Skip to main content

Register for Android Zero Touch Enrollment

Snow Device Manager supports the Android Zero Touch Enrollment program for bulk and automatic enrollment of Android devices supporting the Android Zero Touch Configuration (AZTC) framework.

To register for Android Zero Touch enrollment:

  1. Contact your device reseller to obtain an account for the AZTC portal.

    Note: Your reseller must be AZTC certified to provide this service.

  2. Build the Snow Device Manager profile in the AZTC portal by providing a JSON custom configuration string.

    Example 6.
    {
    "android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":true,
    "android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":{
    "sdm_customer_name":"Example Customer",
    "sdm_server_url":"https://sdm.yoursdmurl.com",
    "sdm_enrollment_type":"server",
    "sdm_auto_enroll":false,
    "sdm_silent_enroll":false,
    "sdm_force_enroll":true,
    "sdm_lock_enroll_method":false,
    "sdm_domain":"",
    "sdm_username":"",
    "sdm_password":"",
    "sdm_allow_backup":"true"
    }
    }
    


    The following configurations can be set in the JSON string:

    • PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED (mandatory) - Set to true to enable all system apps. Set to false to disable all system apps.

    • sdm_customer_name (mandatory) - Customer name. For reference only.

    • sdm_server_url (optional) - Used for enrollment with username. Valid input is a Snow Device Manager server address.

    • sdm_enrollment_type (mandatory) - valid input is server, usercredentials or companycode. Typically use usercredentials.

    • sdm_force_enroll (mandatory) - Set to true to force the device to enroll. Set to false to allow the user to exit enrollment.

    • sdm_lock_enroll_method (mandatory) - When set to true, the only available enrollment method is the method configured in sdm_enrollment_type. When set to false, all enrollment methods are available.

    • sdm_domain (optional) - Used for enrollment with username. Valid input is a Snow Device Manager domain name.

    • sdm_allow_backup (mandatory) - Set to true to allow backup on the device. Set to false to restrict backup on the device.

    The remaining syntax is for upcoming functionality and should be left unchanged.

We recommend using AZTC in combination with the user credential/appstore device enrollment method. In order to do so, the following configurations are needed:

  1. Activate Appstore Enroll in the domain, see Manage services.

  2. Add an email domain binding to allow for routing enrollment requests to your domain.

    This step is only needed for enrollment with email address.