- Basics
- The Knox Ecosystem
- White Paper
- Samsung Knox Portal
- Knox Cloud Services
- General Knox Support
- Knox Licenses
- For IT admins
- Knox Admin Portal
- Knox Suite
- Knox Platform for Enterprise
- Introduction
- How-to videos
- Before you begin
- Get started with UEMs
- Introduction
- Blackberry UEM
- Citrix Endpoint Management
- FAMOC
- IBM MaaS360
- Microsoft Intune
- MobileIron Cloud
- MobileIron Core
- Samsung Knox Manage
- SOTI MobiControl
- VMware Workspace ONE UEM
- Knox Service Plugin
- Release notes
- Migrate to Android 11
- FAQs
- Troubleshoot
- KBAs
- Knox Mobile Enrollment
- Knox Configure
- Mobile
- Wearables
- Shared Device
- FAQ
- KBAs
- Knox Capture
- Introduction
- How it works
- How-to videos
- IT admins: Get started
- Getting started with Knox Capture
- Step 1: Launch Knox Capture
- Step 2: Create a scanning profile
- Step 3: Select apps and activities
- Step 4: Configure the scanner
- Step 5: Set keystroke output rules
- Step 6: Test apps in your configuration
- Step 7: Share your configuration
- Step 8: Deploy Knox Capture in Managed mode
- End users: Get started
- Features
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox Asset Intelligence
- Knox Manage
- Introduction
- How-to videos
- Get started
- Video: Getting started with Knox Manage
- Integration with Managed Service Provider
- Access Knox Manage
- Configure basic environments
- Create user accounts
- Create groups
- Create organization
- Set up devices and profiles
- Set up Knox Manage deployment with a Knox Suite license
- Manage Chromebooks
- Manage Android devices with the Android Management API
- Manage Shared iPads
- Configure
- Licenses
- Organization
- Users
- Sync user information
- Groups
- Devices
- Content
- Applications
- Profile
- Knox E-FOTA
- Certificates
- Advanced settings
- Monitor
- Kiosk devices
- Knox Remote Support
- Active Directory
- Microsoft Exchange
- Mobile Admin
- Appendix
- Release notes
- Features
- FAQ
- KBAs
- Knox E-FOTA
- Introduction
- How-to videos
- Get started
- Features
- EMM integration
- Appendix
- Release notes
- FAQ
- KBAs
- Troubleshoot
- Knox E-FOTA On-Premises
- Legacy Knox E-FOTA products
- Knox Guard
- Introduction
- How-to video
- Get started
- Using Knox Guard
- Dashboard
- Manage devices
- Device management
- Accept or reject devices
- Upload devices
- Delete devices
- Complete device management
- Send notifications
- Enable or disable SIM control
- Download devices as CSV
- View device log
- View device deletion log
- Start and stop blinking reminder
- Lock and unlock devices
- Update lock message
- Send relock timestamp
- Turn on/off relock reminder
- Manage policies
- Manage licenses
- Manage resellers
- Manage admins and roles
- Activity log
- Knox Deployment App
- Release notes
- FAQ
- KBAs
- Support
- Samsung Care+ for Business
- For Knox Partners
- Knox Deployment Program
- Knox MSP Program
How to deploy the Knox E-FOTA client to a kiosk through KSP
Last updated: September 9, 2022
Environment
- Knox E-FOTA
- Knox Manage
- Knox Service Plugin (KSP)
- Fully managed Android device
- Kiosk mode
Overview
This article provides guidance on how to deploy the Knox E-FOTA client to a kiosk through Knox Manage and a KSP profile.
How to deploy the Knox E-FOTA client
Before enrolling the device in Knox Manage, configure Knox E-FOTA to skip waiting for the user's consent to the terms and conditions during enrollment, shortening the time to deploy:
- On the Knox Admin Portal, click your profile picture and select Manage service & preferences.
- Under Knox E-FOTA, click PRIVACY POLICY SETTING, then select Skip Knox E-FOTA Terms & Conditions and Privacy Policy and click Save.
How to set up Kiosk mode and configure KSP in Knox Manage
To set up a kiosk in Knox Manage and configure a profile:
- On the Knox Manage console, go to Kiosk and click Add.
- Choose whether to configure a multi-app kiosk or a single-app kiosk and click OK. The Add Kiosk page opens.
- Enter a name for the kiosk, select settings for the device and allowlisted apps, then save the kiosk.
- Go to Profile and assign the new kiosk to the desired profile, but stay on the Modify Policy page instead of saving the profile right away.
-
While still on the Modify Policy page, expand the Samsung Knox > Knox Service Plugin policy drawer, then set the following Device-wide policies:
- Enable device policy controls to True
- Firmware update (FOTA) policy > Enable firmware controls to True
- Firmware update (FOTA) policy > Allow firmware update over-the-air to False
- Firmware update (FOTA) policy > Allow firmware update in recovery mode to False
- Firmware update (FOTA) policy > Enforce firmware auto update on Wi-Fi (Premium) to False
- Firmware update (FOTA) policy > Enable E-FOTA client installation & launch to True
- Under Device-wide policies > Device Admin allowlisting, set Enable device admin controls to True, then add com.samsung.android.knox.containercore as an allowlisted app to act as a device admin.
- Save and Assign the profile to the group or organization that contains the kiosk.
Additional information
To learn more about creating a campaign with Knox E-FOTA or connecting Knox E-FOTA to Knox Manage, refer to the How-to videos.
