A wide range of EMM partners support Samsung’s firmware management features, integrating firmware management with other asset management activities. IT admins can use these tools to test and deploy software updates in a consistent and low-risk way. Through EMM solutions, enterprises can restrict users from loading unauthorized firmware, through their devices or USB- connected computers.

Through the Knox Platform, enterprises can:

• Prevent firmware rollback:

This option prevents valid, but out-of-date firmware versions from being maliciously or accidentally installed onto an enterprise’s devices. On Samsung Knox devices, a Rollback Prevention fuse encodes the minimum acceptable version of Samsung-approved software. With specific updates, the next set of fuses are burned to indicate the new update is now the minimum version allowed to boot. You can’t disable this basic, built-in security feature.

• Disable automatic firmware updates:

IT admins can prevent users from going to their Android Settings to enable or disable automatic firmware updates.

• Disable all OTA updates:

IT admins can prevent users from going to their Android Settings to enable or disable software updates in general. This restriction includes updates for firmware, security patches, bug fixes, and apps.

• Disable USB-connected updates:

IT admins can prevent users from booting into Download Mode and installing a manual software update. This restriction includes updates through the Odin, Kies, and Smart Switch update tools.