Install and launch the Knox E-FOTA client

To successfully enroll devices in Knox E-FOTA, you must first install and launch the Knox E-FOTA client app on your devices. The client allows Knox E-FOTA to manage the device. It functions as an agent that connects the device to the Knox E-FOTA server.

This section describes several ways to install the Knox E-FOTA client on devices:

• Manually install and launch the client

  • Through Play Store

  • Through a download link

• Automatically install and launch the client

• Install the client through your EMM

  • Through the Knox Service Plugin

  • Through managed Google Play

  • Through the EMM as an internal app

• Install the client through Knox Configure

• Notify device users to install the client

  • Through Play Store

  • Through a download link

Manually install and launch the client app

These procedures are useful if you’re testing how Knox E-FOTA works and you want to install the client on just a few devices.

Install the client through Play Store

1. On the device, launch Play Store.
2. Search for the Knox E-FOTA client app.
3. Follow the prompts to install the app.
4. Launch the app.

Install the client through a download link

1. Sign in to the Knox Admin Portal. In the left sidebar, click Knox E-FOTA.

2. Go to Devices > All Devices.

3. Click Direct Download.

4. In the Direct Download popup, copy the download link for the APK file.

   You can also copy the sample message and send it through email or SMS to your devices.

5. On each device, download, install, and launch the app:

   1. Tap Download > Open File > Install. The client app installs.

   2. Tap Open to launch the app.

Automatically install and launch the client after unboxing

Out-of-box-experience (OOBE) installation is the process of automatically installing the Knox E-FOTA app on a device after its initial setup is complete (after unboxing or factory resetting the device). OOBE is only supported on devices running Android 9 or higher.

OOBE enrollment installs the Knox E-FOTA app only if all of the following conditions are met:

• The device was uploaded by a reseller, and you’ve enabled both automatic approvals and automatic enrollment for all device uploads from this reseller.
• A valid campaign is assigned to the device.
• A valid license is available for use.

Campaigns are valid as long as they aren’t test/local campaigns and the campaign status isn’t Cancelled. Both trial and commercial licenses are valid as long as they are active.

If the conditions are met, the Knox E-FOTA app is automatically installed on devices through OOBE through the following workflow:

1. You purchase the devices through a Knox reseller that is enrolled in the Knox Deployment Program.

   The devices must be running Android 9 or higher.

2. In the reseller preferences, you enable automatic approval of all uploads from this reseller, and enable automatic enrollment during OOBE.

3. The reseller uploads the devices to your account through the Knox Deployment Program.

4. When your devices go through their initial setup, they automatically install the Knox E-FOTA app and are enrolled into Knox E-FOTA.

When you turn the devices on, they are verified. The Knox E-FOTA app is then automatically installed and launched on them.

You can streamline the user experience further by auto-enrolling and auto-assigning devices that a reseller uploads.

Install the EMM client and the Knox E-FOTA app on an unboxed device through OOBE

If your new device has been unboxed and you want to install the EMM’s client app and the Knox E-FOTA app through OOBE:

1. Ask your reseller to upload the device under your customer ID.

2. Use Knox Mobile Enrollment to configure the profile for the device. This automatically installs your EMM’s client app on your device through OOBE.

3. Enroll the device in Knox E-FOTA. The Knox E-FOTA app will be downloaded and installed through OOBE.

   • To prevent the Knox E-FOTA app from being uninstalled by an EMM policy, approve the Knox E-FOTA app through managed Google Play.
   • The Knox E-FOTA app will not be automatically installed through OOBE if kiosk mode is enabled on the device by an EMM policy.

Install the client through your EMM

The following procedures describe how you can push the Knox E-FOTA app to devices through your (EMM).

• Install and launch the client through the Knox Service Plugin
• Install the client through managed Google Play
• Install the client through the EMM as an internal app

Install and launch the client through Knox Service Plugin

You can use Knox Service Plugin (KSP) to install the Knox E-FOTA client app.

