XenMobile supports and extends both Samsung for Enterprise (SAFE) and Samsung KNOX policies. SAFE is a family of solutions that provide security and feature enhancements for business use through integration with mobile device management solutions. Samsung KNOX is a solution within the SAFE program that provides a more secure Android platform for enterprise use.
You must enable the SAFE APIs by deploying the built-in Samsung Enterprise License Management (ELM) key to a device before you can deploy SAFE policies and restrictions. To enable the Samsung KNOX API, you also need to purchase a Samsung KNOX license using the Samsung KNOX License Management System (KLMS) in addition to deploying the Samsung ELM key. The Samsung KLMS provisions valid licenses to mobile device management solutions to enable them to activate Samsung KNOX APIs on mobile devices. These licenses must be obtained from Samsung are not provided by Citrix.
For devices running Android 4.3 and later, you must deploy Worx Home along with the Samsung ELM key to enable the SAFE and Samsung KNOX APIs. Devices running Android 4.2 or earlier require Worx Home for Samsung to successfully deploy SAFE policies. You can verify that the SAFE APIs are enabled by checking the device properties. When the Samsung ELM key is deployed, the Samsung MDM API available setting has a value of True.
Note: With versions of XenMobile prior to XenMobile 8.6, SAFE policies can be deployed to devices running Android 4.2 or earlier with Worx Home for Samsung without deploying the Samsung ELM key. However, the Samsung ELM key is required for devices running Android 4.3 and later, and this key is only available with XenMobile 8.6 and later.
If you upgraded from a previous version of XenMobile, you must manually create the configuration to generate the Samsung ELM key.