IBM Support

Samsung Knox license management

Release Notes


Samsung announced the deprecation of legacy ELM and KLM keys by the end of December 2020 in favor of Knox Platform for Enterprise (KPE) key. Android Enterprise customers are recommended to switch to the Knox Platform for Enterprise (KPE) key with the Knox SDK at the earliest. MaaS360 adds support for three KPE license variants: KPE Standard (free), KPE Premium (paid), and Backwards—compatible key. MaaS360 also removes the Configure Samsung Knox License for Samsung devices field in the Device Enrollment Settings workflow to prevent administrators from activating legacy license keys.


License Device matrix License activation
KPE Standard DA and DO. Knox v2.8 and later Automatically deployed and activated via agent upgrade/enrollment.
Backwards—compatible Knox v2.7.1 and earlier Automatically deployed and activated via agent upgrade/enrollment.
KPE Premium PO and DO KPE Premium (paid) license key must be deployed through MDM policy > OEM Settings. Overrides all the existing licenses that are already activated on the device.


  • If the MaaS360 agent does not receive the KPE key, it will activate the ELM key.
  • The older MaaS360 agents (7.0 and earlier) do not support KPE keys.
  • If the key is removed from Security policies, users will be locked out of the Work profile.
  • Customers cannot downgrade from the KPE Premium key to KPE Standard key.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSYSXX","label":"IBM MaaS360"},"ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version(s)","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
09 March 2021