Install the client APK

Install the client APK to a group of devices using Knox Configure

To push the Knox E-FOTA Advanced client APK to a group of devices, you can use Knox Configure. If you haven't already, set up your Knox Configure account.

When you've set up your Knox Configure account, follow the steps below.

Create a new profile

1. Launch the Knox Configure Portal through the SamsungKnox.com dashboard.
2. On the left, select Profiles.
3. Click CREATE A PROFILE.

   

4. Select the device you'd like to customize: Select PHONE OR TABLET.

   

   NOTE—Knox E-FOTA Advanced doesn't currently support wearable devices with Tizen OS.
5. Select the Knox Configure edition for the profile: Setup Edition or Dynamic Edition.

   When you have made your choice, click Select.

6. Enter the following Profile Information:

   

   GENERAL INFORMATION—Enter the Knox version number.

   • Knox version number—You can find the version number on the device by going to: Settings > About device > Software info.
   PROFILE—Enter Profile name and Profile description.

   • Profile name—Enter a unique name not already used by an existing profile in your organization.
   • Profile description—(Optional) Provide an extended profile description to further distinguish this profile from others that may contain similar attributes.
   ADDITIONAL TERMS AND CONDITIONS—You can add your own terms and conditions and policy with respect to the device user's use of the device.

   • Title—Enter a text title for your own terms and conditions.
   • Body—Enter the terms and conditions, or policy, the device user must review to use the wearable device.

   NOTE—Ensure you review the EULA before submitting your profile. Once you submit your profile, you cannot edit the EULA, even when deploying profile updates.
   ENROLLMENT SCREEN—Enter details about your company. The device user can see the company details once their device is enrolled.

   • Company name—Enter your organization's name.
   • Address 1—Enter your organization's address.
   • Address 2—(Optional) Enter additional details about your organization's address.
   • City—Enter your organization's city.
   • State—Enter your organization's state.
   • Country—Enter your organization's country.
   • Zip Code—Enter your organization's zip code or postal code.
   • Support phone number—Enter your organization's support phone number for the device user to contact.
   • Email—Enter your organization's support email address for the device user to contact.
   ENROLLMENT SETTINGS—Select whether you want to allow the user the option to cancel the customization profile.

   • Skip Google, Samsung, and Carrier setup screens—This feature ensures that the Android factory reset protection is removed from the enrollment process. Note that enabling this feature means device users won't be able to cancel enrollment.
   • Allow device users to cancel customization—If you don't select this option, devices are automatically enrolled in Knox Configure after the device profile is approved.
   KNOX DEPLOYMENT APPLICATION SETTINGS—Explicitly assign a license for the Knox Deployment App (KDA) at profile creation if enrolling a device by Bluetooth using KDA.

   • License—Used to enroll devices using KDA. Note that if a license is not selected, this profile does not appear as an option in KDA. Only one license can be designated for KDA. An expired or consumed license may require an admin to assign a valid license to the profile.
   NOTE—The Knox Configure portal does not support these special characters (# / $ * % ^ & \ ( ) + ? { } [ ]). Do not use these characters when creating a device profile.
7. Click Next.

Upload the Knox E-FOTA client APK

The Applications and Widgets screen displays applications and widgets that have been uploaded to your Knox Configure account.

To upload the Knox E-FOTA Advanced client app to the Knox Configure console:

1. Click Add Application.

   

2. Click Upload Application.

   

3. Click Browse to select a APK file. Enter the following information:
   • Description—(Optional) Provide additional details about the app.
   • Activate Knox license—(Optional) Choose whether to activate the license after completing the profile.

   

4. Click Confirm to upload the APK file to the Knox Configure console.

Add the client app to the new profile

To add the Knox E-FOTA Advanced client app to the new profile:

1. Select the Knox E-FOTA Advanced client APK.

   

2. Click Next.

Configure the profile

The Configuration screen allows IT admins to apply custom configurations to Knox Configure devices. For Knox E-FOTA Advanced, we'll configure the profile to launch the Knox E-FOTA Advanced client app automatically after it's been configured.

1. Select Normal Mode.
2. On the left, click Applications & content.
3. Under Customize Applications for Configuration:
   • Select the Software Management APK under Download application during configuration.

   

4. Click Next.

You can review the profile and configuration summary in the Profile summary page. Once you've confirmed all the required information is correct, click Submit and assign devices to the profile.

Assign devices to the profile

If you haven't yet, ensure you have registered your devices in Knox Configure. To assign devices to the profile:

1. Select the check box of the target device(s).
2. Click Actions > Assign devices.
3. Click Select a License.

Select a license to apply to this profile. Note that only active licenses are compatible with this profile display. If you haven't yet, ensure you obtain a valid license for Knox Configure.

Download the application configuration file

1. On the admin PC, download the app configuration JSON file from: https://s3.eu-west-2.amazonaws.com/samsungefota-apk/swmb2b.json.
2. Open the .json file.
3. For domainName, enter your unique domain name.
   • To find your domain name and PIN, log in to the Knox E-FOTA Advanced portal. Then go to Admin > Domains to view the domain list.

   

4. For domainPIN, enter your unique domain PIN.
• To find your domain PIN, log in to the Knox E-FOTA Advanced portal. Then go to Admin > Domains.

{
   "dmUrl":"https://samsungefota.com/dm",
   "dmPort":"443",
   "domainName":"Enter your domain name",
   "domainPin":"Enter your domain PIN"
}

Encrypt the application configuration file

1. On the admin PC, download the cryptool JAR file for encryption: https://s3.eu-west-2.amazonaws.com/samsungefota-apk/cryptool.jar.
2. Save the cryptool file (.jar) in the same folder as the configuration file (.json).
3. Using the command prompt, navigate to the folder location and enter the following command to encrypt the app configuration file:

   java –jar cryptool.jar –e swmb2b.json

To decrypt the .json file for editing, enter the following command:

java –jar cryptool.jar –d swmb2b.json

Copy the application configuration file to the device

1. Find the My files app.
2. Tap the more icon and then tap Settings.

   

3. Under File management, enable Show hidden files.

   

4. Paste the application configuration file to the following device directory: My files > SD card > .swm
5. Launch the APK client app to activate it.

Knox Configure and some MDMs will auto launch the APK client app. If your MDM does not, you may need to manually launch the APK client app to activate the device enrollment.