1. Set up KSP on your EMM console. See the Knox Service Plugin admin guide for information on how you can do this on the most common EMMs.

2. On your EMM’s console, go to the Knox Service Plugin settings.

3. Under Device-wide policies (Device Owner), enable Enable device policy controls.

4. Under Device-wide policies (Device Owner) > Firmware update (FOTA) policy enable the following KSP policies:

   • Enable firmware controls

   • Enable E-FOTA client installation & launch

   In the following example, the Knox Manage console is configured to enable these settings.

   

5. Enroll your device to your EMM in DO mode:

   1. Unbox the device if it is brand new. If it is not brand new, perform a factory reset. You are prompted to run the setup wizard.

   2. Follow the device setup wizard. When you’re prompted to enter a Google email or phone number, enter the DPC identifier. The DPC identifier differs depending on the EMM you’re using, but it typically starts with afw#.

      There are several other ways to enroll devices in DO mode. For example, you can use Knox Mobile Enrollment or Zero-touch enrollment.

   The EMM app is installed. The user is prompted to sign in to complete enrollment. The EMM app automatically installs the KSP client app. In turn, the KSP app installs and launches the Knox E-FOTA client app.

Install the client through managed Google Play

If your EMM supports the following functionality through managed Google play, you can approve the Knox E-FOTA app, push the app to your devices, and launch the app on those devices.

• App installation (DO)
• Remote app launch

The general workflow is as follows:

1. Sign in to your EMM.

2. Use your EMM’s search functionality to search for the Knox E-FOTA app in managed Google Play.

3. From the search results, select the Knox E-FOTA app and approve it.

4. Configure the EMM such that:

   • It automatically installs the app on devices.

   • It automatically launches the app after installation.

5. Assign the app to the devices that you plan to enroll in Knox E-FOTA.

For detailed information, refer to your EMM’s documentation.

Install the client through your EMM as an internal app

If you use an EMM that has an app installation functionality, you may be able to use your EMM’s console to push the client app to your devices. For general information on how to push an app to devices through various EMMs, see Install an app to devices through an EMM.

Install and launch the client through Knox Configure

With Knox Configure, you can create a profile, upload the client app, add the client app to the profile, and assign the profile to your devices. For more information, see the Knox Configure documentation.

Notify users to install and launch the client

This section describes how to copy a sample message to notify device users to install the client app APK on their devices.

1. Sign in to the Knox Admin Portal. In the left sidebar, click Knox E-FOTA.
2. Go to Devices > All Devices.
3. Click Direct Download.
4. In the Direct Download popup, click Copy Message to copy the sample email to your clipboard.
5. Modify the message if needed and send it to the device users through email or SMS.

Install the Knox E-FOTA: Legacy OneUI Core app

For legacy OneUI Core devices, you must install the Knox E-FOTA: Legacy OneUI Core app instead of the standard Knox E-FOTA app.

You can install the Knox E-FOTA: Legacy OneUI Core app by doing any of the following:

• Manual download — Download the Knox E-FOTA: Legacy OneUI Core APK from https://umc-cdn.secb2b.com/kfm/KnoxEfota_Core.apk.

• Managed Google Play — Search for the Knox E-FOTA: Legacy OneUI Core app on managed Google Play and approve and assign it to legacy OneUI Core devices. Configure the EMM to automatically install and launch the app.

  If you don’t know whether your devices run Legacy OneUI Core, you can approve and assign both of the client apps on your EMM console. The proper app is automatically installed on each device depending on its type. That is:

  • The Knox E-FOTA app will be installed on both OneUI and the latest OneUI Core devices.
  • The Knox E-FOTA: Legacy OneUI Core app will be installed on legacy OneUI Core devices.

• OOBE or KSP — The proper app Knox E-FOTA or Knox E-FOTA: Legacy OneUI Core is automatically installed on your device depending on its type.

Tutorial Progress

You’ve completed 4/5 steps! Go to the next step.