Q: Where are the Knox E-FOTA One servers hosted?
A: Knox E-FOTA One is hosted by Amazon Web Services (AWS) in the following regions:
- Oregon, US (for North/Central/South America and the Caribbean).
- Ireland (for the rest of the world, except China and the Americas).
The server location is matched with the region the customer selects during the registration process on SamsungKnox.com.
Q: Which OS versions are supported by Knox E-FOTA One?
A: Knox E-FOTA One supports Knox-supported devices with Android N and later.
Q: Do I need to do a firewall exception to use Knox E-FOTA One?
A: Yes, in order to securely reach and connect to Knox services and resources, a firewall exception is required. See Firewall exceptions for more information.
Q: What does OOBE installation mean?
A: If devices are preregistered through the Knox Deployment Program (KDP) and enrolled in the Knox E-FOTA One service, the Knox E-FOTA client is automatically installed on these devices during the out-of-box experience (OOBE). This means a campaign will be automatically applied to the devices right after they are unboxed. If a factory reset is done on a device, the Knox E-FOTA client app will be installed again and the latest campaign will be applied automatically.
Q: How can I install the Knox E-FOTA client app to devices?
A: There are three ways you can install the Knox E-FOTA client app:
- Automatically through OOBE installation.
- By pushing the app to devices through your EMM.
- By sideloading the Knox E-FOTA client APK into the device.
Q: How does EMM sync work?
A: Once EMM sync is established, the device and group info will be synced every 6 hours. On-demand manual sync is also possible on the Knox E-FOTA One portal.
Q: What happens when an admin deletes or cancels an active campaign (for example, the server is currently streaming binaries to target devices)?
A: If an active campaign is stopped, ongoing activities (such as downloading) will continue to run until completed, but the firmware will not be installed.
Q: How many tags can be applied?
A: There is no limitation to the number of tags that can be applied.
Q: Will Knox E-FOTA One operate correctly under DO and COPE environments?
A: Knox E-FOTA One will operate correctly when it's installed on the User0(Primary user) area. And If DO has an app whitelisting policy set, then Knox E-FOTA One should be whitelisted to work properly.
Q: What is the communication mechanism between the Knox E-FOTA One server and client?
A: The main communication mechanism is push based. When an IT admin configures devices through the Knox E-FOTA One portal, the push message is sent through a Google FCM server. To back up the push system, we also implemented a polling mechanism. The client will periodically poll the server configuration information every 24 hours. Alternatively, the end user can manually poll for the latest policy from a server. See Push and poll.
Q: What happens when a device is unenrolled?
A: If a device is unenrolled from the Knox E-FOTA service, the Knox E-FOTA client app is uninstalled automatically (depending on the device's condition). B2C-FOTA updates are then re-enabled on the device. In cases where the Knox E-FOTA client is not uninstalled automatically, the end user must uninstall it manually.
Q: What background activities are happening on a device during the following processes:
- Installation of Knox E-FOTA client app
- Enrollment to Knox E-FOTA
A: During the installation, no background activities are performed. During enrollment, the following are performed in the background:
- Disable the device's B2C FOTA client
- Disable uninstallation of the Knox E-FOTA client app. That is, the end user cannot uninstall it.
Q: What is the update policy for the Knox E-FOTA client?
A: When the latest version of the Knox E-FOTA client app is published, the client app is updated.
Q: Is the Knox E-FOTA One client a preloaded app?
A: No. The Knox E-FOTA One client is a downloadable app (platform signed app).
Q: Is the Knox E-FOTA One client available on Google Play?
A: It's not available on Google Play at this time, but it will be in the future.
Q: How far back does the firmware catalog go?
A: As with other Knox E-FOTA products, the firmware catalog contains binary releases from the last 12-months.
Q: Is multi-factor authentication for the Knox E-FOTA One admin portal planned?
A: Currently, Samsung Account supports 2FA. If you turn on 2FA for Samsung Account authentication, you can harden your authentication method.
Q: What is the post-GA release policy?
A: The post-GA release policy is as follows:
- Server only feature—Monthly release
- Server / client feature—Bi-monthly release
Q: When will EMM integration support take place?
A: Integration with Knox Manage and VMware will be supported with the first release of Knox E-FOTA One. Others EMMs will follow soon.
Q: What happens when the license expires?
A: When a license expires, the firmware version is frozen on the devices that are using that license. If you want to stop using the Knox E-FOTA service after license expiration, you must unenroll the device to enable B2C FOTA updates.
When your license expires, you can no longer assign devices to campaigns.