respective owners and are hereby recognized and acknowledged.

Samsung KNOX Standard SDK Information

Version: 5.3

Supported Target Platform

Android 5.0 (Lollipop)

Document History

Date SDK

Version

Doc

Version Description of changes

7/1/11 2.0 2.0 Base document version.

1/20/12 2.2 2.2.0 Updated all existing policies till MDM 2.1. Added new MDM 2.2 Policies

4/16/12 3.0 3.0 Updated all existing policies till MDM 2.2. Added new MDM 3.0 Policies &

Features 11/8/12 4.0 4.0 Updated all existing policies till MDM 3.0. Added new 4.0 Policies & Features

6/28/13 4.0.1 4.0.1.0 Added new MDM 4.0.1 Policies. Separated Remote Control (RC) SDK

3/4/14 5.0 5.0 Added new MDM 5.0 Policies (+ MDM 4.1 APIs). Added Remote Control APIs

7/8/14 5.1 5.1.0 Added new MDM 5.1 Policies. Updated on released MDM 5.0 polices

9/25/14 5.2 5.2.0 Updated all existing policies & features till MDM 5.1. Added new MDM 5.2

Policies 1/14/15 5.3 5.3.0 Updated all existing policies & features till MDM 5.2. Added new MDM 5.3

Policies

Contact Information

Samsung Electronics Co., Ltd

416, Maetan-3dong,

Yeongtong-gu Suwon-City

Gyeonggi-do, 443-742

Samsung Enterprise Mobility Solutions – Santa Clara

Samsung Research America, Ltd

3920 Freedom Circle; Suite 101

Santa Clara, CA 95054

United States of America

Samsung KNOX™ Standard SDK Release Notes Copyright © 2015 Samsung Electronics Co. Ltd. iii

Contents 1 Introduction ................................................................................................................... iv

Audience ............................................................................................................................................................................................ iv Additional documentation .......................................................................................................................................................... iv

2 Installation and configuration ...................................................................................... 5

3 Supported features......................................................................................................... 6

Policies ................................................................................................................................................................................................. 6

4 New features and enhancements ............................................................................... 17

Constants ......................................................................................................................................................................................... 17 API / Constants documentation upgrades ......................................................................................................................... 17 Deprecated APIs ............................................................................................................................................................................ 18 Enhanced APIs / Constants ....................................................................................................................................................... 18

5 Issues fixed .................................................................................................................... 19

APIs depcated and not supported ......................................................................................................................................... 19 Constants deprecated and not supported ......................................................................................................................... 19 APIs description, sample code enhancement .................................................................................................................... 19

6 Known issues ................................................................................................................. 20

Samsung KNOX™ Standard SDK Release Notes Copyright © 2015 Samsung Electronics Co. Ltd. iv

1 Introduction This release contains the policies released as part of the Enterprise Device Management Project.

The Enterprise Device Management project is part of a broader on-going effort to make Samsung

Android Smart phones & Tablets enterprise friendly.

These policies are intended to be used by any Device Management client to enforce organization

specific policies on employee devices. MDM clients developed by Samsung Partners are intended

to make use of these policies to satisfy their and their customer’s requirements.

Audience

Enterprise Development Teams at:

o Samsung HQ (Suwon, South Korea)

o MCL B2B (Santa Clara, USA)

o SIDI (Campinas, Brazil)

o Samsung Partners

Additional documentation

The following documentation is also available for additional information regarding the Samsung

KNOX Standard and KNOX Premium SDKs:

Samsung KNOX™ Standard SDK Developer Guide—Describes the Samsung KNOX

Standard SDK APIs and explains how to use them to develop Android™ app containers

and other mobile enterprise features that can be implemented in Enterprise-managed

Samsung KNOX-enabled mobile devices. This guide includes Java device and container

use case examples.

Samsung KNOX™ Quality Criteria for MDM Solutions—Describes the quality criteria for

Samsung KNOX that each MDM partner should implement with their mobile device

management solution.

Samsung KNOX™ Standard SDK Release Notes Copyright © 2015 Samsung Electronics Co. Ltd. 5

2 Installation and configuration The KNOX Standard SDK policies are currently developed on the Android KitKat.

The required MDM client should be installed on this device and the new policies can be exercised.


