[Galaxy Note 3 Q&A, Help & Troubleshooting] yolav:
At first, get some informations! Know your opponent!

What is KNOX? Where is it from? What is its purpose? :confused:

I cant post links yet but here some information :

Samsung KNOX meets the	requirements for	FIPS(Federal Information Processing Standard) 140-2 Level 1 certification for both DAR(Data-at-Rest) and DIT(Data-in-Transit)

Samsung KNOX for Government and High Security Use

1. Boot Attestation

2. Smartcard - CAC (U.S. Common Access Card) Support

3. Certification & Validations

1. Boot Attestation

Samsung KNOX technology uses a Secure Boot protocol that requires the device boot loader, kernel, and

system software to be cryptographically signed by a key whose root of trust is verified by the hardware

.

Commercially sold Samsung devices will have Samsung-issued root certificates.

Government deployments generally require that government agencies be the custodian of the entire mobile

device firmware including the root certificate . Samsung KNOX technology allows additional roots of trust

to be provisioned at the factory. One of these additional roots of trust is reserved for government agencies

or their trusted partners to create their own chain of trust.

Note that only one root of trust can be active, and all commercially sold devices already have the Samsung

root of trust activated. To enable government deployments, Samsung KNOX technology provides tools to

government agencies to perform a one-time change of the root of trust from Samsung to the appropriate

government agency (or its trusted security partner).

This customizable aspect of Secure Boot is unique to Samsung KNOX and gives government entities con-

trol over their own appoval and chain of trust. The Government can nominate one of its trusted security

partners to generate audited, signed firmware images for use on Samsung KNOX device.

2. Smartcard - CAC Support

The United States Department of Defense (US DoD) has mandated the use of Public Key Infrastructure

(PKI) certificates for employees to “sign” documents digitally, encrypt and decrypt email messages, and

establish secure online network connections.

In compliance with DoD regulations, Samsung KNOX allows the PKI certificates to be stored securely on

the mobile device (software certificates) or be retrieved from a CAC(U.S. Common Access Card) (hardware certificates).

Samsung KNOX provides applications access to the hardware certificates on the CAC via standarts-

based Public Key Cryptography Standards (PKCS) APIs. This enable the use of the CAC card by the

browser, email application, and VPN client as well as other custom government applications.

In addition, Samsung KNOX allows the lock screen to be secured by the CAC card, providing an additional

level of device security

3. Certification & Validations

Issued by the National Institute of Standards and Technology (NIST), the Federal Information Processing

Standard (FIPS) is a US security standard that helps ensure companies that collect, store, transfer, share

and disseminate sensitive but unclassified (SBU) information and controlled unclassified information (CUI)

can make informed purchasing decisions when choosing devices to use in their workplace.

Samsung KNOX meets the requirements for FIPS(Federal Information Processing Standard) 140-2 Level 1 certification for both data-at-rest (DAR)

and data-in-transit (DIT). The Samsung KNOX support for DIT covers the following:

- Web browser (HTTPS)

- Email (S/MIME)

- IPSec VPN

... I would tell more but if ever you want to read the whole 14 pages document you can easily google it and search for Samsung_KNOX_whitepaper_An_Overview_of_Samsung_KNOX-0.pdf :good: