[AT&T Samsung Galaxy S 4 Q&A, Help & Troubleshootin] scott14719:
Has anyone actually tried downloading an app from the "KNOX store" and seeing if it works? The apps that run through KNOX (after it is enabled by the System Administrator / IT Manager) need to be made for KNOX. There are many apps already available that are supposed to work via KNOX at the KNOX store.

https://www.samsungknox.com/en/apps

Here is the full site so you guys can get up to speed on what "KNOX" does...

https://www.samsungknox.com/en

However, if you are not a business owner / IT Manager, I don't see how useful it would be...

https://www.samsungknox.com/en/overview/getting-started

BTW, the 4.3 update completely enables the S4 for use with KNOX, but as you can see by the above links / information, an enabled phone is only part of the equation. So AT&T hasn't disabled anything.

---------- Post added at 10:32 PM ---------- Previous post was at 10:14 PM ----------

A company has to obtain a license from Samsung in order to "enable" KNOX on a device or several devices at once. The system administrator or IT Manager has to notify employees that KNOX is ready to deploy on their device after it is set up on a company / corporate / Organizational level. That is one of the selling points of KNOX is that it allows companies to personalize their own KNOX needs / usage and fully administrate its usage on a per company basis through an MDM service.

From the Samsung KNOX website:

To deploy Samsung KNOX

you will need:

Supported Samsung devices: currently Galaxy S4

Samsung KNOX licenses

A Mobile Device Management service (MDM)

Pricing per device

Our licensing model is flexible to meet the needs of your enterprise. Choose from a low monthly fee per device, an annual license, or contact our sales team to discuss bulk license needs. MSRP before discounts. Support is included.

Per month	Annual

$3.60	$43.20

---------- Post added at 10:42 PM ---------- Previous post was at 10:32 PM ----------

Absolutely correct.

I can really only see one positive possibility from KNOX (unless you use it through your business / organization) and that is the fact that it can be used to set up individual corporate bootloaders. Adam Outler mentioned this back when the S4 was first released and the "bootlaoder unlock" thread was created. If KNOX can be manipulated (without corporate or Samsung interference) to allow a custom bootloader to be added to a device it would essentially create a second bootloader on the phone that could be used in an "unlocked" manner. In other words, a developer could create a key to sign files (similar to that created by a companies IT department that used KNOX custom bootloaders) instead of needing to use Samsung's encrypted key to allow files onto the phone. But this would have to be approached by those that know how to do it (if it can be done). I have a feeling that Samsung issues licensed companies a similar encrypted key to actually enable the ability to add custom bootloaders through KNOX, so it basically would create the same situation we are in now...needing to have a Samsung encrypted key in order to add a custom bootloader. But, you never know, Samsung might have missed something.