Samsung E-FOTA Updates
Samsung Knox E-FOTA (Enterprise Firmware-Over-The-Air) enables administrators to view firmware updates for Samsung devices through SureMDM. By integrating a Samsung Knox account with SureMDM, administrators can manage E-FOTA licenses, enroll eligible devices, configure firmware policies, and assign specific firmware targets to control firmware updates across their device fleet.
SureMDM provides options to select firmware versions, configure download and installation schedules, and control the network used for firmware downloads, helping administrators manage firmware deployments according to their organizational requirements.
Prerequisites
Before configuring Samsung Knox E-FOTA in Surp;eMDM, ensure that the following requirements are met:
- An active Samsung Knox E-FOTA trial or paid license must be associated with your Samsung Knox account.
- You must have access to your Samsung Knox account credentials to sign in through Samsung’s hosted authentication page.
- The target devices must already be enrolled in SureMDM. This integration supports Samsung devices only.
- The Samsung Knox E-FOTA client app must be installed on each target device before a firmware policy can be received. You can deploy the app through SureMDM or install it manually.
Each device enrolled in Samsung Knox E-FOTA consumes one license seat, even if no firmware policy is assigned to the device.
Step 1: Connect Your Samsung Knox Account
Connect your Samsung Knox account to SureMDM to access E-FOTA licenses, enroll devices, and manage firmware policies.
Log in to the SureMDM Console.
Navigate to Settings > Account Settings > Firmware Updates > Samsung E-FOTA.
On the integration page, select Connect Samsung E-FOTA Account with SureMDM.
Review the confirmation message and select Continue to open Samsung's sign-in page.
Sign in using your Samsung Knox account credentials and complete the authorization steps displayed by Samsung.
Once the connection is successful, SureMDM displays a success message and opens the Samsung Knox E-FOTA Licenses view.
Disconnect Your Samsung Knox Account
To disconnect the account, select Log Out on the integration page. Review the confirmation message carefully before proceeding.
Step 2: Review Your E-FOTA Licenses
The Samsung Knox E-FOTA Licenses section provides an overview of the licenses available in your connected Samsung Knox account. It displays details such as the license name, license type (Trial or Paid), status (Active, Expired, or Suspended), total device capacity, number of devices currently assigned, and expiry date, where applicable. This information helps administrators monitor license availability and usage.
Step 3: Enroll Devices in Samsung Knox E-FOTA
You can enroll eligible Samsung devices manually or configure automatic enrollment through SureMDM.
Option A: Add Devices Manually
Select Add Devices Manually.
Browse the available SureMDM device list.
Select the devices you want to enroll and click Add.
Option B: Configure Automatic Enrollment
- Use the Automatic Enrollment option displayed in the dialog to enroll eligible Samsung devices without selecting them individually.
- Enable Include Newly Enrolled Devices checkbox to include eligible Samsung devices that are enrolled in SureMDM in the future.
- The Samsung Knox E-FOTA client app must be installed on each target device, and the end user must accept the Terms and Conditions on the device.
- A device is considered enrolled in Samsung Knox E-FOTA, and its license seat is consumed, only after both steps are completed. Devices that have not completed these steps cannot receive firmware policies.
- Click here to install the Samsung Knox E-FOTA client app.
Step 4: Create a Firmware Policy
A Firmware Policy, also called a campaign, defines the firmware download and installation schedule, the permitted download network, and whether the factory reset option is allowed while the policy is assigned.
Create a Policy
Navigate to Settings > Account Settings > Firmware Updates > Samsung E-FOTA > Manage Policies.
Select the Add (+) icon to create a new policy.
Configure the policy details as described in the following table:
| Setting | Description |
|---|---|
| Policy Name | Enter a unique name for the policy. Policy names must be unique within your SureMDM account. |
| Description | Enter a brief description to help administrators identify the policy. |
| Start Date | Specify the date on which the policy should begin. |
| End Date | Specify the date on which the policy should end. Leave this field blank to run the policy indefinitely. |
| Firmware Download Period | Choose Anytime, Same as installation period, or Custom. If you select Custom, configure the download start and end times. |
| Firmware Installation Period | Configure the permitted installation start and end times. The times are based on the device's local time zone, and the end time must be later than the start time. |
| Download Network | Select Wi-Fi or Ethernet or Any. The Any option allows Wi-Fi, mobile data, or Ethernet. |
| Allow the Factory Reset Option | When OFF, the factory reset option is blocked on devices while the policy is assigned. Turn it ON to allow the option. |
- Save the policy. It will appear in the Manage Policies list.
Delete a Firmware Policy
Navigate to Manage Policies and select the policy you want to delete.
Click Delete.
Review the confirmation message and select the acknowledgment checkbox.
Click Delete to confirm.
Deleting a firmware policy unassigns it from all devices currently using that policy.
Step 5: Assign a Firmware Policy to Devices
Navigation: SureMDM Home > OS Updates > Android > Samsung E-FOTA
The Samsung E-FOTA tab lists eligible Samsung devices, grouped by model. The devices displayed depend on the devices enrolled through the E-FOTA device configuration or automatic enrollment.
Review Device Information
The device list provides the following information:
| Column | Description |
|---|---|
| Device Name / Device ID | Identifies the device in SureMDM. |
| Group Path | Displays the device's location in the SureMDM device hierarchy. |
| OS Version | Shows the operating system version currently installed on the device. |
| E-FOTA License Assigned | Indicates whether the device has an E-FOTA license seat assigned (Yes or No). |
| Policy Applied | Displays the policy assigned to the device, or — if no policy is assigned. |
| Sales Code / CSC | Displays Samsung device configuration details that help identify regional or carrier firmware applicability. |
| Policy Status | Displays the device-level policy status, such as Active or Inactive. |
Assign a Policy
Select one or more devices from the model groups. Ensure that each device has a license assigned and the Samsung Knox E-FOTA client app installed.
Click Assign Policy.
Under Select Policy, choose the firmware policy created in the Manage Policies section.
Under Select Firmware Target, choose how the firmware version should be selected.
Review your selections and confirm the assignment.
Choose a Firmware Target
Select the target that best matches your firmware deployment requirements.
| Firmware Target | Description |
|---|---|
| Specific Firmware | Deploys an exact firmware build. Search the available firmware list for the selected device models. |
| Lock Current Firmware | Keeps devices on their currently installed firmware version. |
| Latest Any | Selects the newest available firmware, regardless of OS version. |
| Latest Upto | Selects the newest firmware within a specified limit. Choose the applicable OS version. |
| Latest Security Patch Level | Selects the newest firmware within a specified security patch level limit. Choose the applicable security patch level. |
Verify the Assignment
After the policy is assigned successfully:
- SureMDM displays a confirmation message.
- The selected devices display the assigned policy and its status in the device list.
- The Assign Policy option changes to Unassign Policy, allowing you to remove the policy from the selected devices when required.