IT admins use zero-touch enrollment to preconfigure company-owned Android devices. This document explains how device resellers can use zero-touch enrollment to help their enterprise customers save time provisioning devices. If you're not a reseller, see the help center for enterprise customers.

What is zero-touch enrollment?

Devices provision themselves, out of the box, as fully managed devices. Advantages of zero-touch enrollment include:

  • Customer IT admins don't need to provision individual devices because a config can be automatically set for purchased devices in bulk.
  • Customers stay in control of their devices at all times—even after factory resets.
  • End users, after receiving a boxed device, just need to sign in.

Zero-touch enrollment stores a customer's provisioning config for a device. After starting up, a device checks for a provisioning config. If a customer has assigned the device a config, the device provisions itself. The device downloads and installs the customer's chosen device policy controller (DPC) app. The DPC app, using the customer's config data, provisions the device. To learn more about managed devices, read Android Enterprise.


ZTP flow for customer purchasing devices from

  1. Customers purchase devices from resellers.
  2. Resellers create new customer zero-touch enrollment accounts
  3. Resellers assign devices to customers.
  4. Customers create EMM configs for their enterprise.
  5. Customers map purchased devices to EMM configs.
  6. Resellers ship the devices to end user locations.
  7. End users turn on their new device.

Reseller portal and API

Your organization can work with zero-touch enrollment using the portal or API. You might use one or both depending on your organization's needs. Open the portal in your browser to directly manage your customers and their zero-touch enrollment devices. Call the API to integrate zero-touch enrollment into your organization's existing sales or service tools. The following table compares tasks you might perform using the portal and API.

Reseller task Portal API
Add, edit, and claim devices
Add customers
Add vendors
Integrate with existing tools
Import and export CSV files
Manage your organization's users
Add, edit, and delete device metadata

Your customers also use the same portal to map their purchased devices to EMM configs. To learn more about how to complete the tasks above, read the Reseller portal guide or the How it works API guide.

Launch portal

Reseller onboarding

The three stages below list what you can expect to complete as your organization onboards into zero-touch enrollment.

Stage 1: prepare

  • Sign the zero-touch enrollment reseller agreement.
  • Get leadership approval and train your customer support team.
  • Decide with Google on a launch date.
  • Plan co-marketing opportunities.

Stage 2: integrate

  • Include zero-touch enrollment in your sales and customer support processes.
  • Integrate point of sale (POS) systems with zero-touch enrollment reseller APIs to automatically claim devices for customers.

Stage 3: launch

  • Run a pilot launch with 2 customers.
  • Offer zero-touch enrollment to all your customers.

Ask your organization's Google Platform Solutions Consultant to help you get started with zero-touch enrollment.

Learn more

To learn more about fully managed Android devices, see Fully managed device. If you're not a reseller, see the Android Enterprise Help for more information.

Send feedback about...

Android zero-touch enrollment