System Update Configuration

Administrators can limit device users from managing system updates on Android 6.0 devices or supported newer versions. This feature is applicable only to Android Enterprise devices.

To configure :

  1. Go to Configuration> +Add.

  2. Select System Update configuration.

  3. Enter a name for the configuration.

  4. Enter a description.

  5. In the Configuration Setup section, configure the following options:

    Setting

    Description
    Automatic Silently apply the system update whenever new firmware is available.
    Postpone Postpones the installation of system updates for 30 days. After the 30-day period has ended, the system prompts the device user to install the update.
    Windowed (Local Time)

    Schedule a time period to silently apply the system update.

    Select the Start Time and End Time hours.

    Manual OS Update (Android 10+)

    Not applicable or supported on Samsung and Zebra devices

    Select to perform OS update manually on limited number of devices before rolling out the update for all devices.

    Firmware File - Select Custom Attribute or HTTPS URL option.

    Enter the following details: 

    • Firmware location - If you have selected Custom Attribute as the Firmware File option, you need to provide the custom attribute that was used for File Transfer. Firmware file can be self-hosted or can be uploaded to Ivanti Neurons for MDM using the File Transfer configuration. Please refer to the File Transfer Configuration for details. Uploading files greater than 50 MB to Ivanti Neurons for MDM requires an add-on license.

    • Description (optional)

    • Fingerprint (mandatory) - To validate that the intended OS version is installed on the device.

      Fingerprint can be found in the OTA file by unzipping the OTA folder and opening the /META-INF/com/android/metadata file. Search for an entry similar to the one below:

      "post-build=google/xxxxx/xxxxxx:13/TQ3A.230805.001.S1/xxxxxxxx:user/release-keys"

      In the above entry, google/ xxxxx/xxxxxx:13/TQ3A.230805.001.S1/xxxxxx:user/release-keys is the fingerprint and TQ3A.230805.001.S1 is the build ID(Build ID is the 4th value from left in the values separated by '/' in fingerprint).

    • Checksum (optional)

    Update Settings -> OS Update Request - The settings within this section are same for Zebra Firmware Configuration. Please refer to the Zebra Firmware Configuration section in this table.

    If you select HTTPS URL as the Firmware File option, you need to provide the following information: 

    • Firmware Location - Enter the path from which the firmware can be downloaded without requiring any authentication.

      Description (optional)

    • Fingerprint (mandatory) - To validate that the intended OS version is installed on the device.

    • Checksum (optional)

    You will have the Initiate Download Request and During Download Conditions sections in addition to the "OS Update Request" section. The options available under the Initiate Download Request and During Download Conditions sections are same as they are under the Zebra Firmware Configuration section.

    Once system update in device starts after download, restarting the device in between an update aborts the update process.
    Freeze Period

    Freezes the system update for a specified period.

    This option is applicable for Android 9.0+ devices.

    Click Add Freeze Period.

    Select the Start Date and the End Date for the freeze period.

    The freeze period cannot be more than 90 days and you can add multiple freeze periods. The next freeze period can be selected only after 60 days from the previous calendar end date.

    To delete a freeze period click on the Delete icon.

    Zebra Firmware Configuration

    Select Configure Zebra OTA to upgrade or update the operating firmware of the Zebra devices (running on Android version 8.0 or supported newer versions). This is applicable only to Device Owner modes.

    To configure Zebra OTA updates, you must enable Ivanti Neurons for MDM OTA service under Admin>Firmware Management>Zebra OTA and Zebra devices must be present on Ivanti Neurons for MDM. You must enter your Zebra credentials in the popup. To re-create your credentials, contact Zebra directly.

    When this option is selected, the list of registered Zebra devices are displayed.

    To select and apply the firmware to the device model:

    1. In the Action column for the Zebra device, perform any of the following actions:
      • None: No action will be performed for the device model.
      • Full Upgrade. In the Select Target Zebra Firmware window, select the full upgrade firmware version to be applied to the device model .

        • During the Full Upgrade process, only port 443 is needed.

        In the Search field, you can type the characters of a build ID to search for upgrades based on build ID. The build IDS are sorted and displayed in descending order (latest on top).

        The Patch Upgrade option will NOT be available for Android 11+ devices.