3 Supported features

Policies The following are the list of policies which had been developed till MDM 5.2

Policy Group Policy MDM

Version

Application Permission Control

Policy Group

Blacklist permissions & Whitelist permissions for specific

applications MDM 3.0


Policy Group Get granted permissions for an app MDM 4.0

APN Management TCP APN IT policy rule MDM 2.0

APN Management TCP Password IT policy rule MDM 2.0

APN Management TCP Username IT policy rule MDM 2.0

Application Control Policy Group Disable Application Center IT policy rule MDM 1.0

Application Control Policy Group Disable Voice-Activated Dialing IT policy rule MDM 2.0

Application Control Policy Group Allow Browser IT policy rule MDM 2.0

Application Control Policy Group Allow use of YouTube MDM 2.0

Application Control Policy Group Allow use of Media Hub MDM 2.0

Application Control Policy Group List all Apps MDM 1.0

Application Control Policy Group Install Enterprise App MDM 1.0

Application Control Policy Group Disable Enterprise App MDM 1.0

Application Control Policy Group Remove Enterprise App MDM 1.0

Application Control Policy Group Enterprise App Status MDM 1.0

Application Control Policy Group List installed Enterprise Apps MDM 1.0

Application Control Policy Group Remove Managed Applications MDM 1.0

Application Control Policy Group Remove Application Configuration Data MDM 1.0

Application Control Policy Group Application UID MDM 1.0

Application Control Policy Group Application Name MDM 1.0

Application Control Policy Group Application Version MDM 1.0

Application Control Policy Group Application Code Size MDM 2.0

Application Control Policy Group Application Data Size MDM 2.0

Application Control Policy Group Application Cache Size MDM 2.0

Application Control Policy Group Application Total Size MDM 2.0

Application Control Policy Group Application Memory Usage MDM 2.0

Application Control Policy Group Application CPU Usage MDM 2.0

Application Control Policy Group Prevent uninstall app by user MDM 1.0

Application Control Policy Group Enable uninstall app by user MDM 1.0

Application Control Policy Group Disable Application MDM 1.0

Application Control Policy Group Enable Application MDM 1.0


Application Control Policy Group Wipe Application Data MDM 1.0

Application Control Policy Group Check if application installed MDM 1.0

Application Control Policy Group Check if application currently Running MDM 1.0

Application Control Policy Group Update application MDM 1.0

Application Control Policy Group App whitelist MDM 1.0

Application Control Policy Group App blacklist MDM 1.0

Application Control Policy Group Top CPU Usage App MDM 2.0

Application Control Policy Group Top Memory Usage App MDM 2.0

Application Control Policy Group Top Data Usage App MDM 2.0

Application Control Policy Group Manage Enterprise app installed from Android Market MDM 2.0

Application Control Policy Group Block Applications based on Permission restriction MDM 2.0

Application Control Policy Group Signature Blacklist MDM 2.0

Application Control Policy Group Application level 3G Data Usage MDM 2.0

Application Control Policy Group Average number of times App used in a month MDM 2.0

Application Control Policy Group Last application usage time MDM 2.0

Application Control Policy Group Icon change in application launcher MDM 2.0

Application Control Policy Group Start an app MDM 2.0

Application Control Policy Group Stop an app MDM 2.0

Application Control Policy Group User can launch apps - whitelist / blacklist MDM 2.0

Application Control Policy Group Application Default blacklist MDM 2.0

Application Control Policy Group Enable Uninstall of Applications MDM 2.2

Application Control Policy Group Enable Forced Application Installation to the SD Card MDM 2.2

Application Control Policy Group Prevent user from stop certain application MDM 3.0

Application Control Policy Group Add/delete home screen application shortcut MDM 3.0

Application Control Policy Group Whitelist/Blacklist widgets MDM 3.0

Application Control Policy Group Prevent Notifications Blacklist/Whitelist MDM 3.0

Application Control Policy Group List widgets MDM 3.0

Application Control Policy Group Signature Whitelist MDM 4.0

Application Control Policy Group Prevent user from clear data certain application MDM 3.0

Application Control Policy Group Prevent user from clear cache certain application MDM 3.0

Backup Policy Group Enable Google Backup MDM 2.0

Backup Policy Group Disable Google Backup MDM 2.0

Backup Policy Group Backup/restore application data MDM 3.0

Bluetooth Policy Group Allow Outgoing Calls IT policy rule MDM 2.0

Bluetooth Policy Group Disable Address Book Transfer IT policy rule MDM 2.0

Bluetooth Policy Group Disable Advanced Audio Distribution Profile IT policy rule MDM 2.0

Bluetooth Policy Group Disable Audio/Video Remote Control Profile IT policy rule MDM 2.0

