Skip to main content

Device Enrollment

This guide covers all methods for enrolling Android devices into your AndroidNexus enterprise.

Enrollment Methods​

AndroidNexus supports multiple enrollment methods to fit different deployment scenarios:

MethodBest ForSetup Required
QR CodeIndividual devices, quick setupMinimal
Zero-TouchBulk corporate deploymentsDevice reseller setup

QR Code Enrollment​

The most common method for enrolling devices.

Creating a QR Code​

  1. Navigate to Onboarding in the top navigation bar
  2. Click Create Token (orange button in top right)
  3. Configure options:
    • Token Name - Descriptive name for tracking
    • Policy - Policy to apply on enrollment
    • Expiration - When the token expires
    • Use Limit - Number of devices (or unlimited)
  4. Click Generate
  5. Download or display the QR code

Scanning the QR Code​

New Device (Factory Reset)​

  1. Power on the device
  2. Connect to Wi-Fi when prompted
  3. At the welcome screen, tap 6 times anywhere
  4. A QR scanner will launch
  5. Scan your enrollment QR code
  6. Follow on-screen prompts

During Setup Wizard​

  1. When asked "Copy apps & data?", tap Don't copy
  2. At the Google sign-in, tap Skip (if available)
  3. When asked about work setup, choose Set up for work
  4. Scan the QR code when prompted
Camera Not Opening?

On some devices, tap the screen 6 times at the "Hi there" or language selection screen. The tap target is usually near the bottom of the screen.

Zero-Touch Enrollment​

For large-scale deployments, zero-touch enrollment automatically configures devices when they first connect to the internet.

Prerequisites​

  • Devices purchased from an authorized reseller
  • Zero-touch portal access
  • AndroidNexus enterprise configuration

Setup Process​

  1. Reseller assigns devices to your organization in the zero-touch portal
  2. Configure AndroidNexus as the EMM provider in zero-touch portal
  3. Create an onboarding token in AndroidNexus with your desired policy
  4. Link the token to your zero-touch configuration
  5. Unbox and power on the device - it enrolls automatically when connected to Wi-Fi

Supported Manufacturers​

  • Google Pixel (all models)
  • Samsung Galaxy (selected models)
  • Motorola (business devices)
  • Zebra (all rugged devices)
  • Honeywell (enterprise devices)

Enrollment Options​

Policy Assignment​

Choose which policy applies when devices enroll:

  • Default Policy - Enterprise-wide default
  • Specific Policy - Selected policy for this token
  • No Policy - Apply policy manually after enrollment

Skip Setup Steps​

Configure which setup wizard steps to skip:

  • Google account setup
  • Screen lock setup
  • Terms and conditions
  • Location services

User Affinity​

  • User Affinity - Associate device with a specific user
  • No User Affinity - Shared or kiosk device

Work Profile Enrollment​

For BYOD (Bring Your Own Device) scenarios.

User-Initiated Enrollment​

  1. User downloads Android Device Policy from Play Store
  2. Scans the QR code from the onboarding token
  3. Accepts work profile creation
  4. Work profile is created alongside personal profile

Differences from Fully Managed​

FeatureFully ManagedWork Profile
Device ownerOrganizationUser
Personal appsNot allowedAllowed
Device wipeFull factory resetWork data only
Camera controlFullWork profile only
Location trackingAlways availableWork hours only

Dedicated Device Enrollment​

For kiosks, signage, and single-purpose devices.

Kiosk Mode Setup​

  1. Create a kiosk policy before enrollment
  2. Generate enrollment token with kiosk policy
  3. Enroll device using any method
  4. Device boots directly into kiosk mode

Multi-App Kiosk​

Allow multiple apps while restricting access:

Kiosk Apps:
  - com.company.app1 (Primary)
  - com.company.app2
  - com.android.chrome

Allowed Features:
  - Home button: Yes
  - Recent apps: Yes
  - Status bar: No
  - System navigation: Limited

Troubleshooting Enrollment​

Common Issues​

ProblemSolution
QR code not scanningEnsure good lighting, clean camera lens
"Invalid token" errorCheck token hasn't expired, verify enterprise ID
Enrollment times outCheck network connectivity, try again
"Already managed" errorFactory reset the device first
Work profile creation failsEnsure device has enough storage

Enrollment Logs​

View detailed enrollment logs:

  1. Go to Devices and click on the enrolled device
  2. Click the Event Log tab in the device detail view
  3. Review step-by-step enrollment events and device activity history

Best Practices​

  1. Test enrollment on one device before bulk deployment
  2. Use descriptive token names to track enrollment batches
  3. Set appropriate expiration - don't leave tokens active forever
  4. Monitor enrollment events for failures
  5. Have backup method - prepare both QR and token methods

Next Steps​