Skip to main content
Matrix42 Self-Service Help Center

Android Enterprise II: DPC Identifier Enrollment

Android Enterprise DPC identifier Enrollment

In September 2017 Google launched a new deployment method for devices. This method helps to make rollouts with Android devices more seamless and secure. One of the biggest advantages is that end users can unpack their devices and complete the enrollment with just a few steps. It is not needed anymore to use a personal Gmail account on the devices, instead it is more like a sign-in into their corporate account. As an administrator, you can be sure that your managed devices have all corporate policies in place. Also support cases will be much easier and less, because end users do not have extra steps during their enrollment process. For using DPC identifier, you’ll need a compatible device and as well an enterprise mobility management which is supporting the device owner mode of Android. In this case you are already on the right place with your Silverback environment.

DPC Identifier enrollment in details allows your customers to unbox their device and start the Out-of-box experience. At the point where users usually enter their Gmail Account details it is time to switch to the new deployment method. All your users’ needs to enter is our special Android Enterprise identifier afw#matrix42. After entering the identifier our Companion application, or in Google's language the Device Policy Controller (DPC) will be downloaded and the rest of the enrollment procedure can be done. This will activate the device owner on enrolled device, so that these device are now classified in Google's language as work-managed device. The necessary steps for preparation of DPC identifier enrollment will be described in the following chapters.  

Activate Managed Profile

For the usage of Android Enterprise is mandatory that a tag with Enabled Managed Profile is auto populated to your device(s). The registration details in the next chapter creates a temporary token for Android Enterprise, which is only valid for a couple of minutes. After the expiration of the token the Android Enterprise device container will disappear from the device. To prevent this it is necessary to assign an auto-populated tag to the devices.

To create a tag proceed the following steps:

  • Navigate to your Silverback Console
  • Navigate to Tags
  • Click Create New
  • Enter a Name (e.g. Android Enterprise) and a Description, activate Profile, enable Device Types  (Android and/or SamsungSafe), Enable Auto Population and click save
  • Navigate to Profile > Managed Profile
  • Enable Managed Profile
  • Proceed with Save & Close 

AE_014.png

After the Android Enterprise activation and the preparation of system or other designed tags you are ready to perform a device registration without the need of a private Gmail account.

Device Registration

Create your Enrollment Token 

  • Navigate to your Self Service portal (e.g. https://silverback.company.com/ssp ), login with your company credentials and click Sign In
  • Select your Ownership of the device and click Start (Phone Number is in this case not necessary)
AE_015.png

AE_016.png

 

  • Your activation one time password is readyAE_017.png

Step By Step Enrollment 

For the example enrollment a Samsung J5 (2017) device has been used with Android 7.0. Your experience may vary when using different devices or different Android versions.

  • Turn on the device
  • Change to the desired language and tab Start
  • Connect with Wi-Fi or use cellular
  • Accept at least End user License Agreement and Privacy Policy. Tab Next
  • Wait until some steps are prepared
  • Enter on Add your account page afw#matrix42
  • Uncheck the undesired Google Services and proceed with Next
  • Tap Install Matrix42 Silverback Companion
  • Wait until application download is finished
  • Confirm with Install
  • Wait until installation is finished
  • Accept Pop-Ups about Calendar, Phone Calls, Contacts, and Media
  • Agree Terms and Conditions
  • Proceed with next
  • Activated Checkbox "I consent" and proceed with OK
  • Wait until the Device Owner mode is activated
  • Now its time to have a One Time Password
  • Enter your Email or MDM username with your One Time Password and tab Next
  • Enter your MDM Server URL
  • Wait until first registration is done. The KLMS Agent screen will appear automatically (only on Samsung Devices)
  • Mark the checkbox on and proceed with confirm (only on Samsung Devices)
  • Wait again. You will notice that on the top Google Play Services will be updated
  • After a couple of seconds you will noticed that your Work account is added
  • Exit Companion application by clicking on the back button on your device
  • Now the setup is finished and your device is prepared as a work-managed device
  • You will notice that you have just a few applications installed
  • Go to Settings > Accounts > Accounts
  • You will see that you are connected to a managed account
  • Was this article helpful?