Skip Navigation

Create a device SR requirements profile for
Samsung Knox

Samsung Knox
devices, you can use
E-FOTA One (Enterprise Firmware Over the Air) to control when firmware updates from
are installed. If your organization uses
E-FOTA (end of service July 31, 2022) and you need to migrate to E-FOTA One, see KB 69901.
Samsung Knox
devices that are activated as
Work and personal - full control
Samsung Knox
Work space only
Android Enterprise
fully managed device), and
Work and personal - full control
Android Enterprise
fully managed device with work profile) support software restrictions using E-FOTA One.
E-FOTA One is not supported for
Work and personal - user privacy
Samsung Knox
) or
Work and personal - user privacy
Android Enterprise
with work profile) activation types.
  • In the management console, on the menu bar, go to
    Settings > Licensing summary
    to add an E-FOTA license to
    BlackBerry UEM
  • To use E-FOTA, you must enable the
    global "Allow OTA updates" rule in the IT policy that you assign to devices.
  1. In the management console, on the menu bar, click
    Policies and profiles > Compliance > Device SR requirements
  2. Click The Add icon.
  3. Type a name and description for the profile.
  4. If you want to allow Android OS update rules to be applied to
    devices, select the
    Apply restriction to all Android devices
    check box.
    The firmware rules you will configure in the following steps take precedence over these rules. Suspend OS updates settings do not apply to
    Samsung Knox
    devices that use E-FOTA.
  5. In the
    Samsung device firmware rules
    section, click The Add icon.
  6. In the
    Device model
    drop-down list, type the device model or select a model from the list.
  7. In the
    drop-down list, select a language.
  8. In the
    Carrier code
    field, type the CSC code for the wireless service provider.
  9. Click
    Get firmware version
  10. Repeat the previous steps for each firmware rule that you want to add.
  11. When you are done, click
  12. If you want to schedule a forced update, click
    beside a firmware version that you added. In the
    Schedule forced update
    dialog box, do the following:
    1. In the
      Schedule forced update between
      fields, select a date range when the update must be installed.
    2. In the
      Schedule forced update during the hours of
      drop-down lists, specify when the forced update must be installed.
    If you schedule a forced update, the
    device is no longer restricted to the firmware version and you can manually update it if a later version is available.
  13. Click
  • Assign the profile to users and groups.
  • If necessary, rank the profile.
  • To view a list of users who are running a revoked software release (a software release that is no longer accepted by a service provider), in
    Policies and profiles > Compliance > Device SR requirements
    , click a profile, then click the
    x users running revoked SR