Bluetooth Policy Group Disable Desktop Connectivity IT policy rule MDM 2.0

Bluetooth Policy Group Disable Dial-Up Networking IT policy rule MDM 2.0

Bluetooth Policy Group Disable Discoverable Mode IT policy rule MDM 2.0

Bluetooth Policy Group Disable File Transfer IT policy rule MDM 2.0

Bluetooth Policy Group Disable Handsfree Profile IT policy rule MDM 2.0

Bluetooth Policy Group Disable Headset Profile IT policy rule MDM 2.0

Bluetooth Policy Group Disable Pairing IT policy rule MDM 2.0

Bluetooth Policy Group Disable Serial Port Profile IT policy rule MDM 2.0


Bluetooth Policy Group Disable SIM Access Profile IT policy rule MDM 2.0

Bluetooth Policy Group Limit Discoverable Time IT policy rule MDM 2.0

Bluetooth Policy Group Start Discovery MDM 1.0

Bluetooth Policy Group Cancel Discovery MDM 1.0

Bluetooth Policy Group Get bonded devices MDM 1.0

Bluetooth Policy Group Bluetooth Profile White List MDM 2.2

Bluetooth Policy Group Bluetooth Profile Black List MDM 2.2

Bluetooth Policy Group Set Bluetooth Profile Policy MDM 2.2

Bluetooth Policy Group Bluetooth Device White List MDM 2.2

Bluetooth Policy Group Bluetooth Device Black List MDM 2.2

Bluetooth Policy Group Set Bluetooth Device Policy MDM 2.2

Bluetooth Policy Group Enable Bluetooth Log MDM 3.0

Bluetooth Policy Group Get Bluetooth Log MDM 3.0

Bluetooth Policy Group Block Caller ID Display on Connected Bluetooth Device MDM 4.0

Browser Policy Group Disable JavaScript in Browser IT policy rule MDM 2.0

Browser Policy Group Browser Enable AutoFill MDM 2.0

Browser Policy Group Browser Force fraud warning MDM 2.0

Browser Policy Group Browser Allow Pop Ups MDM 2.0

Browser Policy Group Browser Accept Cookies MDM 2.0

Browser Policy Group Browser Proxy Settings MDM 4.0

Device Account Policy Group Account Addition blacklist MDM 4.0

Device Account Policy Group Account Removal blacklist MDM 4.0

Device Account Policy Group Account Addition whitelist MDM 4.0

Device Account Policy Group Account Removal whitelist MDM 4.0

Exchange Account Management Exchange Misc APIs MDM 1.0

Exchange Account Management Active Sync Host MDM 1.0

Exchange Account Management User MDM 1.0

Exchange Account Management Email address MDM 1.0

Exchange Account Management Use SSL MDM 1.0

Exchange Account Management Domain MDM 1.0

Exchange Account Management Password MDM 1.0

Exchange Account Management Set client SSL authentication certificate MDM 1.0

Exchange Account Management Number of past days to sync MDM 1.0

Exchange Account Management Remove Managed Exchange Account and Data MDM 1.0

Exchange Account Management Set exchange account sender name MDM 1.0

Exchange Account Management Create new exchange account MDM 1.0

Exchange Account Management Set exchange account display/account name MDM 1.0

Exchange Account Management Set exchange account sync interval MDM 1.0

Exchange Account Management Set exchange account protocol version MDM 1.0

Exchange Account Management Set exchange account sender signature MDM 1.0

Exchange Account Management Set exchange account setting to always vibrate on email

notification

MDM 1.0

Exchange Account Management Set exchange account setting to vibrate when silent only

on email notification

MDM 1.0

Exchange Account Management Set exchange account setting to accept all SSL related

certificates

MDM 1.0

Exchange Account Management Set Account base parameters MDM 2.0

Exchange Account Management Set as Default Account MDM 2.0


Exchange Account Management Sync Interval Detailed Parameters MDM 2.0

Enterprise License Management Activate Enterprise License MDM 4.0

Enterprise License Management Get APIs call log data MDM 4.0

Email Account Management Account Type (IMAP /POP) MDM 2.0

Email Account Management Path Prefix MDM 2.0

Email Account Management Account Name MDM 2.0

Email Account Management Email Address MDM 2.0

Email Account Management Mail Server and Port MDM 2.0

Email Account Management Username MDM 2.0

Email Account Management Use Password Authentication MDM 2.0

Email Account Management Use SSL MDM 2.0

Email Account Management Incoming Username MDM 2.0

Email Account Management Sync Interval MDM 2.0

Email Account Management Outgoing Username MDM 2.0

Email Account Management Outgoing Password Same As incoming Password MDM 2.0

Email Account Management Add/Read/Modify/Remove MDM 2.0

Email Account Management Disable Email Forwarding through personal account MDM 3.0

