Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Firmware Over-the-Air (FOTA) updates let you remotely update device firmware over a wireless connection. A FOTA update can include software and security patches, feature updates, and other changes to the device's firmware. This method is more efficient, convenient, and more secure than manual updates and can be performed on a scheduled or on-demand basis.
In the context of FOTA, a deployment is an update policy that includes instructions about the firmware update to be deployed to devices and other update-related settings. For example, Schedule type, and charging requirements.
Prerequisites
Device platform requirements
FOTA updates are supported on Android Enterprise devices enrolled in Intune. This includes the following enrollment types:
- Android Enterprise corporate-owned dedicated (COSU)
- Android Enterprise corporate-owned fully managed (COBO)
- Android Enterprise corporate-owned work profile (COPE)
Licensing requirements
This feature requires Microsoft Intune Plan 2 or an additional subscription. For licensing options, see Microsoft Intune plans and pricing and Microsoft 365 Security Enterprise Plans.
Manage FOTA updates
You have two ways to manage software updates:
Use Firmware Over-the-Air (FOTA), which works for some OEMs.
Note
If Zebra updated the available firmware list in the last 24 hours, then the list of firmware available might take up to 24 hours to populate.
If FOTA isn't available you can use Device restrictions profiles, which work for all OEMs.
FOTA update management for specific OEMs
Manufacturer-specific FOTA support might offer more controls beyond what device restrictions profiles offer.
Intune supports FOTA update management for supported devices from the following manufacturers:
- Zebra: For Zebra devices, see LifeGuard Over-the-Air Integration with Microsoft Intune.
- Samsung: For Samsung devices, see E-FOTA Update Management with Microsoft Intune.
Use device restrictions profiles to manage FOTA updates
Device restrictions profiles offer control over how the device handles over-the-air updates and allow you to set a freeze period for these updates. A freeze period is a specified time frame during which over-the-air updates are blocked from being installed on the device. This can be useful for organizations that want to prevent updates from being installed during critical business periods or when devices are in use.
Note
Not all device manufacturers support over-the-air updates.
To manage FOTA updates using device restrictions profiles:
- In the Microsoft Intune admin center, select Devices > Android.
- Select Manage devices > Configuration > Create > New policy
- Under Platform, select Android Enterprise.
- Under Policy type, select Templates.
- Under Fully Managed, Dedicated, and Corporate-Owned Work Profile, select Device restrictions > Create.
- Configure the system update settings as needed. For more information about these settings, see Device restrictions for Android Enterprise.