If you do not have access to the Android Partner Portal but still wish to enjoy the benefits of a fully registered AMA Zero-Touch enrollment with Mobile Guardian, this guide is for you. This setup replaces the Android Unauthenticated enrollment with Mobile Guardian.
The process involves two key steps: Dashboard setup and Device setup. Follow the steps outlined below to complete the enrollment process efficiently.
Dashboard Setup:
Follow these steps to configure the Mobile Guardian Dashboard to facilitate the enrollment of Zero-Touch Devices:
Access Settings:
- Navigate to the "Settings" on the Mobile Guardian Dashboard.
- Select "Android Settings".
- Go to Settings > Android Settings > Mobile Guardian Managed Account Enrollment
#Note: Do not use Google Workspace Account Enrollment
Enrol Account:
- Follow the on-screen instructions and click "Enrol".
- Enter a non-Google Workspace account eg. personal Gmail address
- After adding the email address, select Next
- Select sign-up under the Sign up for Android only option
- You will be redirected to the "Bring Android to Work" page. Log in using a Gmail account #Note: not a Google Workspace Account and click "Get started".
Input Information:
Enter the necessary information such as the business name (mandatory), and optional contact details for the Data Protection Officer and EU Representative. Agree to and confirm the information, then select Complete Registration.
Configure EMM Settings:
On the Android EMM Settings configuration page, select the following:
- Default Application Runtime Permission: Auto grant
- System Update Policy: Automatic
- Active Directory Integration: Un-Authenticated
- Click the "Save" button.
#Note: When removing the configuration from Android EMM Settings, it is highly recommended to first unlink the Zero-Touch Account before using the un-enrol option found at the bottom of the Android EMM Settings screen on the Mobile Guardian Dashboard.
- After the save has completed, ensure you select the Sync Profile button to ensure the Baseline Profile is active before enrolment.
Device Setup:
Trigger Setup Prompt:
On a new or factory-reset device, tap the screen six times to prompt the device to scan a QR code.
Scan QR Code:
- To complete the setup, open the Mobile Guardian dashboard, navigate to "Devices" > "Add New School Device," and select the Android tab.
- You will scan the bottom QR code displayed under the Android Management API code to initiate the Zero-touch setup wizard.
#Note: If you encounter issues scanning the QR code during device enrollment, you can manually enrol your Android device using the Android Management API.
Device Restart:
After scanning, the device might restart (device dependent) and indicate that it is part of an organization. Select "Next" to proceed.
Setup Wizard:
Select Continue
Proceed:
Select "Next".
Install Work Apps:
Navigate to "Install work apps" and select "Install".
Configure Mobile Guardian:
Navigate to "Configure Mobile Guardian" and select "Setup".
Scan Second QR Code:
To complete the setup, scan the second QR code (Account Code).
Select Region:
- On the device choose your Region and then tap Scan.
-
Accept the Privacy and Terms by selecting I accept and agree to the Privacy and Terms.
- Click Activate.
Enter Student Information:
Enter the student's name and surname, then select "Login".
Grant Permissions:
After installing the Mobile Guardian app, authorize the following permissions:
After successfully installing the Mobile Guardian app, you will be prompted to provide usage access to the app.
Authorise the following permissions:
- Device Admin
- Package Usage Stats
- System Alert Window
- After granting permissions, tap Continue.
- The Mobile Guardian application will open to finalise the registration.
- Press the back button to redirect to the home screen.
#Note: On some devices, a restart may occur shortly after registration to apply device policies.
You have successfully enrolled your device with Mobile Guardian.
Please let us know if you found this guide helpful!
Thanks for reading! 🙂