Email Account Management Create new Email Account by Class (IMAP /POP) MDM 5.0

Email Account Management HTML format in email display MDM 4.0

Email Account Management Email Account Addition Restriction MDM 4.0

Firewall Policy Group Web Filtering / Reporting MDM 3.0

Firewall Policy Group Application based Firewall MDM 3.0

Firewall Policy Group Get active iptables rules MDM 3.0

Firewall Policy Group Choose network for market place/apps download MDM 3.0

Firewall Policy Group Firewall Reroute Exceptions rules MDM 3.0

General Settings Management Change Wallpaper MDM 2.0

General Settings Management Change Ring Tone MDM 2.0

General Settings Management Web bookmarks - add / delete MDM 2.0

General Settings Management Add custom text to device lock screen MDM 2.0

General Settings Management Configure system font silently MDM 2.0

General Settings Management Get/Set Clipboard MDM 3.0

General Settings Management Configure system font size silently MDM 4.0

Geofencing Create Geo Fence MDM 4.0

Geofencing Delete Geo Fence MDM 4.0

Geofencing Retrieve Geo Fence Info MDM 4.0

Geofencing Start & Stop Monitoring MDM 4.0

Geofencing Device geofence status MDM 4.0

Geofencing Set Time Frequency parameter MDM 4.0

Geofencing Set Distance Frequency parameter MDM 4.0

Misc Configure system font size silently MDM 4.0

Device Inventory Modem Firmware MDM 2.0

Device Inventory ICC ID MDM 1.0

Device Inventory Bluetooth Mac Address MDM 2.0

Device Inventory Wifi Mac Address MDM 2.0

Device Inventory Current Carrier Network MDM 1.0


Device Inventory SIM Carrier Network MDM 1.0

Device Inventory Phone Number MDM 1.0

Device Inventory Passcode Present MDM 2.0

Device Inventory Device OS MDM 2.0

Device Inventory OS version MDM 2.0

Device Inventory Device Platform MDM 2.0

Device Inventory Device Maker MDM 2.0

Device Inventory Device Model Number MDM 2.0

Device Inventory Device Model Name MDM 2.0

Device Inventory Platform Version MDM 2.0

Device Inventory Platform SDK MDM 2.0

Device Inventory Lock Status MDM 2.0

Device Inventory Phone Type MDM 1.0

Device Inventory Current Network Operator MDM 2.0

Device Inventory Current Network Type MDM 1.0

Device Inventory Phone SIM Operator Name MDM 1.0

Device Inventory Phone SIM Country Iso MDM 1.0

Device Inventory Phone SIM State MDM 1.0

Device Inventory Wifi Enabled MDM 1.0

Device Inventory Bluetooth Supported MDM 1.0

Device Inventory Bluetooth Status MDM 2.0

Device Inventory Dropped call information MDM 2.0

Device Inventory Data usage MDM 2.0

Device Inventory Outbound SMS capture MDM 2.0

Device Inventory Inbound SMS Capture MDM 2.0

Device Inventory Incoming Call Logging MDM 2.0

Device Inventory Outgoing Call Loggng MDM 2.0

Device Inventory Processor Type & Speed MDM 2.0

Device Inventory RAM (Available/Total) MDM 2.0

Device Inventory Device Cellular Data Use log MDM 2.0

Device Inventory GSM cell tower info MDM 3.0

Kiosk Mode Policy Group Enable Kiosk Mode MDM 3.0

Kiosk Mode Policy Group Disable System Bar MDM 3.0

Kiosk Mode Policy Group Wipe recent tasks MDM 3.0

Kiosk Mode Policy Group Disable Status Bar only MDM 4.0

Kiosk Mode Policy Group Disable Navigation Bar only MDM 4.0

LDAP Management Configure LDAP Account MDM 4.0

LDAP Management Delete account MDM 4.0

LDAP Management All LDAP accounts MDM 4.0

Lock Screen Customization Enterprise Contact Info On Lock Screen MDM 4.0

Lock Screen Customization Enterprise Custom Images On Lock Screen MDM 4.0

Lock Screen Customization Enterprise Emergency Call MDM 4.0

Lock Screen Customization Entire Lock Screen Replacement MDM 4.0

Lock Screen Customization Reset Lock Screen MDM 4.0

Lock Screen Customization Query Lock Screen Customization Status MDM 4.0


Multi User Management Allow Multi User Mode MDM 4.0

Multi User Management Get Multi User Mode allowed MDM 4.0

Multi User Management Get Multi User Mode supported MDM 4.0

Phone Policy Group Block Caller ID Display in Phone App MDM 4.0

Phone Policy Group Enable / Disable SIM PIN Lock MDM 4.0

Password Policy Group Set Maximum Password Attempts IT policy rule MDM 1.0

Password Policy Group Set Password Timeout IT policy rule MDM 2.0

Password Policy Group Required Password Pattern IT policy rule (Regular

Expression)

MDM 2.0

Password Policy Group Minimum number of complex characters MDM 1.0

Password Policy Group Remote lock device MDM 1.0

Password Policy Group Reset device password MDM 1.0

Password Policy Group Grace Period for Device Lock MDM 2.0

Password Policy Group Password Quality (Numeric, Alphabetic, Alphanumeric) MDM 1.0

Password Policy Group Get device password (password digest) MDM 1.0

Password Policy Group Remote reset (reboot) device MDM 1.0

Password Policy Group Password change enforcement (do not let user cancel

out)

