Skip Navigation

Create a device SR requirements profile for
Samsung Knox
devices

On
Samsung Knox
devices, you can use
Knox
E-FOTA One (Enterprise Firmware Over the Air) to control when firmware updates from
Samsung
are installed. If your organization uses
Samsung
E-FOTA (end of service July 31, 2022) and you need to migrate to E-FOTA One, see KB 69901.
Samsung Knox
devices that are activated as
Work and personal - full control
(
Samsung Knox
),
Work space only
(
Android Enterprise
fully managed device), and
Work and personal - full control
(
Android Enterprise
fully managed device with work profile) support software restrictions using E-FOTA One.
E-FOTA One is not supported for
Work and personal - user privacy
(
Samsung Knox
) or
Work and personal - user privacy
(
Android Enterprise
with work profile) activation types.
  • In the management console, on the menu bar, go to
    Settings > Licensing summary
    to add an E-FOTA license to
    BlackBerry UEM
    .
  • To use E-FOTA, you must enable the
    Android
    global "Allow OTA updates" rule in the IT policy that you assign to devices.
  1. In the management console, on the menu bar, click
    Policies and profiles > Compliance > Device SR requirements
    .
  2. Click The Add icon.
  3. Type a name and description for the profile.
  4. If you want to allow Android OS update rules to be applied to
    Samsung
    devices, select the
    Apply restriction to all Android devices
    check box.
    The firmware rules you will configure in the following steps take precedence over these rules. Suspend OS updates settings do not apply to
    Samsung Knox
    devices that use E-FOTA.
  5. In the
    Samsung device firmware rules
    section, click The Add icon.
  6. In the
    Device model
    drop-down list, type the device model or select a model from the list.
  7. In the
    Language
    drop-down list, select a language.
  8. In the
    Carrier code
    field, type the CSC code for the wireless service provider.
  9. Click
    Get firmware version
    .
  10. Repeat the previous steps for each firmware rule that you want to add.
  11. When you are done, click
    Add
    .
  12. If you want to schedule a forced update, click
    Schedule
    beside a firmware version that you added. In the
    Schedule forced update
    dialog box, do the following:
    1. In the
      Schedule forced update between
      fields, select a date range when the update must be installed.
    2. In the
      Schedule forced update during the hours of
      drop-down lists, specify when the forced update must be installed.
    If you schedule a forced update, the
    Knox
    device is no longer restricted to the firmware version and you can manually update it if a later version is available.
  13. Click
    Save
    .
  • Assign the profile to users and groups.
  • If necessary, rank the profile.
  • To view a list of users who are running a revoked software release (a software release that is no longer accepted by a service provider), in
    Policies and profiles > Compliance > Device SR requirements
    , click a profile, then click the
    x users running revoked SR
    tab.