Android Enterprise General Discussions

Hello peeps I fancied running automated network connectivity checks in one of my apps. Pulled in the list from the Devices category of  network requirements and it looks like one of the OTA cache servers has been down for at least a week.  ota-cache2.googlezip.net I raised it quietly but figured it was worth calling out here also.

Hi Team, I'm so sorry to ask this but it is expected that whenever I select the SSID of a Wi-Fi network that contains a SCEP and EAP/TLS configuration, it will show a popup example below? The policy for SCEP and EAP/TLS are already being configured by third-party MDM and we just assume that we don't need to do this manually on each devices.  

Hi,We’ve noticed that our Android devices are no longer enrolling automatically, which is resulting in the default profile being applied from the auto-created policy in the Google Zero-Touch customer portal. I’ve reviewed the portal settings, and the correct profile is still assigned by default.This process previously worked as expected.Many thanks,Joe.

We recently signed up as an Android Enterprise Partner through the Android Enterprise Partner Portal. However, we encountered an issue when inputting our DUNS Number—the system returned an error message stating, "Please contact support."This is our second attempt to register; our initial application was declined due to a policy requirement we were unable to fulfill at the time. We would appreciate your guidance or assistance in resolving this issue. If this is not the appropriate channel for support, could you kindly direct us to the correct contact for Android Enterprise Partner assistance ? Thank you for your attention and support.Best regards,   

Hi everyone, We are currently managing Samsung enterprise devices via Knox Manage under Android Enterprise DA mode (Device Admin) . Our in-house application previously used the UpdateApplication API to update itself silently without user interaction. This worked well under Android 14. However, after updating to Android 15, this API no longer functions. Based on the Samsung Knox SDK documentation, it appears that UpdateApplication is now restricted to Device Owner (DO) and Profile Owner (PO) apps. We have tried to assign all delegated scopes to our app via Knox Manage policy settings (Android Enterprise → App Restrictions → Delegated Scopes for Apps). Unfortunately, the API call still fails. ✅ What we’re looking for:- Is there any alternative methods that allows silent or managed updates of enterprise apps on Android 15, without being a DO/PO app?- Or is DO/PO elevation now the only viable path?- If so, is there an official onboarding flow or protocol to request

Hi Team, I have created a new configuration item and linked it to Microsoft Intune token.Then I have decided to remove the Intune token configuration before removing the configuration file from Zero touch (which I dont think it should matter). Then I went to remove the configuration item from Zero touch and was getting a strange error message, see below.  Now I'm left with a configuration item in Zero touch that I can't remove.Can someone please help or reach out, that would be great. Also, let me know if there is anything else you require from my end.

Hi All, Just wanted to check if someone knows the status of AER certification for the new Oneplus Nord 5 and Nord CE 5. Will the work profile still work without AER certification? Thanks for the help

Hello  we are facing a problem some of our Samsung Galaxy XCover 7 devicescan only resolve an internal server with a .local address very slowly.This means that we cannot use the resource, as high latency leads to the connection being terminated.We use our own DNS server which comes with DHCP. If I change the DNS server manually using an app, but to the same DNS server that also comes with DHCP, we can reach the address without any problems and without long latency. (This happens over a VPN tunnel to the dns server)Does anyone have ideas?  

Hi,we are in the process to finish our partner registration. But the step on "Enter a D-U-N-S® number for your organization" fails, with an pop-up error of:Something went wrong! If this problem persists, please contact support. DUNS number is correct. Does the portal have an issue? Thanks

Hello,I'm managing Android Enterprise devices via Intune and would like to confirm the behavior of a specific device restriction setting related to NFC.■ Device: AQUOS wish4 (Android), enrolled as a fully managed device■ Policy applied: Device configuration profile with "Beam data using NFC (work-profile level)" set to Block■ Policy configuration path in Intune Admin Center:Microsoft Intune Admin Center > Devices > Manage devices > ConfigurationPlatform: Android EnterpriseProfile type: Template > Device restrictionsConfiguration settings > General- Beam data using NFC (work-profile level): Block○ Background and expectation:My understanding is that this setting is intended to block NFC-based data transfer (i.e., Android Beam) within the work profile.However, I initially assumed it might also block general NFC usage, such as reading contactless transit cards or using mobile wallet services.○ Test scenario and results:A

I'm facing an issue with AMAPI device provisioning.I created a policy, generated a token, built a QR code, and scanned it on a tablet. The device successfully got added under my enterprise (I verified this using the API). However, for the past 2–3 days, while the QR code scanning works, the device gets stuck on the registration screen with a large circular loader for at least 15–20 minutes. After that, I get an option to factory reset the device.Even after the failure message, when I run my script to check for new devices, I can see that the failed device appears under my enterprise. The device's state from the AMAPI response is PROVISIONING.Despite being stuck on the failed screen, I tested sending commands to the device (like reboot and wipe), and surprisingly, they work. This has left me very confused if the device setup failed, how are commands still working?Initially, I thought it might be a device-specific issue, but I tried it on another device (which was never enrolled before),

Hi, We have an issue in our tenant with BYOD device enrollment (Personally owned with Work Profile). We use Intune as EMM. We want to push a WiFi policy to our devices but we do not want to preconfigure auto-connection for our users. Our users must manually connect to the network. The problem is that this setting is not supported for BYOD in Intune, so we have no control over it. In addition, the default behaviour of the devices (tested in Realme, Xiaomi, Nokia, Google, Samsung phones) is that autoconnect is enabled by default. Even if the user disables it, next Intune sync enables it back.  Finally, I checked the policy via graph API and I see that: "connectAutomatically": false,    "connectWhenNetworkNameIsHidden": false,    "wiFiSecurityType": "wpaEnterprise", Is this setting not honored by the OS? Is there anything we can do about it?

