12 Jul 2019

IMPORTANT NOTICE: Changes to Knox Remote Control

By Samsung Knox News

The Knox Remote Control behavior will change in Samsung devices released from September 2019 onwards.

Enterprises use Knox Remote Control to support and troubleshoot mobile device issues, by enabling IT Admins to remotely view device screens from a web console.

What is the change?

Starting with devices released from September 2019 onwards, the Knox Remote Control APIs will no longer capture screens that app developers have marked secure using the Android WindowManager FLAG_SECURE setting.

Content marked with this flag is prevented from appearing in screenshots or from being viewed on non-secure displays.

This change does not mean Knox Remote Control APIs are being deprecated; they will still work as expected on screens that are not tagged as FLAG_SECURE.

Why are we making the change?

Google informed the Samsung Knox team that the existing Knox Remote Control APIs do not respect the AOSP Compatibility Definition Document (CDD) requirements of FLAG_SECURE, specifically advising us to treat the content of the window as secure, preventing it from appearing in screenshots or from being viewed on non-secure displays. Google strongly requested that we change our current implementation.

When will this change take effect?

The change will be made in all firmware of new devices to be released from September 2019 onwards. The change will also be applied to firmware updates on the rest of our in-market devices as per their regular Maintenance Release schedules. Some devices might not be affected, depending on their product release plans.

Recommendation

If you are using our Knox Remote Control APIs, we recommend that you work with your enterprise app developers to make necessary changes to their apps so that they can be remotely viewed for enterprise support and troubleshooting purposes.

Enterprise app developers can either:

  • remove FLAG_SECURE from content that does not need to be marked secure
  • conditionally mark the content secure depending on whether the content is displayed in an enterprise context

Additional resources and support

For details about API usage, consult the API references. For:

For technical support:

  • SEAP Developers can use our Developer Forum
  • SEAP Partners can sign into their SEAP account to access their Dashboard and get 1:1 support through our ticketing system

If you have any concerns about this change, please feel free to contact us