Classic On-Prem
EMM servers in your data centre with DMZ, own PKI and connectors to directory, mail, SIEM and ServiceNow.
Solution
Samsung SDS EMM On-Prem: full control of critical mobility.
Management, security and operation of Samsung, Android, iOS and Windows devices from infrastructure controlled by your organisation.
What it delivers
One console for the whole fleet.
Samsung SDS EMM lets you manage devices, policies, applications, content and compliance in corporate and government environments. Bomontec deploys it with local architecture, integration services and support for the Spanish market.
- Inventory, enrolment and lifecycle of Samsung, Android, iOS and Windows devices.
- Security policies, compliance and feature restrictions by profile.
- Corporate app management, catalogue and remote configuration.
- Lock, remote wipe, reporting and auditing.
- Samsung Knox integration, bulk enrolment (KME, ABM, QR) and workflow automation.
Identity and accessMobile device managementApplication managementContent managementHigh level securityIT orchestration
Architecture
On-Prem, hybrid or air-gap deployment.
The platform installs in your data centre, respecting the existing topology, network segmentation and data governance controls. Changes to firewalls and access paths are minimal.
Controlled hybrid
On-Prem console with selective notification services for highly distributed fleets.
Air-gap / closed network
Operation without Internet using SDS Private Push. For defence, public safety and classified environments.
Devices
DevicesSamsung · Android · iOS · Windows
EMM agent + Knox
Mutual TLS · FIPS 140-2
DMZ
Gateway / Private Push
Internal network
EMM console
Database
PKI / Certificates
Integrations
AD / LDAPSIEMServiceNowKnox (KME, E-FOTA)MTD
For on-premise environments and isolated networks the proposal is based on Samsung SDS EMM (On-Prem) and SDS Private Push. For cloud scenarios, Samsung offers a differentiated cloud product (Knox Manage). Architecture and licences are selected according to customer requirements and the manufacturer's current documentation.
Samsung ecosystem
Native integration with Samsung Knox.
Samsung SDS EMM acts as the hub for Knox solutions, with advanced orchestration for Samsung hardware without losing multi-platform management.
Knox Mobile Enrollment
Automatic bulk enrolment from first boot.
Knox E-FOTA
Firmware version control and update windows.
Knox DualDAR
Dual-layer encryption of data at rest for classified information.
Tactical Edition
Tactical settings built into hardened Galaxy devices.
Secure Settings
Offline local management and one-click STIG policies for deployed teams.
Mission Support Desk
Specialised Samsung SDS support for tactical deployments and integrators.
Functional difference
EMM goes beyond classic MDM.
MDM focuses on the device. EMM extends management to applications, content, identity, security and orchestration, and solves BYOD and COPE scenarios.
| Capability | Classic MDM | Samsung SDS EMM |
|---|---|---|
| Inventory, profiles and policies | ||
| App distribution and lifecycle | ||
| Identity, authentication and access | ||
| Content, containers and data separation | ||
| STIG hardening, encryption and detection | ||
| Orchestration and integration (SIEM, ITSM, Knox) | ||
| Operation in isolated (air-gapped) networks |
IncludedPartialNot covered
Security and compliance
Designed for security, governance and continuity.
The architecture combines a FIPS-validated cryptographic module with mutual TLS authentication. It fits NIS2, Cyber Resilience Act, ENS and GDPR requirements for regulated organisations.
- Data governance and operational traceability within your jurisdiction.
- Natural integration with Samsung devices and Knox.
- High-security, sovereign and controlled-network environments.
- Compatible with resilience and compliance strategies.
NIS2
Cyber Resilience Act
ENS
GDPR
Common Criteria
STIG
How Bomontec deploys it
From assessment to operations in five steps.
Assessment
Current situation, fleet, integrations, constraints and security objectives.
Architecture
On-Prem, hybrid or air-gap design; sizing, HA, PKI and segmentation.
Pilot
4-6 weeks with real use cases, policies and representative user groups.
Deployment or migration
In waves, with assisted re-enrolment and validation by group.
Operations and support
Training, documentation, local support and escalation to Samsung SDS Europe.
Want to see it applied to your environment?
Architecture session or scoped pilot.
We validate Samsung SDS EMM with your devices, your policies and your integrations before you decide.