Managing FRP for Enterprise Mobile Devices

Enabling enterprises to use mobile devices multiple times even with Factory Reset Protection (FRP)

Factory Reset

The Factory Reset option allows removing the complete settings configured on a smartphone. In case a device is stolen, the device is factory reset to remove all previous data and original device owner’s identity including email address and mobile number. This results in a clean device that can be used by anyone.

Factory Reset Protection

Factory Reset Protection (FRP) prevents to use the device if it is factory reset by unauthorized user. During the device setup (after factory reset) it requires the login credentials such as email address and passwords that were configured on the device. This means that if your device is lost or stolen, no one else will be able to reset or use it.

Moreover, if enterprise-managed devices are allotted to the employees for business usage, the devices are configured with email addresses of the employees. If the FRP has been enabled on the devices, it will prevent misuse of the device after factory reset.

How to Setup/Enable Factory Reset Protection

In an organization, devices are allotted to different users based on requirement. For example, when an employee leaves the organization, the device is handed over to another employee for which the factory resetting would be required.

To setup/enable Factory Reset Protection (FRP), ensure the following requirements before you allot a device to an employee.

1. Make sure you are using the devices that are Android 6.0 or later.
2. The devices must be ADO-enabled.
3. You must associate your corporate email account with the Google user ID and assign that policy to the devices. Hence, you need to
   • Generate a Google user ID
   • Associate the Google user ID with the corporate email account in Seqrite mSuite.
4. Make sure that thus created policy is applied to the devices and the policy works fine.

How to Generate Google user ID

To generate a Google user ID, follow these steps.

1. Navigate to People:get.
2. In the Try this API window, configure the following settings.

3. Click Execute.
4. Sign in with your Google account when prompted.
   • Make sure you use a corporate email address as a master account before you handover the device to the employee.
   • This email account will be used to unlock a device on which FRP is enabled.
5. Select Allow to grant the required permissions.

   A 21-digit ID is generated in the application/json tab in the id field.

6. Go to the Seqrite mSuite console, associate the Google user ID with the corporate email account, and then apply the policy to the devices.

Associate Google user ID with Corporate Email Account

To associate the Google user ID with the corporate email account in Seqrite mSuite, follow these steps.

1. Log in to Seqrite mSuite.
2. Navigate to Profiles > Polices.
3. Select Add Policy > Add.
4. Write a policy name and a description. Click Next.
5. On the Edit Policies tab, scroll down until you find the Factory Reset Protection option.
6. Enable the Factory Reset Protection option.
7. Enter the corporate email address and Google user ID.

8. Click Save.

   You can apply this policy to a group. The policy will be applied to all the devices in that group.