Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry UEM 12.20
  3. Managing device configurations
  4. Controlling how software updates are installed devices
  5. Create a device SR requirements profile for Samsung Knox devices

Create a device SR requirements profile for
Samsung Knox
 devices

On
Samsung Knox
 devices, you can use
Knox
 E-FOTA One (Enterprise Firmware Over the Air) to control when firmware updates from
Samsung
 are installed. If your organization uses
Samsung
 E-FOTA (end of service July 31, 2022) and you need to migrate to E-FOTA One, see KB 69901.
Samsung Knox
 devices that are activated as
Work and personal - full control
 (
Samsung Knox
),
Work space only
 (
Android Enterprise
 fully managed device), and
Work and personal - full control
 (
Android Enterprise
 fully managed device with work profile) support software restrictions using E-FOTA One.
E-FOTA One is not supported for
Work and personal - user privacy
 (
Samsung Knox
) or
Work and personal - user privacy
 (
Android Enterprise
 with work profile) activation types.
  • In the management console, on the menu bar, go to
    Settings > Licensing summary
     to add an E-FOTA license to
    BlackBerry UEM
    .
  • To use E-FOTA, you must enable the
    Android
     global "Allow OTA updates" rule in the IT policy that you assign to devices.
  1. In the management console, on the menu bar, click
    Policies and profiles > Compliance > Device SR requirements
    .
  2. Click The Add icon.
  3. Type a name and description for the profile.
  4. If you want to allow Android OS update rules to be applied to
    Samsung
     devices, select the
    Apply restriction to all Android devices
     check box.
    The firmware rules you will configure in the following steps take precedence over these rules. Suspend OS updates settings do not apply to
    Samsung Knox
     devices that use E-FOTA.
  5. In the
    Samsung device firmware rules
     section, click The Add icon.
  6. In the
    Device model
     drop-down list, type the device model or select a model from the list.
  7. In the
    Language
     drop-down list, select a language.
  8. In the
    Carrier code
     field, type the CSC code for the wireless service provider.
  9. Click
    Get firmware version
    .
  10. Repeat the previous steps for each firmware rule that you want to add.
  11. When you are done, click
    Add
    .
  12. If you want to schedule a forced update, click
    Schedule
     beside a firmware version that you added. In the
    Schedule forced update
     dialog box, do the following:
    1. In the
      Schedule forced update between
       fields, select a date range when the update must be installed.
    2. In the
      Schedule forced update during the hours of
       drop-down lists, specify when the forced update must be installed.
    If you schedule a forced update, the
    Knox
     device is no longer restricted to the firmware version and you can manually update it if a later version is available.
  13. Click
    Save
    .
  • Assign the profile to users and groups.
  • If necessary, rank the profile.
  • To view a list of users who are running a revoked software release (a software release that is no longer accepted by a service provider), in
    Policies and profiles > Compliance > Device SR requirements
    , click a profile, then click the
    x users running revoked SR
    tab.