Register for Android Zero Touch Enrollment

Snow Device Manager supports the Android Zero Touch Enrollment program for bulk and automatic enrollment of Android devices supporting the Android Zero Touch Configuration (AZTC) framework.

To register for Android Zero Touch enrollment:

  1. Contact your device reseller to obtain an account for the AZTC portal.

    Note that your reseller must be AZTC certified to provide this service.

  2. Build the Snow Device Manager profile in the AZTC portal by providing a JSON custom configuration string.

    Example 11.
    {
    "android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":true,
    "android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":{
    "sdm_customer_name":"Example Customer",
    "sdm_server_url":"https://sdm.yoursdmurl.com",
    "sdm_enrollment_type":"server",
    "sdm_auto_enroll":false,
    "sdm_silent_enroll":false,
    "sdm_force_enroll":true,
    "sdm_lock_enroll_method":false,
    "sdm_domain":"",
    "sdm_username":"",
    "sdm_password":"",
    "sdm_allow_backup":"true"
    }
    }
    


    The following configurations can be set in the JSON string:

    • PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED (mandatory) - Set to true to enable all system apps. Set to false to disable all system apps.

    • sdm_customer_name (mandatory) - Customer name. For reference only.

    • sdm_server_url (optional) - Used for enrollment with username. Valid input is a Snow Device Manager server address.

    • sdm_enrollment_type (mandatory) - valid input is server, usercredentials or companycode. Typically use usercredentials.

    • sdm_force_enroll (mandatory) - Set to true to force the device to enroll. Set to false to allow the user to exit enrollment.

    • sdm_lock_enroll_method (mandatory) - Set to true if email address is the only available enrollment method. Set to false if all enrollment methods are available.

    • sdm_domain (optional) - Used for enrollment with username. Valid input is a Snow Device Manager domain name.

    • sdm_allow_backup (mandatory) - Set to true to allow backup on the device. Set to false to restrict backup on the device.

    The remaining syntax is for upcoming functionality and should be left unchanged.

We recommend using AZTC in combination with the user credential/appstore device enrollment method. In order to do so, the following configurations are needed:

  1. Activate Appstore Enroll in the domain, see Manage services.

  2. Configure a domain keyword to allow for routing enrollment request to your domain.

    This step is only needed for enrollment with email address.