com.samsung.android.aircommandmanager Copy

A Samsung platform component that devices report under the terse label "FACM". Samsung names the package in its own Knox Common Criteria mode application lists, which pair that label with com.samsung.android.aircommandmanager, so the package and its label are Samsung-confirmed. Samsung does not expand "FACM" anywhere we could find, so this note does not guess at it. It is signed with a Samsung framework-signing certificate and has no launcher entry in our sample. The package name points at Air command, which Samsung does document: it describes Air command as a customisable menu of shortcuts to S Pen features such as creating a note, Smart select, Screen write and AI select, opened by removing the S Pen or by hovering it and tapping the floating icon. Samsung's own guidance frames this as a feature of "select Galaxy devices using S Pen". That framing sits awkwardly with where the package actually ships. Samsung's certified lists record it on the Galaxy Z Flip 5G and the Galaxy S20 5G, and this database records it across a wide spread of models including budget A-series and M-series handsets. In other words the package is observed far more broadly than a feature scoped to select S Pen devices would suggest. Why it is present on the models recorded here, and what it does on each of them, could not be sourced, and no reading of that is asserted here. Its recorded permissions are broader than Samsung's description of Air command accounts for. SYSTEM_ALERT_WINDOW fits a menu that floats over other apps, and storage access fits capturing and saving screen content. Beyond that it is recorded with the full Bluetooth set including BLUETOOTH_PRIVILEGED, with NFC, with Wi-Fi state and CHANGE_WIFI_STATE, with fine and coarse location, and with REBOOT and DEVICE_POWER. Nothing Samsung publishes about Air command explains the NFC, reboot or power permissions, and we did not find a source for them. Version note: Samsung's certified lists record version 1.2.41 on the Galaxy S20 5G (Android 10), 1.2.61 on the Galaxy Z Flip 5G (Android 11) and 1.2.65 on the Galaxy S21+ 5G (Android 11), while our sample runs from 1.5.25 to 2.3.05 across target SDKs 31 to 36. So the certified Android 10 and 11 examples all sit on a 1.2.x line while this database also records builds up to 2.3.05. Samsung publishes no changelog, and neither when the 2.x line appeared nor what it changed could be sourced. For Android Enterprise, EMM and kiosk fleets the relevant property is that this component can draw over other apps, which is worth a decision on a dedicated device that is meant to show one application and nothing else. We found no source making it an enrolment, policy or compliance dependency. If this package does back Air command on a given S Pen model, disabling it could affect that menu and the shortcuts hanging off it, so confirm the relationship on the device rather than assuming it. On the other models recorded here we cannot say what, if anything, removing it affects, which is precisely why it is rated with caution: test it on one device of each model in your fleet before rolling a change out.

• Use and manage the Air command menu on your Galaxy device - Samsung US Support →
• Use and manage the Air command menu on select Galaxy devices using S Pen - Samsung CA Support →
• What can I do with the Air Command feature? - Samsung UK Support →
• Galaxy S21+ 5G (SM-G996B, Android 11) Common Criteria mode application list - Samsung Knox Documentation →
• Galaxy Z Flip 5G (SM-F707B, Android 11) Common Criteria mode application list - Samsung Knox Documentation →
• Galaxy S20 5G (SM-G981N, Android 10) Common Criteria mode application list - Samsung Knox Documentation →
• Package provenance for com.samsung.android.aircommandmanager - Android System App Database →

• Signed by the device maker's own signing key (Samsung), so it is an OEM preinstall, but 2 different certificates appear across the fleet, so OEMs ship their own builds of it. It also signs the Android framework, so it is a platform-level key on its device(s). Inferred from the certificate appearing only on Samsung devices (508 packages, 10196 observations).
• Its largest observed manifest declares 20 permissions: 7 runtime (user-granted), 4 signature or system-level, 8 install-time and 1 vendor or uncatalogued.
• Never reported as user-facing, so it runs as a background or system component rather than an app the user opens.