Zero-Touch Enrollment: Linking Account and Device Setup
To integrate Zero-Touch devices into the Mobile Guardian ecosystem effortlessly, start by setting up your enrollment method and connecting your Zero-Touch account.
This streamlined process involves two key phases: Dashboard Setup and Device Setup.
💻 Phase 1: Dashboard Setup
Follow these steps to configure the Mobile Guardian Dashboard and link your Zero-Touch Account for device enrollment:
Access Android Settings
- Navigate to the "Settings" on the Mobile Guardian Dashboard.
- Select "Android Settings".
- Go to Settings > Android Settings > Mobile Guardian Managed Account Enrollment.
Enrol Account and Bring Android to Work
- Follow the on-screen instructions and click "Enrol".
- You will be redirected to the "Bring Android to Work" page. Log in using a Gmail account and click "Get started".
Enrol Account
- Follow the on-screen instructions and click "Enrol".
- Enter a non-Google Workspace account (e.g., a personal Gmail address).
- After adding the email address, select Next.
- Select the Sign up for Android only option.
- You will be redirected to the "Bring Android to Work" page. Log in using a Gmail account and click "Get started".
Input Information
Enter the necessary information, such as the business name (mandatory), and optional contact details for the Data Protection Officer and EU Representative. Agree to and confirm the information, then select Complete Registration.
Configure EMM Settings
On the Android EMM Settings configuration page, select the following:
- Default Application Runtime Permission: Auto-grant
- System Update Policy: Automatic
- Active Directory Integration: Unauthenticated
- Click the "Save" button.
After the save has completed, ensure you select the Sync Profile button to ensure the Baseline Profile is active before enrolment.
Link Zero-Touch Account
- Navigate to the option to link your Zero-Touch account to your EMM provider and select Next.
- Select your desired Zero-Touch account and click Link.
- Click Next to finalise the linking process.
- Ensure to select "Save" once the account is linked to the dashboard.
Success! Your Zero-Touch Account has been successfully linked. A summary of the linked account is now displayed on the Mobile Guardian Dashboard:
- Zero-Touch Account: Displays your Account ID.
- Configuration Info: Shows the number of devices linked to the account and the policies applied.
- Support Info: Contains information visible to users/students during device enrollment.
📱 Phase 2: Device Setup
Zero-touch enrollment is an automated, streamlined method for IT admins to set up Android devices for schools.
What is Zero-Touch Enrollment?
- Automated Setup: When a device is turned on for the first time and connected to the WiFi, it automatically checks for the Mobile Guardian configuration.
- Full Management: If the settings are found, the device becomes fully managed and downloads the Mobile Guardian app through the Zero-Touch setup wizard.
- Efficiency: This approach ensures a quick, easy, and secure roll-out for multiple devices.
Device Enrollment Steps
Follow these steps to set up a new or factory-reset Android device:
- Initiate Setup: Power on the new or factory-reset device and connect it to the WiFi. The device automatically checks for the Mobile Guardian configuration.
- Confirmation Screen: The screen will indicate that the device is part of an organisation. Select Next to proceed.
Setup Wizard
Select Continue.
Select "Next".
Install Work Apps
Navigate to "Install work apps" and select "Install".
Configure Mobile Guardian
Navigate to "Configure Mobile Guardian" and select "Setup".
The device automatically applies the policies, school details, and other managed configurations. Upon application startup, the device is immediately locked to the Mobile Guardian application.
Device Naming
The user must then name the device and check a box to acknowledge and accept the Mobile Guardian Privacy Policy and Terms.
Student Registration
Following the final acceptance steps, selecting "Activate" triggers the appearance of the Student Registration Fields. The Student Name and Surname are to be added to the required fields.
Login Completion and Operational Mode
After the student completes the registration form and selects "Login," the enrollment process concludes.
Grant Permissions
After installing the Mobile Guardian app, authorise the following permissions:
After successfully installing the Mobile Guardian app, you will be prompted to provide usage access to the app.
Authorise the following permissions:
- Device Admin
- Package Usage Stats
- System Alert Window
- After granting permissions, tap Continue.
- The Mobile Guardian application will open to finalise the registration.
- Press the back button to redirect to the home screen.
You have now successfully enrolled your device with Mobile Guardian.
Please let us know if you found this helpful!
Thanks for reading 🙂