Mobile device management and hardening for units that cannot afford to fail
Blindium deploys and operates Samsung SDS EMM, the NIAP-certified mobility management platform with a DISA STIG, for the Armed Forces, police forces, intelligence services and critical entities. Samsung SDS EMM On-Prem within your isolated network: the console and the data never leave your organisation.
The EMM is the core. VPN and encryption complete the hardening.
The entire operation revolves around device management. Secure communications and encryption are configured, distributed and audited from the same console.
Device management and hardening
Samsung SDS EMM: a single console for Samsung, Android Enterprise and iOS/iPadOS. Policies, applications, compliance, remote support and the complete lifecycle. On-prem with air-gap or in a private cloud under your control.
- Isolated networks with SDS Private Push
- Knox Mobile Enrollment and NFC provisioning
- Kiosk mode, shared device and remote support
- Remote wipe and lock, controlled geolocation
VPN and secure communications
Always-on and per-app VPN managed from the EMM, Knox VPN framework, IPsec/IKEv2 and TLS, and dual-tunnel architectures for classified networks.
- Access to internal resources without exposing them
- Segmentation by application and profile
Data and device encryption
Encryption at rest with Knox DualDAR (two layers), encryption in transit, key and certificate management and validated cryptographic modules.
- FIPS 140-2/140-3 cryptographic modules (as stated by the manufacturer)
- Galaxy devices qualified in CPSTIC by model and current catalogue
- Secure wipe and lifecycle
No coverage, and control still stays inside your network
Devices operate on the last policy received and synchronise when the link returns. No external service decides when a unit can work.
Designed for the Armed Forces and deployed units
Tactical mobility with local control: the EMM server is installed on the network of the unit or agency and continues to manage the devices with no Internet access. Samsung Galaxy Tactical Edition devices, DualDAR dual encryption and mission-based policies.
- Isolated network or intermittent connectivity
- Profiles by unit, mission and classification level
- Remote wipe and emergency mode
- Integration with radio, PTT and third-party secure messaging
On-prem or hybrid: control stays within the organisation
The proposal is based on Samsung SDS EMM (On-Prem) and SDS Private Push: console, data and notifications on the organisation's own infrastructure or in a private or government cloud under its control. Blindium does not propose public-cloud EMM for these environments. The architecture and licences are selected according to the client's requirements and the manufacturer's current documentation.
Own infrastructure and isolated network
EMM server, database and policy services in the organisation's data centre or in a classified enclave, with no Internet access. SDS Private Push replaces public push services and firmware is distributed from inside. This is the reference model for defence, police and intelligence.
Private or government cloud
Console and data on your own infrastructure, with the Knox support services consumed from the cloud through a controlled gateway: firmware distribution with Knox E-FOTA and Knox Asset Intelligence. Clear segmentation of what leaves the organisation and what does not.
The initial assessment determines the model. In defence, police and intelligence the usual pattern is an isolated network for operational units and, where appropriate, hybrid mode for the rest of the organisation: different configurations, a single console and the data always inside.
Start from your situation
I am in defence, police or a critical entity
Sovereign architecture, isolated network, hardened devices and evidence for the security committee.
Read more PoliceI am a police or public security force
Patrol devices, evidence and police applications with traceability and remote wipe.
Read more IntelligenceI am an intelligence or national security service
Compartmentalisation by unit, devices that leave no trace with third parties and full control over what leaves the organisation.
Read more ChannelI am an operator or integrator
A differentiating EMM layer for public tender proposals and critical accounts.
Read moreCredentials that can be presented to a security committee
Each credential links to its official source on the credentials page. References that appear only in the manufacturer's documentation are marked as such.
* Reference stated by the manufacturer in its public documentation; it does not replace the documentary evidence provided in each project. All certifications and validations cited refer to specific products, versions and modules, which are identified in each proposal.
Where local control is non-negotiable
Defence and police are the priority sectors. The same platform, with different reference architectures depending on each organisation's risk.
Defence and military
Isolated networks, tactical mobility, hardened devices, local control.
Read more
Police and public security
Patrols, evidence with chain of custody, police applications, controlled geolocation and remote wipe.
Read more
Intelligence and national security
Compartmentalisation, isolated network, no trace with vendors and control of classified information.
Read more
Critical infrastructure
Energy, water, transport: field staff with segmented OT networks.
Read more
Samsung SDS EMM in three minutes, told by the manufacturer
Official Samsung SDS video on its on-premise EMM solution for the highest level of security: architecture, Knox and operation on closed networks.
Video · YouTube · Samsung SDS Global
Opens on YouTube in a new tab. This website loads no third-party content and embeds no players.
Reference use cases
Military communications with dual encryption, disconnected platforms, integration with PTT and secure messaging, forces in the field and multi-tenant operation.
When is Blindium the right fit?
Five needs commonly raised by security committees and procurement boards, and how well the solution fits each.
| Need | Why it matters | Fit |
|---|---|---|
| Remain on-prem | SaaS cannot be relied upon for reasons of security, sovereignty or closed networks. | High |
| Samsung + Android + iOS fleet | Samsung and Knox carry strategic weight, but the fleet is mixed. | Very high |
| Sensitive data | Security evidence is required, not promises. | Very high |
| Users in the field | Security without slowing down operations: patrols, units, technicians. | High |
| Justifying the project | The security committee, procurement or management need a clear rationale. | Very high |
Free MDM/EMM continuity assessment (45 minutes)
A technical session with a specialist to review your situation and return an actionable recommendation. No obligation.
- Current architecture and number of devices
- Data criticality and network constraints
- Integration with Samsung Knox and mixed fleets
- Transition options and deployment model (on-prem, private cloud or hybrid)
The assessment is a preliminary guidance session and does not constitute an audit, certification, accreditation, expert report or guarantee of compliance. Its conclusions depend on the information provided and must be technically validated within the scope of each project.