Zero-Touch Enrollment

Zero-Touch Enrollment is an Android Enterprise provisioning method that allows devices to automatically enroll into an MDM platform the first time they are powered on, without any manual setup steps. Devices are pre-configured by the reseller or manufacturer before shipping.

How Zero-Touch Works

1. Device is pre-configured at factory with organization’s Enterprise ID, 2) Device is powered on for first time by user, 3) Device automatically connects to network, 4) Device contacts Google’s servers and retrieves organization’s enrollment credentials, 5) Device automatically enrolls and applies policies.

Zero Manual Steps

Zero-touch requires zero user intervention for enrollment. Users power on the device and it automatically enrolls. This is dramatically different from manual or QR code enrollment where users must perform setup steps.

Reseller Configuration

Zero-touch requires the device reseller to pre-configure devices before shipping. Organizations provide their Enterprise ID and enrollment configuration to the reseller. The reseller configures devices at their warehouse.

Device Registration

Devices must be registered with the mobile carrier (for connectivity) before deployment. The reseller registers devices using IMEI or serial numbers. This ensures devices are recognized and enrolled correctly.

Scalability

Zero-touch enrollment scales to large deployments. Organizations can order thousands of pre-configured devices and users power them on to get fully enrolled devices. This dramatically reduces deployment costs.

Network Requirement

Zero-touch requires network connectivity during initial setup. Devices must connect to the internet to retrieve enrollment credentials. Offline devices require alternative enrollment methods.

Policy Application

Along with enrollment, initial policies can be applied during zero-touch setup. Devices receive default policies on first power-up before users access them.

User Experience

Users power on a device and it works with corporate policies already applied. There’s no setup confusion or manual configuration. IT staff don’t need to touch devices.

Cost Reduction

Zero-touch enrollment significantly reduces deployment costs. IT staff don’t need to configure devices manually. Resellers handle pre-configuration more efficiently than individual IT staff.

Implementation Partners

Zero-touch is available from most major device manufacturers and resellers including Samsung, Dell, HP, and others. Organizations should verify zero-touch support when selecting devices and resellers.