MDM 2.0

Password Policy Group Maximum password attempts for device disable MDM 2.0

Password Policy Group Password Maximum Repeated Characters MDM 2.2

Password Policy Group Password Maximum Repeated Numerics MDM 2.2

Password Policy Group Password Forbidden Personal Data MDM 2.2

Password Policy Group Set Lock Pattern Visible MDM 3.0

Password Policy Group Maximum Sequence of Characters MDM 4.0

Password Policy Group Minimum change in Password Characters MDM 4.0

Password Policy Group Enable / Disable Make password visible option MDM 4.0

Password Policy Group Exclude external storage wipe MDM 4.0

Remote Control Inject Key Event MDM 2.1

Remote Control Inject Pointer Event MDM 2.1

Remote Control Inject Trackball Event MDM 2.1

Remote Control Set/Get Screen Info MDM 4.0

Remote Control Get Frame Buffer Info MDM 2.1

Remote Control Screen Change Listener MDM 2.1

Remote Control Capture screen MDM 2.1

Roaming Policy Group WAP Push Roaming Setting MDM 2.0

Roaming Policy Group Data Roaming Setting MDM 1.0

Roaming Policy Group Allow data while roaming MDM 1.0

Roaming Policy Group Block Voice Calls In Roaming MDM 3.0

Restriction Policy Group Disable Bluetooth IT policy rule MDM 1.0

Restriction Policy Group Disable Photo Camera IT policy rule MDM 1.0

Restriction Policy Group Disable Video Camera IT policy rule MDM 1.0

Restriction Policy Group Allow Screen Shot Capture IT policy rule MDM 2.0

Restriction Policy Group Disable Wi-Fi IT policy rule MDM 1.0

Restriction Policy Group Allow Face Time Video Calls MDM 2.0

Restriction Policy Group Wifi Allowed MDM 1.0

Restriction Policy Group Bluetooth Allowed MDM 1.0

Restriction Policy Group Enable and Start Bluetooth MDM 1.0


Restriction Policy Group Disable microphone MDM 1.0

Restriction Policy Group USB Tethering MDM 2.0

Restriction Policy Group Check camera enabled MDM 1.0

Restriction Policy Group WiFi Tethering MDM 2.0

Restriction Policy Group Check microphone enabled MDM 1.0

Restriction Policy Group Disable NFC MDM 2.0

Restriction Policy Group Data enabled (cellular) - enable / disable / status MDM 2.0

Restriction Policy Group "Back up my data" setting - enable / disable MDM 2.0

Restriction Policy Group SD-Card - enable / disable / status MDM 2.0

Restriction Policy Group Disable cut/copy/paste MDM 2.0

Restriction Policy Group Config app “Unknown Sources” setting MDM 2.0

Restriction Policy Group Lock settings / management on phone MDM 2.0

Restriction Policy Group Background data (cellular) - enable / disable / status MDM 2.0

Restriction Policy Group Location - use GPS - enable / disable / status MDM 2.0

Restriction Policy Group USB Connection - enable / disable / status MDM 2.0

Restriction Policy Group SD Card Write - enable / disable / status MDM 3.0

Restriction Policy Group Limit Cellular Data Use (roaming or normal) by defined

value

MDM 2.0

Restriction Policy Group Disable home key MDM 2.0

Phone Policy Group SMS/MMS - enable / disable / status MDM 3.0

Restriction Policy Group USBDriver (UMS) enable/disable MDM 2.0

Restriction Policy Group Restrict Factory Reset MDM 2.0

Restriction Policy Group Bluetooth Tethering MDM 2.0

Restriction Policy Group Enable VPN MDM 2.2

Restriction Policy Group Prevent Power Off MDM 3.0

Location Policy Group Start/Stop GPS location provider MDM 3.0

Location Policy Group Enable/Disable GPS location provider MDM 3.0

Kiosk Mode Policy Group Taskmanager launch prevention MDM 3.0

Kiosk Mode Policy Group Enable/Disable Hardware key MDM 3.0

Restriction Policy Group Disable wallpaper change MDM 3.0

Restriction Policy Group Enable/Disable status bar expansion MDM 3.0

Restriction Policy Group Block Google Crash Report MDM 3.0

Restriction Policy Group Block OS Upgrade MDM 3.0

Kiosk Mode Policy Group Disable Multi Window Mode MDM 4.0

Restriction Policy Group Allow/Disallow stop system sign app or process MDM 4.0

Restriction Policy Group Block audio recording when microphone is enabled MDM 4.0

Restriction Policy Group Block video recording when camera is enabled MDM 4.0

Restriction Policy Group Restrict App Copy Paste MDM 4.0

Restriction Policy Group Allow User Mobile Data Limit MDM 4.0

Restriction Policy Group Allow Killing Activities on Leave MDM 4.0

Restriction Policy Group Allow Background Process Limit MDM 4.0

Restriction Policy Group Allow WiFi Direct MDM 4.0

Restriction Policy Group Allow S Beam MDM 4.0

Restriction Policy Group Allow Android Beam MDM 4.0

Restriction Policy Group Allow S Voice MDM 4.0

Restriction Policy Group Block SMS with storage MDM 4.0


Restriction Policy Group Block MMS with storage MDM 4.0

Restriction Policy Group Allow WAP Push MDM 4.0

Restriction Policy Group Allow USB Host Storage MDM 4.0

Restriction Policy Group Allow/Disallow share list MDM 4.0

Restriction Policy Group Allow/Disallow installation of self signed apps MDM 4.0

Restriction Policy Group Allow/Disallow Safe mode MDM 4.0

Restriction Policy Group Allow/Disallow Screen Favorite Apps MDM 4.0

Security Management Device Lockout MDM 4.0

Security Management Prevent Account Removal MDM 4.0

Security Management DoD Banner MDM 4.0

VPN Account Management Certificate to use for the account credentials MDM 2.0

VPN Account Management Description of the VPN connection displayed on the

device. (android)

