Samsung

Samsung is one of the world’s largest electronics manufacturers, which offers smartphones built for business with large screens, long battery life and Samsung’s Knox security suite preinstalled. Samsung and Codeproof worked closely together to develop a state-of-the-art cloud-based enterprise mobility management solution. Codeproof uses the Knox platform to secure and manage various Samsung devices and offers a range of features.

Knox Mobile Enrollment (KME)

KME

Knox Mobile Enrollment (KME) is a free service from Samsung to enroll Samsung mobile devices into mobile device management (MDM/EMM) software. It is the recommended tool when an enterprise requires bulk device enrollment with little configuration variance amongst the devices deployed.

App Restrictions & Whitelisting/Blacklisting Policies

Block users from changing device settings and configurations, installing apps, accessing web browsers, and task manager, among other features per custom organizational policies for whitelist/blacklist.

Samsung and Codeproof have worked together closely to develop a state-of-the-art cloud-based enterprise mobility management system.2 For more information, visit our KME page .

OEMConfig

OEMConfig is a set of device configurations offered by OEM (Original Equipment Manufacturers) as an Android app. These configurations are called managed configurations used by EMM providers to remotely restrict and control fully managed or company owned devices. The Codeproof platform is integrated with Samsung’s OEMConfig. For more information, visit our OEMConfig page.

OEMConfig
Application Management

Application management

Enforce mobile app blacklisting and whitelisting to ensure the devices connected to your corporate network do not run apps that pose security and productivity challenges.

Mobile Expense Management

Gain visibility into cost-related information such as call usage, SMS usage, and call duration times, among others. Using the cellular mobile policy enforcement solution, IT administrators can disable data roaming and tethering and limit the number of SMS’ that users can send.

Mobile expense management
Remote Configuration

Remote configuration

Apply secure configuration distribution of Exchange ActiveSync, Cisco AnyConnect, IMAP, and POP3 email, WiFi, Access Point Name (APN), web proxy, and other settings from across the cloud network.

Security management

Remotely provision security policies like password settings, data encryption enabling/disabling, certificate installation/termination, and firewall settings.

Security management
Inventory monitoring

Inventory monitoring

Achieve complete visibility into device information like total memory usage, installed applications, and OS version.

Kiosk mode

Simplify the user interface by locking down the usage of a device to a single app or small set of apps and prevent users from enabling other apps or performing other actions. Also, disable hardware keys like “power off,” and remove the notification bar to enhance productivity.

Kiosk
Location-based service

Location-based service

Identify the location of missing devices, enforce territorial boundaries, enforce policies, wipe device data to protect confidential information on stolen or lost devices, and access/export location history data (including physical addresses) from the Codeproof console.

Secure web browser

Restrict access to internet and specific website content based on website URL and keywords. Increase privacy and security by blocking advertisements.

Secure web browser
App deployment and management

App deployment and management

Silently deploy or install apps on all enrolled devices simultaneously. Silently remove installed apps remotely from the cloud console without any security prompt in the device. Deploy enterprise APKs remotely from the Codeproof cloud console.

Credentials and certificate management

Deploy and manage security certificates centrally from Codeproof cloud console.

Credentials and certificate management
Helpdesk

Helpdesk enabled

Remotely troubleshoot helpdesk related issues on various mobile devices.

Where teams deploy Samsung + Codeproof

Codeproof manages Samsung's full Android Enterprise lineup - Galaxy flagship and mid-range phones, Tab tablets, XCover rugged smartphones, and Tab Active rugged tablets. Combined with Knox Mobile Enrollment (KME) for zero-touch and OEMConfig / Knox Service Plugin (KSP) for deep controls, Samsung devices fit every business profile.

Warehouse, logistics & field service

Galaxy XCover and Tab Active devices in inventory scanning, route-management, and field-tech workflows. OEMConfig pins hardware buttons to scan, PTT, or app-launch actions.

Retail & mPOS

Galaxy Tab Active POS terminals locked to a single app in kiosk mode. Samsung Knox containerization keeps payment-card data isolated for PCI-DSS alignment.

Government & public safety

Samsung Knox is approved on the US Department of Defense Approved Products List. Use with CJIS, FIPS 140-2, and NIST 800-53 baselines.

Healthcare

Galaxy Tab Active for shared clinician devices and Galaxy phones for nurse / EMS staff. HIPAA-aligned encryption, Knox container for EHR apps, selective wipe at shift change.

K-12 & higher education

Samsung Galaxy Tab S series and Chromebook deployment in 1:1 student programs. Combine with CIPA-aligned content filtering.

BYOD with Knox containers

Samsung Knox secure container separates work and personal data on employee-owned Galaxy devices - stronger than the standard Android work profile.

Samsung MDM FAQs

Which Samsung devices does Codeproof support?
All Samsung devices that support Android Enterprise: Galaxy S / Note / A / M / F series phones, Galaxy Tab S / A series tablets, Galaxy XCover rugged phones, and Tab Active rugged tablets. Knox features require Knox-licensed Samsung models (most modern Galaxy / Tab / XCover devices).
What's the difference between Samsung Knox, KSP, and KME?
Samsung Knox is the hardware-rooted security platform built into Samsung devices. Knox Service Plugin (KSP) is the OEMConfig app that exposes Samsung-specific controls to MDM. Knox Mobile Enrollment (KME) is Samsung's free zero-touch enrollment service. Codeproof uses all three.
How does Knox containerization compare to Android work profile?
Android work profile is the standard cross-OEM containerization. Samsung Knox container is Samsung-specific and provides additional hardware-rooted isolation, separate encryption keys, and tighter app-data boundaries. For Samsung-only fleets in regulated industries, Knox containers add a security layer.
Can I use Codeproof if I have a mix of Samsung and non-Samsung Android?
Yes. Codeproof manages Samsung alongside Pixel, Sonim, Kyocera, Zebra, Honeywell, LG, and other Android OEMs from one tenant. Samsung devices get OEMConfig / KSP-specific policies on top of standard Android Enterprise.
Is Knox required to use Codeproof on Samsung?
No. Standard Android Enterprise works on any Samsung device. Knox unlocks additional Samsung-specific capabilities (deep hardware controls, KME zero-touch, Knox containers, attestation) but isn't required.

Maximize employee productivity through Codeproof