How to configure Knox E-FOTA in SOTI MobiControl

Environment

• Knox E-FOTA
• SOTI MobiControl

Overview

Knox E-FOTA requires the following components to manage firmware on your Samsung device fleet:

• The Knox E-FOTA client installed on your devices
• Devices that are enrolled in Knox E-FOTA in the SOTI MobiControl console
• A firmware management policy, created and assigned to the device fleet

This guide outlines the steps you must follow to configure Knox E-FOTA in SOTI MobiControl:

Prerequisites: Enroll devices in SOTI MobiControl and set up Samsung Knox cloud service

Step 1: Upload SOTI MobiControl devices to Knox E-FOTA

Step 2: Enroll SOTI MobiControl devices in Knox E-FOTA

Step 3: Configure Knox E-FOTA policies

Step 4: Lock or select your target firmware

Prerequisite: Enroll devices in SOTI MobiControl and set up Samsung Knox cloud services

Before you start the set up, ensure that the following prerequisites are met:

• Your enterprise devices are enrolled into SOTI MobiControl.
• You have a Samsung Knox account and have access to Samsung Knox cloud services.

Step 1: Upload SOTI MobiControl devices to Knox E-FOTA

You can use two methods to upload SOTI MobiControl enrolled devices to Knox E-FOTA:

Automatic upload of devices to Knox E-FOTA:

1. In the SOTI MobiControl console, click the top left menu, then go to Global Settings.

2. Select Android > Samsung Knox E-FOTA.

3. Next to Auto Upload Enrolled Devices, click CONFIGURE.

4. Ensure Auto Upload MobiControl enrolled devices to Knox E-FOTA is enabled.

5. Adjust the time interval for Frequency for Auto Upload.

   

6. Click SAVE.

Manual upload of devices to Knox E-FOTA:

1. In the SOTI MobiControl console, click the top left menu, then go to Devices.

2. Select your device group or specific devices.

   

3. Under Device Actions, click Upload Device(s) to Knox E-FOTA.

   

Step 2: Enroll SOTI MobiControl devices in Knox E-FOTA

You can use the following methods to enroll SOTI MobiControl devices in Knox E-FOTA:

Enroll devices with SOTI MobiControl App Policy:

1. In the SOTI MobiControl console, click the top left menu, then go to Policies.

2. Go to Apps.

3. Click New App Policy, then click Android > Android Enterprise.

   

4. Enter a name for your policy.

   

5. Click the APPS tab.

6. Click + NEW APP POLICY to open the SELECT APPS dialog.

7. Set the following policies under Apps:

   Policy	Value
   App Source	Managed Google Play
   App Source > Select	Samsung
   App Source > Apps	Click MANAGED GOOGLE PLAY and search for Knox E-FOTA in the Managed Google Play dialog. Click Select. For Legacy OneUI Core devices, you can search for the Knox E-FOTA: Legacy OneUI Core app. If you’re unsure that your devices run Legacy OneUI Core, you can add and configure both apps to install on your devices. The proper app is automatically installed and launched on each device.

   

   

8. Click OK.

9. Click Add.

10. For the Knox E-FOTA app, click the menu icon, then click Configure.

    

11. Go to Installation Options.

12. Enable Launch App After Installation, then click SAVE.

    

13. Click SAVE AND ASSIGN > ASSIGN to apply the policies to your devices.

Enroll devices with Knox Service Plugin (Samsung OEM configuration):

1. In the SOTI MobiControl console, click the top left menu, then go to Profiles.

2. Click Add Profiles.

3. Under Android, select any of the Android Enterprise management modes.

   

4. Enter the name of your new profile.

5. Open the CONFIGURATIONS tab, then click + to add a new configuration.

   

6. Click OEMConfig > Samsung.

   

7. Expand Device-wide policies, and modify the following policies:

   Policy	Value
   Enable device policy controls	Enable
   Firmware update (FOTA) policy > Enable firmware controls	Enable
   Firmware update (FOTA) policy > Enable E-FOTA client installation & launch	Enable

8. Click SAVE.

9. Click SAVE AND ASSIGN > ASSIGN to apply the profile to your devices.

Step 3: Configure Knox E-FOTA policies

To configure Samsung Knox E-FOTA policies:

1. In the SOTI MobiControl console, click the top left menu, then go to Policies.

2. Click Firmware Management > Samsung Knox E-FOTA.

3. Click + NEW SAMSUNG KNOX E-FOTA POLICY.

4. Fill in the required fields based on your enterprises’ requirements. Set the Start Date to any date after the current day.

   

5. Click SAVE AND ASSIGN.

6. Select the devices to apply this policy to.

   Enabling the option Exclude devices assigned to other Knox E-FOTA Policy excludes devices currently assigned to an existing policy. If this option is disabled, the new policy overrides any existing assigned policy.

7. Click NEXT.

Step 4: Lock or select your target firmware

After configuring the schedule for your policy, you must select or lock the target firmware:

1. Click the device model name.

   Duplicate device models may display if they are provided by different carriers or regions.

2. Next to Target Firmware, select one of the following options:

   Option	Description
   Lock Current Firmware	Locks the device to its current version.
   Specific Firmware	Updates the device to any of the available versions higher than the current version.
   Latest Any	Updates the device to the latest version available to Knox backend.
   Latest Upto	Updates the device to the latest selected OS version.

   

3. Click OK > ASSIGN.

A Knox E-FOTA policy is now scheduled for your device fleet.