MDM 2.0

VPN Account Management VPN Gateway Address IT policy rule (Android) MDM 2.0

VPN Account Management Shared secret for this VPN account. (Android) MDM 2.0

VPN Account Management Certificate to use for the account credentials (Android) MDM 2.0

VPN Account Management Authentication Method (Shared Secret / Certificate)

(Android)

MDM 2.0

VPN Account Management VPN Type (Android) MDM 2.0

VPN Account Management VPN User Name IT policy rule (Android) MDM 2.0

VPN Account Management VPN User Password IT policy rule (Android) MDM 2.0

VPN Account Management Add DNS SearchDomain parameter to PPTP VPN Profile MDM 3.0

VPN Account Management Add DNS SearchDomain parameter to PSK VPN Profile MDM 3.0

VPN Account Management Add DNS SearchDomain parameter to CRT VPN Profile MDM 3.0

VPN Account Management Add DNS SearchDomain parameter to xauth PSK VPN

Profile

MDM 3.0

VPN Account Management Add DNS SearchDomain parameter to xauth with

certificates VPN Profile

MDM 3.0

VPN Account Management Add DNS SearchDomain parameter to xauth hybrid with

certificate VPN Profile

MDM 3.0

VPN Account Management Allow only IPSec or SSL/TLS VPN connections MDM 4.0

Wi-Fi Management Blocked Wi-Fi SSIDs IT policy rule MDM 2.0

Wi-Fi Management Disable Wi-Fi User Profiles IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi Allow Handheld Changes IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi Default Gateway IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi Default KEY ID IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi DHCP Configuration IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi Disable Prompt for Credentials Re-Entry IT policy

rule

MDM 2.0

Wi-Fi Management Wi-Fi IP Address IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi Link Security IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi Minimal EAP-TLS Certificate Encryption Key Security

Level IT policy rule

MDM 2.0

Wi-Fi Management Wi-Fi Password Hidden on Input IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi Preshared Key IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi Primary DNS IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi Secondary DNS IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi SSID IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi Subnet Mask IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi User Name IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi User Password IT policy rule MDM 2.0

Wi-Fi Management Wi-Fi WEP Key 1 IT policy rule MDM 2.0





Wi-Fi Management Get current WiFi AP's SSID MDM 1.0

Wi-Fi Management Get current WiFi AP's hidden SSID MDM 1.0

Wi-Fi Management Get assigned IP address MDM 1.0

Wi-Fi Management Connect to specific access point MDM 1.0

Wi-Fi Management Inner authentication used by the TTLS module MDM 2.0

Wi-Fi Management Allows the user to hide his or her identity MDM 2.0

Wi-Fi Management certificate payload to use for the identity credential MDM 2.0

Wi-Fi Management Configure WiFi Tethering Settings MDM 2.2

Wi-Fi Management Enable User Control of WiFi Tethering Settings MDM 2.2

Wi-Fi Management WiFi Network White List MDM 2.2

Wi-Fi Management WiFi Network Black List MDM 2.2

Wi-Fi Management Set WiFi Network Policy MDM 2.2

Wi-Fi Management Block WiFi state MDM 3.0

Wi-Fi Management Disallow unsecured Wifi HotSpots MDM 4.0

Wi-Fi Management Disable Automatic Connection to Wi-fi Networks MDM 4.0

Wipe Management Selective Data Wipe (Managed Apps data wipe, All User

Content wipe, Factory reset, …)

MDM 2.0

Browser Proxy settings Set Http Proxy setting MDM

4.0.1 Browser Proxy settings Clear Http Proxy setting MDM

4.0.1 Browser Proxy settings Retrieve Http Proxy setting MDM

4.0.1 Application Control Policy Group App whitelist MDM 5.0

Application Control Policy Group Prevent user from stop certain application MDM 5.0

Application Control Policy Group Whitelist/Blacklist widgets MDM 5.0

Application Control Policy Group Prevent Notifications Blacklist/Whitelist MDM 5.0

Application Control Policy Group Application Signature Whitelist MDM 5.0

Application Control Policy Group Disable Application update MDM 5.0

Application Control Policy Group Change application name MDM 5.0

Application Control Policy Group Prevent application start MDM 5.0

Application Control Policy Group Get list of homescreen shortcuts MDM 5.0

Application Control Policy Group Disable Application Clipboard MDM 5.0

Application Control Policy Group Disable all package name except Whitelisted MDM 5.0

