IT admins use zero-touch enrollment to preconfigure work-managed Android devices. This document explains how device resellers can use zero-touch enrollment to help their enterprise customers save time provisioning devices. If you're not a reseller, see the help center for enterprise customers.
What is zero-touch enrollment?
Devices provision themselves, out of the box, as work-managed devices. Advantages of zero-touch enrollment include:
- Customer IT admins don't need to provision individual devices because a config can be automatically set for purchased devices in bulk.
- Customers stay in control of their devices at all times—even after factory resets.
- End users, after receiving a boxed device, just need to sign in.
Zero-touch enrollment stores a customer's provisioning config for a device. After starting up, a device checks for a provisioning config. If a customer has assigned the device a config, the device provisions itself. The device downloads and installs the customer's chosen device policy controller (DPC) app. The DPC app, using the customer's config data, provisions the device. To learn more about managed devices, read Android Enterprise.
- Customers purchase devices from resellers.
- Resellers create new customer zero-touch enrollment accounts
- Resellers assign devices to customers.
- Customers create EMM configs for their enterprise.
- Customers map purchased devices to EMM configs.
- Resellers ship the devices to end user locations.
- End users turn on their new device.
Reseller portal and API
Your organization can work with zero-touch enrollment using the portal or API. You might use one or both depending on your organization's needs. Open the portal in your browser to directly manage your customers and their zero-touch enrollment devices. Call the API to integrate zero-touch enrollment into your organization's existing sales or service tools. The following table compares tasks you might perform using the portal and API.
|Add, edit, and claim devices|
|Integrate with existing tools|
|Import and export CSV files|
|Manage your organization's users|
|Add, edit, and delete device metadata|
Your customers also use the same portal to map their purchased devices to EMM configs. To learn more about how to complete the tasks above, read the Reseller portal guide or the How it works API guide.
The three stages below list what you can expect to complete as your organization onboards into zero-touch enrollment.
Stage 1: prepare
- Sign the zero-touch enrollment reseller agreement.
- Get leadership approval and train your customer support team.
- Decide with Google on a launch date.
- Plan co-marketing opportunities.
Stage 2: integrate
- Include zero-touch enrollment in your sales and customer support processes.
- Integrate point of sale (POS) systems with zero-touch enrollment reseller APIs to automatically claim devices for customers.
Stage 3: launch
- Run a pilot launch with 2 customers.
- Offer zero-touch enrollment to all your customers.
Ask your organization's Google Platform Solutions Consultant to help you get started with zero-touch enrollment.