Disable OS software updates on Samsung tablets in Kiosk Mode via Blueprint System Updates

Android

Title: Samsung tablet shows OS update prompts in Kiosk Mode — disable via Blueprint

When a Samsung tablet is running in Kiosk Mode, OS software update prompts can still appear on screen, interrupting the kiosk experience and exposing device settings to end users.

Why this happens

Kiosk Mode restricts app access and navigation but does not, by itself, suppress Android OS update notifications. These prompts are delivered at the firmware level and require an explicit System Updates policy — configured in a Blueprint and pushed to the device — to be blocked.

Before you start

This solution requires Samsung Knox to be active on the device. It also works on Lenovo devices with CSDK enabled. To confirm Knox is active, go to Devices & Groups → [Device Name] → Device Details and verify that Knox is listed as enabled. If Knox is not enabled, the System Updates policy cannot suppress OS update prompts on that device.

Disable OS update prompts via Blueprint

In the Esper Console, navigate to Blueprints and open the blueprint applied to your Samsung tablets.
In the blueprint editor, scroll to the System Updates section. This section controls how and whether the device checks for and presents OS-level firmware updates.
From the System Updates dropdown, select Disable update.
Click Save to save your changes to the blueprint.
Click Publish to create a new published version of the blueprint. The change does not take effect on devices until it is published.
Navigate to Devices & Groups, select the affected Samsung tablets, and click Converge Blueprint to push the updated policy to the devices.

Verify: After convergence completes, go to Devices & Groups → [Device Name] → Blueprint Status and confirm it shows Synced. Because OS update checks occur on a firmware-defined schedule, monitor the devices over several days to confirm that no update prompts appear.

What this policy covers

This policy suppresses OS and firmware (OTA) updates only. App-level updates are managed separately under Apps & Configuration.
Kiosk Mode alone does not suppress OS update prompts — the System Updates policy in the Blueprint is required.
On devices that are not Samsung Knox-enabled or Lenovo CSDK-enabled, Esper cannot suppress OS update prompts. This is a device platform limitation.

If this doesn't resolve it

Before contacting support, collect the following:

Confirmation that the device is Knox-enabled (from Devices & Groups → [Device Name] → Device Details)
A screenshot or description of the Blueprint Status showing Synced on the affected device
The device's current firmware version (visible in Devices & Groups → [Device Name] → Device Details)
The Activity Feed entries from around the time convergence was applied (Devices & Groups → [Device Name] → Activity Feed)

Submit these details to Esper Support. A recent Samsung firmware update may have introduced a Knox compatibility issue that requires investigation.

Still need help?

If you're unable to disable OS software updates on your Samsung tablets through Blueprint System Updates, please submit a support ticket and include your device model, current Kiosk Mode configuration, and the specific update behavior you're experiencing.