Embedding company-owned Android devices via zero touch registration (COBO/COPE)

With Google zero-touch enrolment, Android devices are assigned directly to your company and set up exclusively via the linked MDM solution. Pre-configuration of the devices is not required. They can be made available to users in their original packaging. When the devices are started for the first time, the system checks whether a company configuration is available. If this is the case, the device configuration is started automatically. Individual device configuration by the user is therefore not possible.

Note! Create up to four additional administrator accounts to configure Cortado MDM.

Requirements

Creating a configuration

Requirements

1. Android zero-touch enrollment is now available on all phones and tablets running Android 9.0 and up.
2. The devices must be obtained from an authorised resale partner. You will find a list of all authorised partners here.
3. You need a Google account that is linked to your company’s email address. It is not possible to use a private Google account. You can learn how to link your Google account to your company’s email address here.
4. Your resale partner creates an account for you in the zero touch portal in your Google account. They also store all your devices there, using their IMEI or serial number.

Creating a configuration

• If all the requirements have been met, select Administration→ Settings→ Android Enterprise→ Open Zero-Touch Enrollment Portal.

• You will then be redirected to the zero-touch customer portal.
• Using the Google account described above, log in to the Zero-touch portal.
• In the menu, click on Configurations (left arrow in illus.) and on Add configuration (right arrow in illus.).

Now make the following settings:

• Configuration name: Give your configuration a name of your choice.
• EMM DPC: Select Cortado here.
• DPC extras: Copy the following settings to the clipboard and paste them under DPC Extras. Please note that the entry under "solutionType" must be changed. Instead of XXXXX, enter either "FM" or "WPCOD" here (example in illus.). Depending on whether the devices are intended for business use only ("FM" for COBO) or for business and private use ("WPCOD" for COPE).

{

"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": { 
"host": "go.mycortado.com",
"solutionType": "XXXXX",
"type": "zero-touch"
}
}

• Company name: Enter your company’s name here. Zero-touch enrollment shows this company name to your device users during device provisioning. Shorter names that are easily recognized by your organization's employees work best. You can use uppercase or lowercase letters (without accents) and spaces.
• Support email address: Set this to an email address your users can email, using another device, to get help.
• Support phone number: Set this to a telephone number your device users can call, using another device, to get help. 
• Customised message: Add one or two sentences to help your users contact you or give them more details about what's happening to their device. Zero-touch enrollment displays this message before the device is provisioned.
• When finished, click on Add.

Add further configurations if required. For example, you can store a configuration for COBO devices and a configuration for COPE devices.

Set default configuration

Define a default configuration if necessary. This is then applied to new devices.

• To do this, click on the pencil button (upper arrow in illus.). You can then open the drop-down menu (lower arrow in illus.) and select your default configuration.

Change configuration

If you have added several configurations, you can assign the desired configuration to the individual devices. 

• To do this, select the relevant device in the Devices menu item (left arrow in illus.), click on Edit (right arrow in illus.) and assign the desired configuration to the device (bottom arrow in illus.).

Note! Only click on “Remove”, if you no longer wish to use the device within the company. If you have unintentionally deleted a device, only the reseller can re-register the device for you.

• Users of COBO devices then proceed as described here.
• Users of COPE devices then proceed as described here.
• If you would like to set up the devices for your users yourself instead, proceed as described here.

Note! Before users can register their devices, they must be imported into the administration portal. You can find all the necessary information on this in our help articles on importing users and groups.