Cortado MDM – Manual

Android zero‑touch enrollment

38 views August 8, 2019 August 22, 2019 0

Android zero‑touch enrollment gives you the convenience of contactless configuration for your mobile devices. It is no longer necessary for an MDM profile to be manually rolled out to each individual device through the users or the admin.

With zero touch enrollment, the device will be checked on its first start up to determine whether a company configuration is present. If it is, the device configuration will start automatically. The Cortado Workplace app (DPC) will be downloaded in this process. This allows a large number of devices to be configured quickly and easily.

Requirements

  1. You need compatible Android devices that are enabled for contactless registration. You will find such devices listed here.
  2. The devices must be obtained from an authorised resale partner. You will find a list of all authorised partners here.
  3. You need a Google account that is linked to your company’s email address. It is not possible to use a private Google account. You can learn how to link your Google account to your company’s email address here.
  4. Your resale partner creates an account for you in the zero touch portal in your Google account. They also store all your devices there, using their IMEI or serial number.

Creating a configuration

  • If all the requirements have been met, select Control Panel→ Global Settungs→ MDM→ Open Zero-Touch Enrollment Portal.
open Zero-touch portal

open Zero-touch portal

  • Using the Google account described above, log in to the Zero-touch portal.
  • In the Configurations menu (left arrow in the illus.), click on the Plus button (right arrow in the illus.).
Zero-touch portal: adding configuration

Zero-touch portal: adding configuration

  • Now make the following settings:
Zero-touch portal: creating configuration

Zero-touch portal: creating configuration

    • Configuration name: Give your configuration a name of your choice.
    • EMM DPC: Select Cortado Workplace here.
    • DPC extras: Enter the following lines, replacing XXXXXX with the address of your Cortado MDM host (e.g. run.yourcortado.com). You can find the host name in the address bar of the Cortado management console.
{

"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": { 
"host": "XXXXXX",
"type": "zero-touch"
}
}
Copy address of your Cortado MDM host and replace XXXXXX (example)

Copy address of your Cortado MDM host and replace XXXXXX (example)

    • Company name: Enter your company’s name here.
    • Support email address: Enter your support email address here.
    • Support phone number: Enter your support phone number here.
    • Customised message: Enter a message to be displayed during the setup.
  • When finished, click on Add.

Distributing the configuration

  • In the menu item Devices (left arrow in illus.), select the device you require and under Configuration, assign the desired configuration to the device (right arrow in illus.).
Zero-touch portal: assigning configuration

Zero-touch portal: assigning configuration

Note! Only click on “Deregister”, if you no longer wish to use the device within the company. If you have unintentionally deleted a device, only the reseller can reregister the device for you.

  • A soon as devices that are restored to factory settings are restarted, the setup and provisioning of Android Enterprise will commence.
  • After starting the device, the user must connect to the WLAN and agree to the configuration.

log in to WLAN and confirm configuration

  • Once the configuration is complete, the user only needs to log in to Cortado. For this, the user uses the data that was used for registering for Cortado MDM (see the section Cortado MDM – Registration).
Enter credentials (left), fully managed device (right)

Enter credentials (left), fully managed device (right)

Was this helpful?