Defence
Military communications with dual encryption
Scenario. Units using Galaxy devices for messaging, maps and situational awareness during operations.
Constraint. The information must not be exposed if the device is lost, nor in transit over uncontrolled networks.
Architecture. On-prem EMM, container encrypted with Knox DualDAR, dual VPN tunnel and certificates from the agency's PKI. Galaxy Tactical Edition with stealth mode.
Outcome. Each device operates with two independent layers of encryption at rest and in transit, managed and audited from a console inside the perimeter.
Defence
Integration with third-party PTT and secure messaging
Scenario. An organisation combining push-to-talk and encrypted messaging applications from different providers on the same device.
Constraint. Each application must reach only its own infrastructure and coexist under a common policy.
Architecture. Distribution and configuration of the applications from the EMM, per-app VPN to each segment and shared hardware restriction policies.
Outcome. Multi-vendor orchestration without exposing one service to the others; changing the provider of one application does not affect the rest of the profile.
Isolated platforms
Task management on disconnected networks
Scenario. Ships, remote facilities or control centres with no Internet connection and dozens of devices for operation and maintenance.
Constraint. There is no Internet access and therefore no public push services or cloud console.
Architecture. Complete installation of Samsung SDS EMM and SDS Private Push on the local network. Internal application repository. Synchronisation with the central node over a scheduled link.
Outcome. Full fleet management (policies, applications, support) with no external dependency, with reconciliation once the link is restored.
Field
Field force with remote support
Scenario. Technical staff with rugged devices for meter reading, inspection and work orders in dispersed areas.
Constraint. Device incidents halt activity and dispatching support staff is not viable.
Architecture. Kiosk mode with the work applications, remote support with screen sharing from the operations centre and firmware updates approved with Knox E-FOTA.
Outcome. Real-time incident resolution without physical presence; version control of firmware and applications across the entire fleet.
Operators
Multi-tenant operation with pre-configured devices
Scenario. An operator or integrator managing mobility for several agencies from a single installation.
Constraint. Strict separation between clients, delivery of ready-to-use devices and per-account dashboards.
Architecture. Multi-tenant Samsung SDS EMM with staging and kitting: devices enrolled and configured before delivery; per-tenant dashboards.
Outcome. A single operations team serves several clients with data isolation and per-account traceability.
