Deploy Devices with Android Zero-Touch Enrollment

Before users begin they need to purchase zero-touch devices directly from an enterprise reseller or Google partner (not through a consumer store). The reseller sets up the zero-touch enrollment account when the organization first purchases devices. To use zero-touch enrollment, users need a device running Android 8.0 Oreo (or later) or Pixel phone with Android 7.0 Nougat (or later) and the device needs to support work profiles.

Set up zero-touch enrollment:

Step 1: To manage zero-touch enrollment for organization from the zero-touch enrollment portal in the web browser. 

1. Open the portal.

2. Sign in using the administrator account.

Step 2: Add a device configuration to set provisioning options Users can create, edit, and delete configurations in the portal. We recommend to set a default configuration that’s applied to new zero-touch devices.

Each configuration combines:

1. The device policy controller (DPC) you want to install on the devices.

2. Enrollment options you want to apply to the devices.

3. Information that's displayed on the device to help your users during setup.

Add a new configuration:

1. Open the portal and sign in. 

2. In the navigation panel, click the option Configurations.

3. In the Configurations table, click the option Add.

4. Enter the details for the configuration.

5. Click Add.

6. (Optional) In the Default configuration panel, select the configuration and click Apply.

Step 3: Apply a configuration to devices.

When the user applies the configuration to a device and the device will automatically provision itself on first boot or next factory reset. 

Apply a configuration to a single device: 

Apply the configuration to a single device at a time by selecting devices in the portal,  then follow the below steps: 

1. Open the portal and sign in.

2. In the navigation panel click the option Devices.

3. Find the device and apply the configuration to (using its IMEI or serial number).

4. Choose an option:

a. Select the option Configuration and configure the settings the user wants to apply.

b. Select the option No config to temporarily remove the device from zero-touch enrollment.

Apply a configuration to many devices:

To apply the configuration for many devices you upload a CSV file. Each row in the CSV file lists the fields that include:

1. The ID of the configuration you want to apply.

2. A hardware identifier of the device you want to apply the configuration to.

The largest CSV file that can be uploaded to the portal is 50 MB. If it is more than 50 MB of data, consider splitting up the file. To prepare your CSV file, follow the below steps:

1. Open the portal and sign in.

2. In the navigation panel, click the option Devices.

3. Next to the Devices, click More.

4. To download a template CSV file, click Download example CSV.

5. Click the option Upload batch configurations.

6. Select the CSV file from the file picker.

7. Click the option Upload.

Once the processing is done then the portal shows a notification with a link to an upload status page. You can also receive an email summary. In the email click to see the details to open a status page. Any device that is not assigned a configuration appears with a reason for the error. 

Dual-SIM devices:

For a dual-SIM device it includes 2 modems that have 2 IMEI or MEID numbers. So use the first hardware ID because zero-touch enrollment identifies devices by modem 1. If you mistakenly claim a device using another IMEI or MEID number then the portal shows a new, separate device that zero-touch enrollment doesn't recognize or provision.

Step 4: (Optional) Deregister a device.

If you transfer the ownership then you might need to deregister the device. Select devices in the portal and deregister the device one at a time. 

After the device is deregistered, you need to register it into zero-touch enrollment again, you may need to contact your reseller. To temporarily exclude a device from the zero-touch enrollment, consider removing the configuration instead.

Deregister a device:

1. Open the portal and sign in.

2. In the navigation panel, click the option Devices.

3. In the Devices table find the device you want to deregister.

4. In the device row, click the option Deregister.

5. Then Click Deregister to confirm.