Advanced Android Zero-Touch enrollment support for Android Enterprise devices

Content

MaaS360 announces much-awaited advanced zero-touch enrollment support for Android Enterprise devices. With the new zero-touch feature, the enterprises purchase devices through an authorized reseller. The reseller would then create an Android Zero Touch portal and transfer the device-related information: IMEI number and Serial number to the portal. An authorized admin can log into Zero Touch console and assign a device to IBM MaaS360 DPC (Device Policy Controller) through a configuration.

Besides IBM MaaS360 DPC, the configuration also consists of DPC extras, which allows the administrators to pre-populate the devices with basic information such as Enrollment Email ID and Corporate ID.

The IBM MaaS360 DPC along with other configurations will reach the device when the device boots for the first time or on device reset.

Prerequisite

Ensure that MaaS360 portal > Setup > Services > Mobile Device Management > Enable Android Enterprise Solution Set > Manage Google Play is configured.

Create DPC extras configuration

To create a DPC extras configuration,

1. Logon to MaaS360 portal.

2. Click Devices > Enrollments.

3. In the Enrollments page, click Other Enrollment Options > Android zero touch enrollment.

Result: Android zero touch enrollment dialog box appears.

4. Provide the details and click Save.

5. Download the file and copy the JSON text in the file to DPC extras while creating a profile on Google zero-touch portal.

Create configuration

To create a configuration,

1. In the Google Zero Touch console, click Configurations.

2. Click (+) icon in the Configurations section.

Result: The New Configuration dialog box appears.

3. Provide the following details:

• Configuration Name: Provide a name for the configuration.
• EMM DPC: Select IBM MaaS360 Production from the drop-down.
• DPC extras: Copy the DPC extras in the space provided.
• Company Name: Provide a company name.

4. Click Apply.

Result: The configuration is created.

Note: If a configuration is already created, click Edit next to that configuration to make any changes.

Assign configuration to a device

To assign a configuration to a device,

1. In the Google Zero Touch console, click Devices.

2. Select a configuration for a device.

Note: A device can be identified by its IMEI number.

Result: A confirmation message appears.

3. Select Confirm.

Result: The EMM DPC (IBM MaaS360 Production) is pulled down to the device on booting the device for the first time or on device reset.

Device enrollment

When the device is powered on for the first time or on device reset, it requires the administrators to perform the following steps before the enrollment process begins.

1. On the device startup page, click Start.

2. Connect to a Wi-Fi network and click Next.

Result: Zero Touch configuration is pulled down to the device and MaaS360 MDM for Android agent is displayed.

3. Click Accept & Continue to initiate the enrollment process.

Result: The MaaS360 agent is installed and the device is automatically enrolled.