Home / Knox Guard / How-to guides / Manage policies / Common /

Auto firmware installation

Last updated October 8th, 2026

This document is new for the Knox cloud services 26.10 UAT.

This feature is only available for Knox Guard Edition devices.

To help maintain device security, the Auto firmware installation policy enforces the most recent firmware updates on all Knox Guard Edition devices.

Once enabled, as soon as a security patch is downloaded to a Knox Guard Edition device, it automatically installs. Device users won’t be able to delay or cancel the installation, even if the device is actively in use.

As enabling this feature can impact user experience, we recommend you notify device users about this restriction when distributing devices.

You can combine Knox Guard policies to automatically update firmware on devices as soon as they’re available. Enable the Firmware auto download over Wi-Fi policy to force devices to automatically download the latest available firmware when they connect to Wi-Fi, then enable Auto firmware installation to force install the update.

Enable or disable Auto firmware installation

To enable automatic firmware installation:

  1. Navigate to the Policies page.

  2. Under KNOX GUARD EDITION, click AUTO FIRMWARE INSTALLATION.

  3. Enable or disable Auto firmware installation.

    • If you’re enabling this feature, read the user acknowledgement. If you agree to the listed acknowledgements, check I take responsibility resulting from this enforcement.

  4. Click SAVE.

Is this page helpful?