Managed software updates

It’s important for enterprise customers to have a strategic software rollout plan and the controls to execute their plans. To assist with this process, Android Enterprise and Samsung Knox offer various tools to help understand the security risks associated with an out-of-date device, when a software updates are available, and controls to manage firmware over the air (FOTA).

Controlling the rollout of software updates allows IT admins to:

• Homogenize the firmware versions and capabilities of deployed device models.
• Carry out interoperability or compatibility testing with in-house or proprietary servers, apps, and endpoint settings.
• Ensure that known issues are patched before the deployment of major firmware version updates.
• Perform field tests of new firmware and software on a subset of devices before mass deployment.
• Force the use of firmware versions that have been validated to meet industry certification or regulation requirements.

Android Enterprise’s managed system updates feature offers foundational controls for firmware management. Using these controls, many enterprises can achieve a robust firmware management plan without sacrificing productivity. Through Android Management APIs (AMAPIs), EMM solutions can:

• Enforce software updates and allow the user to temporaily delay an update and schedule it for a later time.
• Delay operating system (OS) upgrades and maintenance releases for up to 60 days.
• Allow firmware download over Wi-Fi only.

Beyond Android Enterprise controls, a wide range of EMM partners support Samsung’s firmware management features by integrating firmware management with other asset management activities. IT admins can use these tools to test and deploy software updates in a consistent and low-risk manner. By using EMM solutions, enterprises can restrict users from loading unauthorized firmware through their devices or USB-connected computers.

Through the Knox platform, enterprises can also:

• Disable automatic firmware updates: IT admins can prevent users from using Android settings to enable or disable automatic firmware updates.
• Disable all OTA updates: IT admins can prevent users from using Android settings to enable or disable all software updates. This includes updates for firmware, security patches, bug fixes, and apps.
• Disable USB-connected updates: IT admins can prevent users from booting into Download Mode and manually installing a software update. This includes updates through the Odin, Kies, and Smart Switch update tools.

Samsung Knox firmware controls are complimentary to Android Enterprise managed system updates. While effectively managing firmware on Samsung devices doesn’t require Knox cloud software or controls, there are numerous benefits for leveraging the Knox platform’s added capabilities.