3. iOS & other Android devices KNOX EMM (Client) Cloud Service Active Directory integration (Optional) Mobile Device & App Management MDM IAM Samsung Device KNOX EMM (Client) IT Admin (Web Access) SaaS Applications MDM IAM

4. Samsung Enterprise GW 1) Samsung Enterprise Gateway 2) Universal MDM Client (Cloud Server) Enroll Device - Accept unified EULA - EMM agent D/L Register Profile UMC Hidden application preloaded in Samsung Device SEG Cloud server that communicates with MDM server

5. Samsung KNOXAndroidiOS Remote wipe Password reset Create container Lock container Enable FIPS VPN Container account whitelist Email profiles (EAS, POP, IMAP) Attestation verification more Remote wipe Password reset Power off Device reset more Remote wipe Password reset Rooted devices Camera use Lock screen notification view Fingerprint iCloud backup VPN setting more Total 205Total 41Total 84 (As of April 23, 2014)

6. Cloud User Identity (No existing directory) KNOX EMM Directory Service KNOX EMM Cloud Directory MSFT Azure Active Directory MSFT on-premise Active Directory AD User Identity (Existing directory) Hybrid User Identity (New + Existing directory) Sign in Keep me signed in Password: ******* Forgot your password? Email/Username: username Sign in (On Device) Samsung iOS KNOX EMM Cloud Directory MSFT Azure Active Directory MSFT on-premise Active Directory Android

7.  Key Features - Locate device, Remote lock/wipe : Self-management for stolen/lost cases - Update policies, Unenroll

9. EmployeeCIO’s high security I’d like the device to have high security control employees’ devices I want to control employees’ devices for security personal device to work I want to use my personal device to work protect my privacy I want to protect my privacy in my mobile

11. Unit: M 0 100 200 300 400 500 600 700 0 20 40 60 80 100 (%) (Source : IDC, 2013)

12. 1. Control and Use of Mobile Devices 2. Information Security 3. Data Retention Policies and Structure 4. Remote Access 5. Staff and Management Training Source : 2011 Top Technology Initiatives (AICPA, 2011) Top Initiatives of IT Managers Attacks Against Mobile Devices by Virgin Media

13. Business Personal

14. TrustZone-based Client Certificate Mgmt. TrustZone-based KeyStore TrustZone-based ODE 1) Real-time Kernel Protection Android Stack Samsung KNOX 35+ IT-policies & 205+ APIs for MDM(Added) Generic VPN/SSO Framework Two-factor Authentication SE for Android Management Service Application Layer Android Framework Android OS Linux Kernel Boot Loader Hardware ARM®TrustZone® KNOX Container KNOX Android Framework SE for Android Trusted Boot Secure Boot TIMA Enhancements in KNOX Workspace

15. - Supports over 530 IT-policies for mobile device management. Included major feature enhancements Container Content sharing Advanced Restriction Certificate Management Policy KeyStore Policy Manage SE for Android for 3 rd party container Container Smartcard Access

16. - Control sharing of “app and data” capability based on their personal preferences. - Limits specified by the enterprise IT administrator. Container MDM Policies Read only Move to other space

17. - Useful to a multi-tasker doing different tasks across different groups within one company - Useful to professionals who offer similar services to different client groups (i.e. doctors and lawyers) - Meet the needs of low end to high end devices