Samsung Knox
Knox is Samsung’s platform on Galaxy devices. Knox Vault — on selected models from the Galaxy S21 line — is an isolated subsystem with its own processor and memory. Keys and biometric data do not sit on the processor that runs Android. For the fleet we add three services: enrolment at first boot, management, and preparation for a role. We sell and configure Knox. We are not an official Samsung partner, and we do not claim that every Galaxy has Knox Vault.
World Support Service sells and deploys MDM, including FAMOC and Samsung Knox, and is an Android Enterprise zero-touch reseller. The named mobile-network partner is Play. We are not an official FancyFon or Samsung partner. There is no price list.
01
The fleet enrols for management at first boot, once the identifiers are in Knox. A reseller approved by Samsung for the Knox Deployment Program registers the devices. We set the profile and connect it to the console. Some locks — for example a lock if the device does not enrol within a set time — belong to a Knox Suite plan, not to every box.
02
Samsung’s UEM: policy, apps and remote commands, including lock and wipe of a lost device. On a fully managed device the policy can hold the APN and restrict other networks. Selling this does not make us a Samsung partner.
03
The device is prepared for a role: kiosk, POS terminal, inventory. That is behaviour out of the box, beside Knox Manage policy. Terminal connectivity is on the POS use-case page. This page is about who holds the screen.
Knox Vault runs beside Android’s main processor, with its own memory and a path to durable storage for keys. Samsung describes the subsystem as protecting secrets even if the system on the main processor is compromised, and cites component evaluation against BSI PP0084 at EAL4+ or higher. That is the manufacturer’s component evaluation, not a certificate for your organisation, and not a promise that an older model has the same vault.
Device state and a forced configuration support a conversation about technical measures: what is in the fleet, whether it booted from a trusted enrolment, what can be removed remotely. Knox attestation is a Samsung mechanism, not a certificate of NIS2 or KSC compliance.
Request a proposal APN types and connection types +48 698 355 667
Device count, the role (POS, fleet, scanner, machine) and whether the hardware is company-owned go in the form. Prices are not published.