Samsung releases new versions of Android firmware to provide new features, improve performance, and resolve known bugs. Each firmware version goes through comprehensive testing and certification on our extensive range of mobile devices. You might however want to wait before deploying a new firmware version to your organization's devices. Specifically, you might need to:

  • carry out your own interoperability or compatibility testing, for example, with your backend servers and in-house apps
  • comply with industry standards on approved device firmware
  • wait until known issues with a new release are patched

With Samsung's new Knox E-FOTA (Firmware Over-The-Air) feature, you can now control the deployment of new firmware. You can:

  • select the highest firmware version allowed on devices
  • force the download of a specific firmware version onto multiple devices
  • schedule downloads when mobile workers are not using their devices


  • SEAP Partner account: If you are not yet a partner, click the button below to enroll as a partner.
  • Samsung Approval: If you are already a partner, click the button below to contact us about access to Knox E-FOTA.

Already a partner?  Sign in

How it works

Samsung uses a secure Knox E-FOTA server to provide firmware over-the-air. You use a REST API to communicate with this server, to check the firmware versions available, and force firmware updates onto your devices.

  1. On this SEAP portal, contact us to apply for access to the Knox E-FOTA server.
    • You will get a REST API key, which you use to identify yourself in subsequent REST API calls to the Knox E-FOTA server.
  2. Through a web script, call the REST API URI firmware to get a list of the firmware versions available for a device.
  3. Update device firmware using either of these methods:
    • Allow devices to update themselves.
      Through an Android app on devices, call the Knox SDK API method RestrictionPolicy.setAllowedFOTAVersion to set the highest firmware version that the device is allowed to update to. 
    • Force devices to update at a specified time.
      Through a web script, call the REST API URI serverInit to force devices in a specified group to start downloading the specified firmware version at the specified time. Firmware installation takes over 10 minutes, with the firmware download time dependent on network conditions. You should test on a small group of test devices first before general deployment, and allow plenty of time for the firmware installation to complete.
  4. The Knox E-FOTA server sends the specified firmware version to the specified group of devices and initiates the update.

Through Knox E-FOTA, you can:

  • Ensure that devices do not update to a firmware version that is not yet officially supported by your organization. This prevents potential issues in new releases from affecting the organization’s tools, data, or staff productivity.
  • Download a new firmware version to a few test devices only. This lets you run your own interoperability or compatibility tests with backend servers, in-house apps, etc. to find any corner cases that might result in performance issues.
  • Start to roll out new firmware on specified devices at a specified time. This way, devices are using the latest tested version and your IT staff does not need to support many different legacy versions. You can schedule updates during non-peak times, so that they don’t interfere with staff productivity.


Knox E-FOTA v2

Samsung Knox E-FOTA v2 includes enhancements to Knox E-FOTA v1, including:

  • Enhancements to force updates

    • Update devices by setting serial numbers in Group ID.

    • Define network type requirements, such as Wi-Fi only, when downloading updates.

    • Set devices to update to the newest update available using a single command Latest.

    • Use the force update ID to obtain details and summary about a specific push update.

  • Real time license info updates — Get real time updates about devices such as active period, license status, license type, quantity of license purchased, remaining license quantity and device count.

  • Improved license management capabilities

    • Obtain real time device status details to enable admins to troubleshoot enrollment failures.

    • Register devices by group using Group ID.

    • Efficiently change the license associated to a group of devices using Group ID.

  • Security — Includes an Android patch to improve device security and protect against vulnerabilities.

With Knox E-FOTA v2, there are also three namespace changes to Knox E-FOTA v1 APIs. Read the release notes for additional details.

NOTE — While you’re able to use Knox E-FOTA v1 and Knox E-FOTA v2 together, it’s recommended that you transition to using Knox E-FOTA v2 to efficiently manage your devices.

Knox E-FOTA v1

With Samsung Knox E-FOTA v1, you can control the deployment of new firmware with the following features:

  • Firmware version management — Define the highest firmware version allowed on devices to enable compatibility testing with in house apps.

  • Over-the-air updates — Force the download of a specific firmware version onto a fleet of devices without requiring user actions.

  • Scheduled updates — Specify when update downloads are pushed to devices to avoid affecting productivity during business peak hours.

Read more about Knox E-FOTA v1 on the Samsung Knox E-FOTA REST API reference page.

Next steps ...

  • Read the Developer Guide to understand how to deploy Knox E-FOTA. 
  • Check the API Reference to see what REST API calls can be made to the Knox E-FOTA server.
  • Browse the FAQs for answers to basic questions you might have.
  • Contact us if you would like access to Knox E-FOTA service.