Hello,My Zerotouch account is deleted and how we deregistered my already registered device 

Hi I am unable to register for the Android Enterprise Partner Portal, It prompts me to enter my corporate email to register but then  even with the link used it does not proceed to register.

We are from Alphatech India and recently received a notification that our application to join the Carrier & Device Reseller Partner Program was declined. However, we would like to highlight that we are actively involved in large-scale deployments of Android-based mobile devices for enterprise customers across India. Access to the Android Enterprise Partner Portal, specifically the Zero-touch enrollment feature, is critical for us to streamline device provisioning and deliver a seamless experience to our clients. We request the community's guidance on how we can meet the eligibility requirements or explore any alternative process to gain access to the Zero-touch Reseller Portal. We are fully committed to meeting the necessary standards and are ready to provide any required documentation. Your support and direction on this matter would be greatly appreciated.

Based on the ongoing issues with Android 15 and setting password managers for users when an org uses GEM, has Android 16 removed this issue or does it remain?

Our MDM is using an internal app to install certificates that can be managed by our platform.The problem is when trying to set up corporate EAP-TLS networks, the device is unable to use the installed certificate for WiFi authentication. We see that identity certificates that can be installed programatically via DevicePolicyManager.installKeyPair(ComponentName admin, PrivateKey privKey, Certificate[] certs, String alias, boolean requestAccess) are installed under User Credentials settings section but for VPN and apps usage, not for WiFi, which iswhat the network configuration is expecting. Is there any other Android SDK API we can use in order to install the certificates for WiFi usage? Many thanks.

Hi I wasn't able to find one plus 13s mentioned in the list. Is it AER approved. Will my office workspace work?Can someone please let me know thanks!

Hi We are preparing to enroll over 600 Zebra and Honeywell barcode scanners into Microsoft Intune. These devices are distributed across more than 250 locations and span over 35 distinct configuration profiles. To ensure a smooth rollout, especially for our non-technical users, we aim to automate the enrollment process as much as possible—minimizing manual input and reducing the risk of user errors, including Wi-Fi setup. Our intended workflow is for users to simply scan a QR code at the initial "Hi there" screen. This QR code should contain the necessary Wi-Fi configuration and trigger device provisioning via the Google Zero-Touch portal, bypassing the setup wizard entirely. However, when we generate a QR code using the following JSON configuration, the Wi-Fi settings are not being applied as expected. After the QR code is scanned, the device proceeds to the Wi-Fi setup screen, where users are required to manually enter the network configuration. According to Google

Estou tentando me cadastrar como revendedor no Google Zero Touch Enrollment, mas estou com algumas dúvidas no processo. Se alguém já passou por isso ou trabalha com Android Enterprise, poderia me dar uma força?

Hello everyone ,Does anyone use knox sdk restricted method ?  We have an app that has a driving mode and the apps is used for security purpose . Of course the app use  know high restrictions feature like disable apps or enable/disable voice restrictions .  Our xcover on android 15 , we have a message error that's say the app is not running in device owner mode : SecurityException: Caller is not DO or PO or KPU. According to Samsung post here , our app in android 15 will loose many restrictions we use . My question is how we can update to android 15 ? Our device is managed by Ivanti . The device owner of our device is the ivanti app and thus it can use  knox sdk restrictions . I am pretty sure we can't have 2 apps being device owner if i am not wrong  but i didn't find the proof yet . Sounds like the solution is to manage our device with only our EMM which doesn't satisfy our needs .Does anyone have any other idea  ? It's a specific case actu

Now we have completed the development of the full management function of Android devices based on the Android Manange API. Now we hope to become a Google partner to promote our products. What should we do?Currently, we are trying to register at: https://www.androidenterprise.dev/s/. After clicking "Resume Onbording", we are asked to enter our email again, but we have never received it.

Hello Team Is there any possibility to link Android Zero touch portal with an Access Management tool with the APIs? We have our internal access management tool of our organization. We want to link the ZTE portal so that the request and permission for adding and deleting admins can be managed by Access management tool. Is there any API for that?

Dear Android Enterprise Team and Community, I hope you're doing well. I submitted the “Get in touch” form on the Android Enterprise website and received the confirmation email on May 30, which I have already responded to. However, I haven’t received any follow-up or contact from a specialist since then. We are exploring Android Enterprise solutions for our business and are interested in understanding the next steps to get started. Could someone from the team or community please assist or guide me on how to proceed? If additional information is required from my side, I’d be happy to provide it. Thank you for your support.   Best regards,  Deepak  Alobha Technologies Pvt Ltd (This post was edited to remove personal information, in compliance with our guidelines) 

Does anyone have any experience using Android for digital signage? We currently use Dell Optiplexes running Windows in kiosk mode with the Poppulo (formerly known as Four Winds Interactive) app but the machines are:CostlyOverpowered for what we needPurchased on a 4-year lease cyclePain in the butt to manage Windows kiosk modePoppulo also provides an Android app to run the digital signage but I am struggling to find many options for hardware. They suggest using a modified Amazon Fire Stick but in our testing they don't work great. I also came across the Elo Backpack 4 for Android which looks fantastic and just what we need except the you have to buy a subscription to get only 4 years of OS and security updates. We are also looking into running Android on a Raspberry Pi but that would have to be open source and might be kinda janky. Plus, no guaranteed security updates. I thought it would be easier to find just a stick or a box with Android on it but that seems to be