Samsung Knox:
Protection from the chip up

The Knox platform ensures only approved versions of system-critical software are loaded. As the platform is built-in, the trust starts in the hardware, with unique certificates burnt into the chipset of each device.

With these unique certificates, the Knox mobile security platform can verify each piece of software that loads. If verification fails, Knox either records the tampering by flipping a one-time fuse called the Knox Warranty Bit, or prevents further booting. Devices with compromised Knox Warranty Bits cannot use certain Knox features or services, such as Knox Workspace or Samsung Pay.

Rollback prevention ensures that a Samsung device is not downgraded to an earlier, vulnerable software version.

Without Knox security loaded, verified software can still be modified by the user, either intentionally or unintentionally. For example, by downloading a malicious app or malware.

The Knox advanced mobile security platform ensures that system-critical software is not modified once loaded. The enterprise mobile security platform uses a set of technologies to protect the device kernel - the core of the operating system. It also protects applications and their data during runtime to detect malicious attacks as well as monitoring policy settings to quickly isolate any threat.

The Samsung Knox mobile enterprise solution is designed to protect the kernel and prevent rooting. This keeps the system processes and resources protected from hostile access and malware attacks.

For IT admins intending to manage mobile devices with an EMM (Enterprise Mobility Management) solution, Knox-enabled devices can provide you with an attestation, which lets you see if a device has been tampered with or not. Based on that, you can decide if the device can be trusted, and if it is allowed to receive sensitive corporate data.

The Knox enterprise mobile security platform only loads and runs approved system-critical software on a device and can prove this to a third-party when requested.

The final step of the design philosophy is to make the trusted platform ready for enterprise use. This involves giving enterprises complete control and configurability over their data and applications using an EMM solution.

Knox supplies a collection of controls and utilities. Encryption keeps data secure and confidential. VPN allows data to be easily and securely sent and received when working out of office. SSO allows data to be easily accessed with consolidated authentication for apps and data.