Important Update for Samsung Device Users on Android 15 and Above
An important change has been introduced for Samsung devices running Android OS 15 that affects the use of remote control features.
From Android 15 onward, remote control functionality through the Knox SDK is being restricted to devices that are managed via Android Enterprise enrollment through an EMM solution. This change has been implemented to enhance device security and ensure the privacy of Samsung users is preserved.
No Action Required for MaaS360 Remote Support Users
For customers using IBM MaaS360’s Remote Support app, no additional steps are needed. Compatibility with the new Samsung requirements will be included in MaaS360 Agent version 9.00, which is expected to be released by the end of June 2025.
Use of Other Remote Access Apps
If other remote access tools are being used for troubleshooting, permissions will need to be granted manually. This can be done through Samsung’s Knox Service Plugin (KSP) app using the OEMConfig workflow.
To assist with configuration, a step-by-step guide has been included below (for Android Enterprise Device Owner mode of enrollments)
- Log in to the MaaS360 Portal. Go to the Android OEMConfig section under the Security tab and click Add Configuration.
- Enter a suitable name and select Knox Service Plugin option and click Next.
- Go to Device-Wide Policies and click Configure as shown.
- Navigate to Enable device policy controls, click Configure, and set the value to Yes.
- Scroll down to Application management policies and click Configure.
- On the next screen, navigate to Enable application management controls, click Configure, and set the value to Yes.
- Scroll further to Enable Add applications for accessing the Knox SDK, click Configure, and set the value to Yes.
- Return to the main OEMConfig screen by clicking the Knox Service Plugin link as shown.
- Scroll down to Add applications for accessing the Knox SDK and click Configure.
- When the new screen opens, navigate to the first entry and click Configure.
(Note : As many apps as required can be added here. This guide shows the process just for one app which can be repeated)
- Fill in the following details:
- Package Name: Click Configure and enter the package name of the remote access app.
- Signature: (Optional) You can leave this blank unless you know the app’s signature.
- Scope: Click Configure and select REMOTE CONTROL from the dropdown menu.
- Review all the configured attributes to ensure everything is correct.
- Click Save as draft, then Next, and finally Publish to the appropriate devices or groups.
(Note: If you're using the Knox Service Plugin (KSP) app for the first time, make sure to check Distribute Application so the app is deployed to devices.)