US Patent 11782693 Enterprise firmware management

Examples described herein include systems and methods managing firmware versions of user devices that are enrolled in an enterprise mobility management system. The system can include a management server that sends profiles to enrolled devices, causing those devices to restrict further firmware updates and register with a firmware server. The management server can retrieve available firmware versions and display those in a console. An administrator can select target firmware versions in the console. The management server can the cause the enrolled devices to update to the target firmware versions. This can include sending a call from the management server to the firmware server, causing an automatic update. It can also include sending a command from the management server to an enrolled device, causing the enrolled device to prompt a user prior to requesting a firmware update. This can allow an administrator to prevent user devices from installing firmware updates that could expose the enterprise to security risks or negatively impact operation of enterprise applications.