Overview

Originally, we issued two types of licenses, Enterprise (ELM) licenses to access our enterprise-grade SDKs and Knox (KLM) licenses to access our premium SDK features. These legacy licenses came with a fixed set of API methods that you could call. With Knox 3.0, we are introducing new license key type named Samsung Knox License (SKL). With this license key type, we are providing a more flexible and secure entitlement model, which addresses our partners’ requirements. In simple terms, entitlement can be referred to as ‘right of use’. With the new entitlement-based license model, our license management now provides specific rights or permissions to use certain features of a Knox SDK.

To accommodate this flexible entitlement concept, the SKL key combines permissions from various types of keys into single key, enabling simple license activation process. Also, to enhance security and avoid misuse of your Samsung Knox License, you can now register the app information while requesting the Samsung Knox License. Registered app information will be verified during the license activation process, and thus, we can secure the use of issued licenses.

The new entitlement-based license model provides the following features:

  • Better security - You need to register information about the app that will use the new Samsung Knox License. Only the registered apps will be able to activate the new Samsung Knox License.
  • Flexible permissions declaration - You can select permissions which you want to use only by declaring them in your app Androidmanifest.xml. This approach is aligned with Google’s method for declaring permissions.
  • Single convenient license key - You can now activate one license key and access multiple permission groups. 

Through the new licensing entitlement model, you will be able to request a new Samsung Knox License with specific permissions to use selected features from the Samsung Knox SDK.

Requirements

Enroll to generate license key

How it works

    1. Get Development license key - Through this SEAP portal, you can get a Development Samsung Knox License key. For security purposes, you can identify the apps that will use this key by providing their app package name and public key hash. To do this, you either upload the app (and let the SEAP portal extract the package name and hash) or manually enter the information yourself.
    2. Grant key - The SEAP Portal requests a license from a Samsung License Server, then displays your license through your SEAP license dashboard.
    3. Declare the permissions & activate the license - Declare the permissions used by your app in its Android Manifest file. In the app, activate your Development license by calling the API method KnoxEnterpriseLicenseManager.activateLicense.
    4. Validate License - What happens next depends on the device, specifically which Knox platform it is using:
      • Knox v3.0 or later - A new License Agent on the device sends your Samsung Knox License request to a Samsung License Server, asking for the permission declared in the Android manifest file.
      • Knox v2.8 or later - A License Agent on the device sends your Samsung Knox License request to a Samsung License Server, asking for permission predefined in license key.
      • Knox v2.7 or earlier - The previous License Agent forwards license requests to the Samsung License Server only when you activate an Enterprise (ELM) license, using EnterpriseLicenseManager.activateLicense. You activate both the new Samsung Knox License key as well as a backwards-compatible ELM key, which has no permissions but is needed to trigger a request for Samsung Knox License permissions.

      The Samsung License Server - makes sure that the app activating a license was previously registered, determines what permissions that license has, then sends this information to the License Agent on the device. Your app can now execute the API methods that it was granted permission to use.

    1. Get Production license key - When you are ready to release your app, you need a Production Samsung Knox License. How you get one, depends on whether your app uses:
      • Free Knox Standard features only - Get a Production Samsung Knox License through this SEAP portal.
      • Paid Knox Premium or Customization features - An authorized Knox reseller or EMM vendor gets Production licenses through the Global Samsung Business Network (GSBN). They do so on behalf of each enterprise that will be using the app, so that each license activation can be tracked and billed. Currently, Production ELM and KLM licenses are still used for paid features, but soon a Production Samsung Knox License will be used.

      You can continue to use the legacy ELM and KLM keys that are already issued; they will still work in the new licensing entitlement model. We will even continue issuing new ELM keys, in the event you have devices with Knox 2.7 or earlier but don’t want to change your app source code to activate the backwards-compatible ELM key along with the new Samsung Knox License key. We will eventually stop issuing the legacy ELM and KLM keys and instead provide only the new Samsung Knox License with a backwards-compatible ELM key.

    Next steps

    Back to About License keys