Application Control Policy Group Disable all package signature except Whitelisted MDM 5.0

Application Control Policy Group User can set component state - enable / disable MDM 5.0

Bluetooth Policy Group Bluetooth Profile White List MDM 5.0

Bluetooth Policy Group Bluetooth Device White List MDM 5.0

Bluetooth Policy Group Clear Device BlackList and WhiteList MDM 5.0

Bluetooth Policy Group Clear Profile BlackList and WhiteList MDM 5.0

Email Account Management Create new Email Account by Class (IMAP /POP) MDM 5.0

Email Account Management Enable Email notifications MDM 5.0

Email Account Management Allow Email settings changes MDM 5.0

Enterprise License Management Activate Enterprise License (non admin) MDM 5.0

VPN Account Management Set VPN Always On mode MDM 5.0

VPN Account Management Allow user changes on VPN Settings MDM 5.0


Exchange Account Management Create new exchange account by Class MDM 5.0

Exchange Account Management Disable Exchange Attachment MDM 5.0

Exchange Account Management Set/Get Exchange Attachment size MDM 5.0

Exchange Account Management MaxCalendarAgeFilter MDM 5.0

Exchange Account Management MaxEmailAgeFilter MDM 5.0

Exchange Account Management MaxEmailBodyTruncationSize MDM 5.0

Exchange Account Management MaxEmailHTMLBodyTruncationSize MDM 5.0

Exchange Account Management S/MIME certificate support for message signing MDM 5.0

Exchange Account Management S/MIME certificate support for message encryption MDM 5.0

Firewall Policy Group Configure per app DNS MDM 5.0

Firewall Policy Group Global Proxy Support for whole phone MDM 5.0

Firewall Policy Group Generic Iptables rules MDM 5.0

Password Policy Group Password Quality MDM 5.0

Password Policy Group Password Minimum Length MDM 5.0

Password Policy Group Password Minimum Upper Case MDM 5.0

Password Policy Group Password Minimum Lower Case MDM 5.0

Password Policy Group Password Minimum Letters MDM 5.0

Password Policy Group Password Minimum Numeric MDM 5.0

Password Policy Group Password Minimum Symbols MDM 5.0

Password Policy Group Password Minimum NonLetter MDM 5.0

Password Policy Group Password History Length MDM 5.0

Password Policy Group Password Expiration Timeout MDM 5.0

Password Policy Group Password Expiration Time MDM 5.0

Password Policy Group Password Maximum Length MDM 5.0

Password Policy Group Active password sufficient MDM 5.0

Password Policy Group Current Failed Password Attempts MDM 5.0

Password Policy Group Maximum Failed Passwords for Wipe MDM 5.0

Password Policy Group Reset Password MDM 5.0

Password Policy Group Maximum Time to Lock MDM 5.0

Restriction Policy Group Enable/Disable Developer mode MDM 5.0

Restriction Policy Group Block sync from Google Account MDM 5.0

Restriction Policy Group Restriction of Airplane Mode MDM 5.0

Restriction Policy Group Disable "activation lock" MDM 5.0

Restriction Policy Group Enabling Quick Encryption by default during Require

encryption process

MDM 5.0

Restriction Policy Group Block App move to SDCard MDM 5.0

Restriction Policy Group Disable headphone jack MDM 5.0

Restriction Policy Group Enable/Disable LockScreen menu MDM 5.0

Phone Policy Group SMS Whitelist / Blacklist based on phone number

(Improvement)