    2. Configure any of the following options:   

      Initiate Download Request - These conditions will be evaluated by the Go app.

      • Minimum required battery level: Move the slider to set the minimum required battery level from the available range.
      • Require device to be charging : Select this option to keep the device in charging mode during the process.
      • Download schedule : Select this option to create a schedule to initiate download request and file download.

        • The Require device idle, Require charging, and Allow downloaded over metered network are passed to Android Download Manager. Go app will add the download request to Android Download Manager in mentioned window with the above parameters.

      • Apply schedule for download - Select the Day(s) of the week and the Start time and End time to schedule the download. Multiple days can be selected to schedule the download. For example, if Saturday and Sunday is selected with start and end time between 12:00 AM to 11:00 PM, the download is performed in the Zebra devices only during this time period for the selected day(s).

        In the Go app, the download begins as scheduled when the configuration is applied to the device. There is no download end time limit, and it may complete at a time beyond the scheduled end time.

      • Apply schedule for update - Select the Day(s) of the week and the Start time and End time schedule the installation of the firmware update.
        The installation will be postponed if the device battery level is below 32.
        If no update schedule is configured, the installation begins immediately after the firmware download completes.
    3. Configure any of the following options:

      During Download Conditions- These conditions will be evaluated by Download Manager. You can make the selection depending on criteria.

      • Require device idle (Selected by default): Allows firmware updates on the device when the device is idle.
      • Require charging (Selected by default): Allows firmware updates on the device when it is in charging mode.
      • Allow download over metered network : Select this option to allow download in Wi-Fi mode. This option is unselected by default.

        • The Require device idle, Require charging, and Allow download over metered network are passed to Android Download Manager. Go app will add the download request to Android Download Manager in mentioned window with the above parameters.

      • Allow download to continue outside of specified 'download schedule' : Select this option to allow download outside of the specified download schedule.

      OS Update Request

      • Minimum required battery level - Select this option to set the minimum battery level that must be available to request OS update.
      • Require device to be charging - Select this option to keep the device in charging mode during the process.
      • Create schedule to start OS update on the device - Select this option to set a schedule at which the OS update will start on the device.

        In the Go app, the download begins as scheduled when the configuration is applied to the device. There is no download end time limit, and it may complete at a time beyond the scheduled end time.

    4. Click Apply.

    Samsung e-FOTA Configuration

    Select Configure Samsung e-FOTA to upgrade or update the operating firmware of the Samsung devices (on Knox version 2.7.1 and above). This is applicable only to Managed Device with Work Profile on Company Owned Device modes.

    If there are no Samsung e-FOTA capable devices are registered, a message informing this information is displayed on the page.

    To configure Samsung e-FOTA updates, you must activate Samsung e-FOTA license under Admin>Firmware Management>Samsung E-FOTA.When this option is selected, the list of registered Samsung devices are displayed.

    To select and apply the firmware to the device model:

    1. In the Action column for the Samsung device, perform any of the following actions:

      • Latest: The latest firmware version is applied. This option is selected by default.

      • Force: In the Select Target Samsung Firmware window, select the particular firmware version to be force applied (without user intervention) to the device model. When this action is performed, firmware downloading begins within fifteen minutes.

      • Target: In the Select Target Samsung Firmware window, select the particular firmware version to be applied to the device model.

      When performing the 'Force' or 'Target' actions, If there are no firmware listed for the device, a message informing this information is displayed on the page.

    2. Enable debug FW (Optional): When the Enable Debug FW option is enabled, and the configuration is applied, the device is upgraded to a dummy firmware. The dummy firmware of the Samsung device firmware allows the admin to test the system update configuration behavior on the devices, without actually modifying anything on the device.

      To upgrade to the actual firmware update, instead of the dummy firmware, the admin should ensure that the Enable debug FW option is disabled before applying the configuration

    3. Click Apply.

     

  6. Click Next.

  7. Select one of the following distribution options:

    • All Devices
    • No Devices(default)
    • Custom

  8. Click Done.

Samsung E-FOTA Configuration (Decommissioned)

The Samsung E-FOTA configuration is decommissioned in July 2022. So, this configuration will not be available for new devices. The devices with the existing configuration can only deactivate this configuration.