Samsung and Microsoft announce “on-device attestation” for Galaxy smartphones: What is it and what it means for users, and more – Times of India

According to Samsung, the device attestation is only available on certain Galaxy smartphones and tablets, specifically those that have “Security by Knox” and run on Android 10 or a later version. It is important to note that the devices must have been running Android 9 or a later version at the time of their release to be eligible for this solution.
What it means for users

Samsung Galaxy devices will offer attestation with added protection from Microsoft Intune to increase security and flexibility. This solution is designed for enterprises and provides an additional layer of protection against compromised devices falsely claiming to be secure and gaining access to sensitive corporate data.
“Samsung is committed to meaningful innovations that are as secure as they are versatile and optimised. As work habits evolve and people are working from virtually anywhere on any device, we are paving the way for the future of enterprise device security and democratising the means for businesses to better protect their information,” said KC Choi, EVP and Head of Global Mobile B2B Team, MX Business at Samsung Electronics.
How does “on-device attestation” works on Samsung Galaxy smartphones
As an enterprise IT manager, you can use Intune to ensure the security of your mobile devices without compromising the user experience. By integrating Samsung devices with this technology, even highly regulated organisations can allow employees to use their own devices for work. This increases productivity, improves user experience, and simplifies administration.
This partnership between Samsung and Microsoft works on both managed and unmanaged devices regardless of ownership. Traditional device attestation requires network connectivity and enrollment into the corporate system, making it mainly applicable to managed devices. However, with mobile hardware-backed attestation, enterprises can verify the device’s integrity and provide access to the corporate system, even if it is unmanaged. This streamlined process also allows employees to safely access the corporate system on their personal devices without additional security measures.