MDM 5.0

Phone Policy Group Disable contact copy to SIM card MDM 5.0

Phone Policy Group SMS/MMS/Call logging - again requested by parents MDM 5.0

Phone Policy Group Exception Pattern for Incoming/Outgoing Calls MDM 5.0

Security Management Certificate Policies to comply with Android 4.3 MDM 5.0

Wi-Fi Management WiFi Network White List MDM 5.0

Wi-Fi Management Configure Wi-Fi proxy settings MDM 5.0

Wi-Fi Management Clear WifiSSIDs from Blacklist and whitelist MDM 5.0



Policy Group

Blacklist permissions & Whitelist permissions for specific

applications

MDM 5.0


Kiosk Mode Policy Group Disable Kiosk Mode MDM 5.0


Kiosk Mode Policy Group Clear Notification bar MDM 5.0

Kiosk Mode Policy Group Disable AirCommand MDM 5.0

Kiosk Mode Policy Group Disable AirView MDM 5.0

Kiosk Mode Policy Group Disable SmartClip MDM 5.0

Device Account Policy Group Account Addition whitelist MDM 5.0

Device Account Policy Group Account Removal whitelist MDM 5.0

Device Account Policy Group Clear accounts from AdditionBlacklist and

AdditionWhitelist

MDM 5.0

Device Account Policy Group Clear accounts from RemovalBlacklist and

RemovalWhitelist

MDM 5.0

Device Settings Management Start NFC MDM 5.0

Enterprise Single-Sign-On Policy

Group

Set Application Whitelist MDM 5.0


Group

Delete Application Whitelist MDM 5.0


Group

Get Application Whitelist State MDM 5.0


Group

Set Customer Information MDM 5.0


Group

Force user to re-authenticate MDM 5.0


Group

Unenroll user from SSO service. MDM 5.0


Group

Push data to SSO service. MDM 5.0


Group

Request setup SSO service MDM 5.0


Group

Check if SSOPolicy service is ready MDM 5.0

Password Policy Group Enable/disable the biometric authentication MDM 5.1

Application Control Policy Group Get the application UID MDM 5.1

Application Control Policy Group Install an existing application package. MDM 5.1

Application Control Policy Group Application USB access user permission exception MDM 5.1

Wi-Fi Management Get the keystore engine set in the MDM Wi-Fi profile MDM 5.1

Security Policy Group Enable Reboot Banner MDM 5.2

Kiosk Mode Policy Group Allow Air Command Mode MDM 5.2

Kiosk Mode Policy Group Allow Air View Mode MDM 5.2

Restriction Policy Group Allow Smart Clip Mode MDM 5.2

Password Policy Group Get Supported Biometric Authentications MDM 5.2

Generic SSO Policy Group Configure SSO on Device MDM 5.2


4 New features and enhancements

Constants

The following are the list of constants which have been developed in MDM 5.3

Class Constant MDM

Version

ApplicationPolicy

ACTION_PREVENT_APPLICATION_STOP

EXTRA_ERROR_TYPE

EXTRA_ERROR_REASON

EXTRA_ERROR_CLASS

MDM 5.3

EnterpriseDeviceManager EnterpriseSdkVersion.ENTERPRISE_SDK_VERSION_NONE MDM 5.3

API / Constants documentation upgrades

The following are the list of APIs/Constants where documentation have been updated in MDM 5.3


Version Kiosk Mode/Restriction

Policy Group

Shared resources user scope APIs impact on Android L:

KioskMode .hideSystemBar()

KioskMode .allowTaskManager()

KioskMode .allowHardwareKeys()

KioskMode .hideStatusBar()

KioskMode .hideNavigationBar()

RestrictionPolicy.setHomeKeyState()

RestrictionPolicy.allowPowerOff()

RestrictionPolicy.allowStatusBarExpansion()

MDM

2.0/3.0

Restriction/Location/Kiosk

Policy Group

Shared resources user scope APIs impact on Android L:

RestrictionPolicy.setLockScreenState()

RestrictionPolicy.allowSettingsChanges()

RestrictionPolicy.allowWallpaperChange()

LocationPolicy.setLocationProviderState()

LocationPolicy.setGPSStateChangeAllowed()

KioskMode.allowMultiwindow()

MDM

2.0/3.0/4.0

/5.0


Deprecated APIs

The following are the list of APIs have been deprecated in MDM 5.3

Policy Group Policy MDM Version

Firewall Policy Group

FirewallPolicy.setDNSPerApp()

FirewallPolicy.getDNSPerApp()

FirewallPolicy.removeDNSForApp()

FirewallPolicy.clearDnsPerApp()

MDM 5.0

Enhanced APIs / Constants

The following are the list of APIs/Constants have been enhanced in MDM 5.3


Version

Firewall Policy Group

Hostname or IP address exclusion:

FirewallPolicy.setGlobalProxy()

MDM 5.0

Security Policy Group

Changed to User Scope:

SecurityPolicy.KEYSTORE_DEFUALT

MDM 5.0


5 Issues fixed

APIs depcated and not supported

The following are the list of APIs which have been deprecated and not supported in MDM 5.0:


Version

Kiosk Mode Policy Group

Disable AirCommand

KioskMode.allowAirCommandMode()

KioskMode.isAirCommandModeAllowed()

MDM

5.0


Disable AirView

KioskMode.allowAirViewMode()

KioskMode.isAirViewModeAllowed()

MDM

5.0


Disable SmartClip

KioskMode.allowSmartClipMode()

KioskMode.isSmartClipModeAllowed()

MDM

5.0

Constants deprecated and not supported

The following are the list of constants which have been deprecated and not supported in MDM

5.0:

Class Constant MDM

Version

BasePasswordPolicy BasePasswordPolicy. PASSWORD_QUALITY_FINGERPRINT MDM 5.0

APIs description, sample code enhancement

Not applicable at time of release.


6 Known issues Not applicable at time of release.

Date post:	12-Jul-2020
Category:	Documents
Upload:	others
View:	28 times
Download:	1 times

KNOX Standard SDK - Samsung Knox · KNOX Standard and KNOX Premium SDKs: Samsung KNOX™ Standard...

Documents