Get in touch with us
We at accompio will be happy to help you.
18.09.2026
Mobile devices have long been an integral part of the working day. Smartphones and tablets are used for communication, applications, access to company data and, increasingly, for specialised processes. Consequently, it is important for businesses to manage their mobile end devices securely, efficiently and as automatically as possible.
Mobile device management (MDM) already allows numerous requirements to be met. However, standard functions sometimes reach their limits, particularly with Samsung devices. This is precisely where Samsung Knox The platform extends existing MDM solutions with additional functions for provisioning, management, firmware control and device configuration.
Silas Weißmann has been working intensively with Samsung Knox for around a year and a half and experiences in customer projects where the platform offers tangible added value. In the expert interview, he explains why Knox is of interest to companies with Samsung devices, which features are particularly relevant, and why it is not about deploying the entire Knox suite all at once.
In the full expert interview speaks Silas Weißmann, IT Systems Consultant at accompio, discussing his experience with Samsung Knox, specific customer projects and the future of mobile device management.
Samsung Knox is a security and management platform from Samsung that provides additional features for managing Samsung devices.
This is not a single product, but a modular system of various solutions. These include, amongst others, Knox Mobile Enrollment, Knox Manage, Knox E-FOTA and the Knox Service Plugin.
The individual components can be used independently of each other. Companies therefore do not necessarily have to use the entire suite, but can select precisely the functions that suit their individual deployment scenario.
With manual enrolment, the person at the device often needs a QR code or further setup steps. This becomes complex when new smartphones are sent directly from the distributor to employees.
With Knox Mobile Enrolment suitable devices can be assigned to an enrollment profile in advance. During initial power-up, the setup process guides the device into the intended MDM. This out-of-box workflow reduces manual steps and supports zero-touch deployment, particularly for larger device inventories and distributed teams.
In the interview, Silas recommends Knox Mobile Enrollment as a sensible starting point for companies using Samsung devices. Other Knox services can also be considered right from the enrolment process.
Another important building block is Knox E-FOTA. This enables companies to centrally and remotely control firmware updates on Samsung devices.
This is particularly relevant because the options for managing firmware updates on Android devices via a traditional MDM are sometimes limited. While companies can push out corresponding notifications and policies to employees, they do not always have the same level of control over the actual installation.
With E-FOTA, updates can be managed more precisely and coordinated, for example, with specific times or device groups.
This turns firmware management from a task that partially lies with the individual employee into a more centrally controlled component of device management.
In a customer project, company-owned Samsung devices were to be used exclusively for business purposes. Signing in with a personal Samsung account was undesirable, as this could enable automatic backups outside of the intended corporate processes, among other things.
The required setting could not be mapped directly in the Microsoft Intune being used. Using the Knox Service Plugin, the team was able to integrate the additional policy into the existing device management and block sign-in with a Samsung account. The example shows how Knox can close a specific functional gap without replacing the established MDM.
Knox Asset Intelligence collects operational data on Samsung devices and prepares it for IT. In the interview, Silas mentions specific questions that can be investigated with it: Is the Wi-Fi coverage in the building sufficient? Are there problems with mobile signal reception? How is the battery performance of individual devices developing?
Such data helps to identify recurring faults and plan the device lifecycle better. The analysis complements policy management with an operational view of the usage and condition of the mobile fleet.
With the increasing prevalence of AI on mobile devices, the control of corresponding functions is also gaining in importance.
For example, Samsung offers various Galaxy AI features directly on its smartphones. Using the Knox Service Plugin, businesses can centrally control certain settings for them.
A relevant question in this regard is: Should AI features be processed locally on the device or may the cloud be involved?
Companies that prefer local processing as far as possible, for example for data protection or security reasons, can specify corresponding settings centrally.
This also makes Knox relevant for a topic that goes beyond classic device management: the controlled use of AI on corporate devices.
Samsung Knox can only be licensed as a complete suite. Costs depend on the duration of the licence, the types of devices used (Enterprise Edition devices or consumer devices) and the number of devices. For a reliable calculation, please contact our experts and have a bespoke quotation prepared.
According to Silas Weißmann, there is no universal Knox architecture. The optimal solution depends on the respective company, the devices used, the existing Mobile Device Management and depends on the specific requirements.
Therefore, a clear strategy is essential: Which devices will be used? How should they be provisioned? Which settings need to be centrally managed? And which processes should be automated?
By answering these questions, you can subsequently make an informed decision about which Knox components are actually required.
„I don't need to use the whole Knox suite. I can pick out the individual products that fit my use case.“
— Silas Weißmann, IT Systems Consultant at accompio
Precisely because the options are extensive, the support of an experienced service partner can be useful. This helps to prevent the multitude of functions from becoming unnecessarily complex or potential from remaining untapped.
accompio supports you in implementing Samsung Knox for your infrastructure so that you can roll out Samsung devices automatically and control firmware updates centrally.
Samsung Knox is increasingly evolving towards greater automation. It should be possible to roll out devices on a larger scale with less manual effort. At the same time, new requirements are emerging due to Zero Trust, AI and additional device categories.
New possibilities are also arising with specialised enterprise devices, such as mobile devices with integrated scanning units for warehousing and logistics. Knox is thus developing into a more comprehensive ecosystem for corporate mobile devices.
Companies that use Samsung devices should first analyse which requirements are currently covered by their existing MDM – and where its limitations lie.
Questions of particular interest include:
On this basis, it is possible to decide which Knox components actually offer added value.
„The ideal solution is the one that has been tailored to me myself.“
— Silas Weißmann, IT Systems Consultant at accompio
For businesses that use Samsung devices, Samsung Knox can be a useful addition to their existing MDM.
Of particular interest in this regard are automated provisioning with Knox Mobile Enrollment, centralised firmware control via Knox E-FOTA, and the additional configuration options of the Knox Service Plugin.
It is not necessary to deploy the entire suite. Rather, the crucial thing is to know your own requirements and selectively implement the appropriate components.
Samsung Knox is therefore less a replacement for existing MDM than a way to selectively extend its functions on Samsung devices.
Silas Weißmann is an IT systems consultant at accompio and, as an expert for Samsung Knox, supports companies in the rollout and management of central firmware updates for Samsung devices.
Samsung Knox is a platform by Samsung for the security and management of Samsung devices. It comprises various components that support businesses with, amongst other things, device provisioning, management and firmware control.
Samsung Knox can complement an existing MDM. Companies do not necessarily have to use the entire Knox ecosystem or an additional full MDM. Individual components such as the Knox Service Plugin can specifically expand existing systems with Samsung-specific functions.
Knox Mobile Enrollment enables the pre-registration of Samsung devices in an MDM system. This allows devices to be sent directly to employees, for example, and integrated into corporate management in a largely automated manner.
Knox E-FOTA enables central control of firmware updates on Samsung devices. This allows companies to manage updates more selectively and centralise the process further.
The Knox Service Plugin enables the control of additional Samsung-specific device settings via an existing MDM system. This allows companies, for example, to configure settings that are not available through the standard functions of the MDM.
