Automating Android OS updates on kiosk-locked Samsung Knox devicesSolved

Participant
Discussion
3 weeks ago Jul 08, 2026

We have Android tablets enrolled and locked down in kiosk mode using Samsung Knox and Hexnode. From time to time, we need the devices to install Android OS updates without someone manually exiting kiosk and triggering the update on each device.

Is there a way to activate or automate Android OS updates from Hexnode? Should this be added to the existing kiosk policy, or does it need a separate policy?

Replies (3)

Marked SolutionPending Review
Hexnode Expert
3 weeks ago Jul 08, 2026
Marked SolutionPending Review

Hi @schyler-scott,

Android OS updates can be managed in Hexnode in two main ways, depending on how the device is enrolled.

1. Deploy OS update action
This can force an OS update on supported Android devices, but it applies only to ROM-enrolled devices where the Hexnode agent is installed as a system application.

2. Scheduled OS update policy
For Android Enterprise devices enrolled in Device Owner mode, you can configure OS update behavior from: Policies > Android > Security > OS Updates

If you want devices to install updates as soon as a new OS version is available, select Update automatically. After saving and associating the policy with the devices, Hexnode will instruct eligible devices to download and install available OS updates based on that setting.

This policy can be configured in an existing policy or a separate policy, as long as it is associated with the target devices.

Regards,
Sienna Carter
Hexnode UEM

Marked SolutionPending Review
Participant
2 weeks ago Jul 18, 2026
Marked SolutionPending Review

Does this still work if the tablet is currently locked in kiosk mode with a browser session open? Our kiosks usually have a browser running all day.

Marked SolutionPending Review
Hexnode Expert
2 weeks ago Jul 18, 2026
Marked SolutionPending Review

Hi @harold,

The automatic OS update policy can still take effect while the device is locked in kiosk mode, even if a browser session is active.

However, there is an important behavior to consider: when the update is installed, the device may reboot immediately. This can interrupt anyone currently using the kiosk.

If uninterrupted kiosk availability is important, consider using an update schedule or inactive-hour based configuration instead of immediate automatic installation, where available for your device and enrollment type.

Regards,
Sienna Carter
Hexnode UEM

Save