Zero-Touch AMA | Dashboard Setup

This guide details how administrators can integrate and provision Android Zero-Touch Enrollment within the Mobile Guardian Dashboard, enabling automated out-of-the-box management across corporate Android endpoints.

Overview of Android Zero-Touch Enrollment

Android Zero-Touch enrollment streamlines large-scale deployments by automating device provisioning directly upon first boot. When an unboxed or factory-reset device connects to Wi-Fi or cellular data, it automatically queries Google's Zero-Touch servers, fetches the Mobile Guardian EMM configuration payload, and silently installs the management client.

Pre-Requisites & Requirements

• Zero-Touch Account: Must be provisioned by an authorized Android Enterprise reseller partner.
• Compatible Hardware: Android 9.0+ (or compatible Android 8.0+ enterprise-ready endpoints) purchased through an authorized Zero-Touch partner.
• Admin Account: A non-Google Workspace Gmail account (standard personal or dedicated admin account) for the initial Android Enterprise handshake.

Dashboard Configuration

Access Managed Account Enrollment:

• Log in to the Mobile Guardian Dashboard, navigate to Settings > Android Settings, and select Mobile Guardian Managed Account Enrollment.

Register Android Enterprise Account

Note: Do not use a Google Workspace domain email.

• Follow the on-screen instructions and click "Enrol".

• Enter your dedicated standard Gmail address and click Next. 

• Select the Sign up for Android only option. 

• When redirected to the Bring Android to Work portal, click Get started. 

Input Information: 

• Enter the necessary information, such as the business name (mandatory), and optional contact details for the Data Protection Officer and EU Representative. Agree to and confirm the information, then select Complete Registration.

Configure Android EMM Policies

On the Android EMM Settings configuration page, set the baseline system policies

• Mobile Guardian Agent Install Type: Required for setup
• Default Application Runtime Permission: Set to Auto-grant.
• System Update Policy: Set to Automatic.
• Active Directory Integration: Set to Unauthenticated (unless integrating with an existing directory service).

• Click Save, then click Sync Profile to activate the baseline payload.

Define Compliance & Registration Fields

• Terms of Service URL (Optional): Enter an enterprise terms URL for display during device setup.

• Registration Form Fields: Customise employee onboarding fields captured post-installation (First Name and Last Name remain mandatory by default).

Link Zero-Touch Account

Under Android Settings, proceed to link your Zero-Touch account

• Click Next on the link prompt.

• Select the target Zero-Touch Account ID and click Link.

• Click Next to finalise the linking process.

• Enter the corporate Support Information (helpdesk contact details) displayed to employees during initial device onboarding

• .Click Save to confirm.

Account Summary & Unlinking Precaution

Once linked, the dashboard displays:

• Zero-Touch Account ID: The enterprise identifier registered with Google.
• Configuration Info: Total count of linked devices and deployed policies.
• Support Info: Contact metadata presented to employees during setup.