Step 5 — Download and install the agent app

Now it’s time to install the Knox E-FOTA On-Premises agent app. Contact a Samsung technical support engineer to get new agent app versions.

There are four ways to install the agent app on your devices:

• Update the Knox E-FOTA On-Premises agent app by uploading the package through the console

• Manually install the package

• Install the client through your EMM

• Download the client through a QR code

Update the Knox E-FOTA On-Premises agent app by uploading the package through the console

If you want to update the existing agent app on your devices:

1. Sign in to the Knox E-FOTA On-Premises console. Make sure you’re in the correct workspace by verifying its name in the top-right corner of the console.

2. Click your account icon, then click Settings.

3. The navigation pane refreshes with a new set of tabs. Click Agent.

4. Click ACTIONS > Upload Agent. A dialog opens and prompts you to upload a package.

   

5. Click BROWSE and select the package file on your computer. Then, click UPLOAD.

   

The Agent screen refreshes with the new agent app information. Click Actions > Start Deployment to make your devices begin downloading and updating the new agent app.

Manually install the package

Alternatively, you can manually install the package on a device. This method is recommended if you want to test the agent app before deploying it to your full device fleet.

Before you begin, ensure you have the following prepared:

• A device capable of creating and copying a text file to a Samsung Galaxy device. For example, a computer, tablet, or phone.
• Your organization’s Knox E-FOTA On-Premises server, connected to your local network.
• The TLS certificate .pem file used to connect to your Knox E-FOTA On-Premises server.
• A device secured by Samsung Knox, connected to your local network.

Create a configuration file

On the device you’re using for text editing, you first need to create a file called efota_config. In a text editor of your choice, enter the URL of your on-premises server.

The on-premises server URL is defined by your organization and is used to access the Knox E-FOTA On-Premises console. The default server URL defined in the E-FOTA On-Premises agent app is http://192.168.10.10:8080/admin, but this URL can be customized in your efota_config file. If you’re not sure what this URL is, contact the Samsung installation engineer who configured your Knox E-FOTA On-Premises server.

For example, the URL might be in one of the following formats:

• https://example-sec.fota.net:6443/admin/
• http://181.107.61.233:6380/admin/

Next, save the file. Ensure the file isn’t saved with a file extension. Your efota_config file should look similar to this:

https://example-sec.fota.net:6443/admin/

Transfer the files to the device

Transfer the efota_config file and the TLS certificate .pem file to your device.

There are two ways to get these files on your device:

• Use your EMM to push the files to your device’s Downloads folder, or
• Copy the files from your computer to the device’s Downloads folder

If you’re copying the file from your computer, connect the device to your computer through USB. In your computer’s file explorer, locate the efota_config file and the TLS certificate file and copy it to your device’s Downloads folder. Make sure the agent app APK you received from your local Samsung representative is also present in the Downloads folder.

Install the Knox E-FOTA On-Premises app

On the device, navigate to the Downloads folder and tap the agent app APK to install it. After it’s installed, launch the app. The Knox E-FOTA On-Premises app loads the server URL from efota_config and the TLS certificate .pem file to connect to your on-premises server.

Install the client through your EMM

If you’re using Knox E-FOTA On-Premises alongside an EMM, you can use your EMM to push the Knox E-FOTA On-Premises app to your devices.

Your local Samsung representative provides you with the APK for the Knox E-FOTA On-Premises app. Follow your EMM’s documentation to add an internal app and push it to your fleet of devices.

The Knox E-FOTA On-Premises app supports a managed configuration, which lets you configure the URL and TLS certificate needed for the app to connect to your Knox E-FOTA On-Premises server. Follow your EMM’s documentation on how to configure an app’s managed configuration.

Test the managed configuration

You may want to test the Knox E-FOTA On-Premises app’s managed configuration on individual devices before deploying it to your device fleet with your EMM. You can do this with Google’s TestDPC to update managed configurations for apps on the device. Here is an example showing how to set an app’s managed configuration with TestDPC.

1. Deploy and setup TestDPC on the device.
2. Open TestDPC, and tap on Managed configurations.
3. On the dropdown, select the Knox E-FOTA On-Premises app, and tap LOAD MANIFEST RESTRICTIONS. The app’s managed configuration opens with fields to set the server URL and TLS certificate.
4. Tap on server_url and enter the URL for your Knox E-FOTA On-Premises server.
5. Tap on pem and paste the contents of your pem file with your TLS certificate information.
6. Tap SAVE.
7. Open the Knox E-FOTA On-Premises app and verify that the server URL is correct and the app is able to connect to your server.

For more information, please see Google’s Android Managed Configuration Sample.

Download the agent app through a QR code

You can download the agent app onto your devices using a QR code:

1. From the settings menu, click Agent.
2. Click the package version to show the QR code.
3. Scan the QR code with your device to download the agent app.
4. On the device, navigate to the Downloads folder and tap the agent app APK to install it. If you encounter a warning, tap OK to install the app anyway.

The QR code is valid for 7 days. You can generate another QR code by refreshing the Agent page and clicking the package version again.

Tutorial progress

You’ve completed 5 of 7 steps!

Previous Next