Android Enterprise Enrollment Using AMA

Print Friendly, PDF & Email

Before you begin

This procedure enrolls your business-owned Android devices as Android Enterprise devices. It standardizes device management for Android devices across different OEMs.

Prerequisites

  • Wi-Fi connection is a must for enrollment.
  • Devices having Android versions 7 and above can only be enrolled using AMA.
  • These devices should not be enrolled previously on mSuite.
  • You can enroll the device to the mSuite console through either of Users, Groups, or Devices options.
  • Once the device is added to the mSuite console, configure the required policies and app configurations to the device
Note:
Before getting devices enrolled, ensure that
Android Kiosk Mode is not selected in Android app management.
– Setting for Disable Apps Installation is not set to enabled.
Note:
The enrollment process may take time depending upon the speed of the network connection.

To prepare the mobile device for AMA enrollment, you need to follow these steps:

  1. Perform a factory reset of your phone
  2. Android Enterprise Enrollment of a device using QR code
  3. Setting System Permissions

1) Performing a factory reset on your phone

You can either use a new device or you need to perform a factory reset on your device. When you perform a factory reset, all the data on the device is permanently deleted. Ensure that you take a backup of your data.

  1. On the device, tap Settings > System > Reset. Please note that the terminology in your device may differ.
  2. Tap Reset Phone.

    A Welcome screen is displayed after a factory reset of the device.
    Next, you need to do Android Enterprise enrollment of your device using a QR Code.

2) Android Enterprise Enrollment of a device using QR code

The admin or the end user can enroll the device.

  • If you (admin) are enrolling the device, you can use the QR code displayed on the mSuite console during enrollment.
  • If the device user is performing the enrollment, the user can use the QR code that is sent to the email address.
  1. On the Welcome screen, tap 6/7 times below the word Welcome. Devices may show “Welcome”, “Hi” or “Hello” as per the device models. Based on the device model, scenarios either A or B or C will follow. Follow the steps as applicable.
A: QR Code scanner is displayed B: QR Code scanner is not displayed C: QR Code scanner is not displayed (Applicable to some devices only
i. Scan the QR code displayed on the mSuite console. Alternatively, the end user performing the enrollment process can scan the QR code received on the email address specified earlier.
ii. Next, choose the appropriate option to connect to the Internet. You are redirected to This device belongs to your organization screen.
iii. Tap Next.
You are redirected to Let’s set up your work device screen.
i. Tap START on the Welcome screen > Connect to mobile network screen is displayed.
ii. Insert SIM card > Connect to Wi-Fi screen.
iii. Select the Wi-Fi network from the list. Tap Accept & Continue on the Privacy and software updates screen.
iv. On Copy apps and data screen, tap Next. The Google Sign in screen is displayed.
v. Enter the email address as afw#setup and tap Next.
vi. On This device belongs to your organization screen, tap Next. The QR code scanner is displayed.
vii. Scan the QR code displayed on the mSuite console or scan the QR code received on your email address. You are redirected to Let’s set up your work device screen.
i. Connect to the Internet and the QR code scanner\ is automatically downloaded on the device.
ii. Scan the QR code displayed on the mSuite console or scan the QR code received on your email address.
iii. You are redirected to Let’s set up your work device screen.
  1. Tap Accept & continue on the Let’s set up your work device screen.

    You are redirected to This device isn’t private screen.

  2. Tap Next.
    You are redirected to Updating device screen and after that to the Registering device screen.

Note:
This process may take some time as apps are updated to the latest version from the factory version.
  1. Next, depending on the password and app configurations policy configured by default, follow the steps as applicable.
  • If the default password and app configuration policies are configured, follow these steps:

    i. You are redirected to the screens for setting the password and installing the apps. Follow the instructions for setting up the screen lock as required. Tap Install for installing mSuite and the recommended apps that are configured through the default app configuration.

Note:
Installation of apps may take time depending upon the network connection.

ii. You are redirected to the Google services screen. Proceed to step 5 and further.

  • If the default password and app configuration policies are not configured, you are redirected to the Updates Privacy and Software screen.

    i. Tap Accept & continue.

  1. On the Google services screen, tap Accept.

    You are all set/Your device is ready to go! screen is displayed.

  2. Tap Done. Seqrite mSuite app is now installed on the device.

Note:
At this point, on the Device Details page, the device Enrollment Status is shown as AMA Enrolled as the procedure is partially completed. Next, you need to set the System permissions after which the enrollment process is completed.

3) Setting System permissions

You need to complete the further steps after which the device Enrollment Status is displayed as Enrolled on the Device Details page.

​ 1. On your device, tap the mSuite app. You are redirected to the License Agreement screen.

​ 2. Tap I Agree.

​ You are redirected to the Seqrite mSuite Permissions screen.

​ 3. Tap Continue.

​ You are redirected to the All File Access dialog box.

​ 4. Tap I ACCEPT.

​ You are redirected to the All files access screen.

​ 5. Enable the toggle button Allow access to manage all files and tap the Back icon.

​ 6. Tap the I ACCEPT on Accessibility Settings dialog box. You are redirected to Seqrite mSuite screen

​ 7. Enable the toggle buttons for Use Seqrite mSuite and Seqrite mSuite shortcut tap the Back icon.

​ Seqrite mSuite icon now displays Allowed status on the screen. Tap the Back icon.

8. Tap I ACCEPT on Device Location dialog box.
You are redirected to App info screen.

9. Tap Permissions and select Location permission.

10. On the Location permission screen select the permission as required. Enable the toggle button to Use precise location and tap Back icon.

11. Tap Yes on the Phone dialog box.
You are redirected to Seqrite mSuite Permissions screen.

12. A green tick mark indicates that the permissions are granted by the user. A red exclamation mark indicates that the permissions are not granted by the user.

13. Tap Continue .
Device Enrollment proceeds to enroll the device.

14. The device user should grant Seqrite mSuite device access permissions by enabling the toggle buttons for the following or choose to grant permissions later:

• Do Not Disturb

• Modify System Setting

• Overlay

• App Usage Access

• Autostart

A green tick mark indicates that the permissions are granted by the user. A red exclamation mark indicates that the permissions are not granted by the user.

15. A prompt appears asking confirmation to allow mSuite to run in the background.

16. Tap Yes .
A prompt appears requesting permission for app to always run in the background.

17. Tap ALLOW .

The device is enrolled. You can view the Enrollment Status on the Device Details page on mSuite console displayed as Enrolled .

Was this page helpful?