Dear Community Members, We are currently encountering an issue with the enrollment of three recently acquired Samsung S23 devices. While we are able to successfully enroll other devices, these specific models are presenting a persistent problem. The error message displayed is as follows: "Zero-Touch Registration is not available. Check your internet connection and try again." To address this, we have attempted the following troubleshooting steps:Utilized mobile data from various carriers as well as Wi-Fi connections, yet the error persists.Formatted the devices.Completely removed the devices from the Zero-Touch portal (https://partner.android.com/zerotouch#) and subsequently re-added them.Attempted manual enrollment using the QR Code provided by Intune.Despite these efforts, the issue remains unresolved. Interestingly, we have successfully enrolled a Samsung XCover 5 without encountering any similar difficulties. We are reaching out to inquire if others in the community are experiencing similar challenges with Samsung S23 devices. Any insights or suggestions would be greatly appreciated. Thank you for your attention to this matter. Kind regards,Zackory

Level 1.6: Donut

Solved

Zero-Touch-Registration is not available

Forum|Forum|2 years ago
November 14, 2023
28 replies
28 views

Dear Community Members,

We are currently encountering an issue with the enrollment of three recently acquired Samsung S23 devices. While we are able to successfully enroll other devices, these specific models are presenting a persistent problem.

The error message displayed is as follows: "Zero-Touch Registration is not available. Check your internet connection and try again."

To address this, we have attempted the following troubleshooting steps:

Utilized mobile data from various carriers as well as Wi-Fi connections, yet the error persists.
Formatted the devices.
Completely removed the devices from the Zero-Touch portal (https://partner.android.com/zerotouch#) and subsequently re-added them.
Attempted manual enrollment using the QR Code provided by Intune.

Despite these efforts, the issue remains unresolved. Interestingly, we have successfully enrolled a Samsung XCover 5 without encountering any similar difficulties.

We are reaching out to inquire if others in the community are experiencing similar challenges with Samsung S23 devices. Any insights or suggestions would be greatly appreciated.

Thank you for your attention to this matter.

Kind regards,

Zackory

Best answer by Lizzie

Hello everyone,

I hope you are doing well.

I wanted to come back to you all with some positive news a fix has been implemented for this issue. I've heard from a couple of you that this is now working. If you could all check your impacted devices please to see if this has been resolved and let me know, that would be a great help.

Once again a massive thank you for all the feedback you have shared in this discussion, it has really helped to get this resolved.

Hope to hear from you soon and thanks again.

Lizzie

P.S - I will mark this as resolved and update the service announcement, but do keep me posted if you believe this isn't the case. Thanks.

Show previous replies

Lizzie

Community Manager

Hello everyone,

@Zackory, @EricW, @LFagni, @Peter, @Marina, @weberda, @EdwinK, @HarmonJames, @treborny

I just wanted to come back to you all. Thanks again for continuing to share what you are experiencing here.

To confirm, we are aware of this issue and our team are currently working with Samsung to resolve this.

In the meantime, I was wondering if I could ask for your help providing a few more details. So that you don't need to post this publicly, I'll send you a direct message to your community inbox here in the community.

I will continue to keep you posted with any updates I receive.

Thank you again,

Lizzie

Welcome to the Community everyone!Have a question or want to start a conversation, click here.

X

xfiha

New Member

Hi Lizzie,

I just ran into this issue while deploying devices. Can you please keep me posted aswell?
If you would like some additional details I can provide with that too.

Best regards,
Filip

Lizzie

Community Manager

Hello @xfiha,

Thanks so much for reply here. I've just sent you a direct message with some questions.

Speak to you soon.

Lizzie

Welcome to the Community everyone!Have a question or want to start a conversation, click here.

J

jasonbayton

Level: 4.1: Jelly bean

FWIW to everyone affected, From what I hear Samsung are resolving this with an OTA. Details are light however since it appears to be a system issue, unless Google and Samsung implement a workaround in the immediate term, a full fix won't go out before the next 1-2 rounds of system updates.

KME (Knox Mobile Enrolment) is a viable alternative in the short term and will get you and your users back up on your feet. Remember whether you switch to KME or use another provisioning method such as QR, the ZT config must be first removed or you'll face issues with devices wanting to reset.

S

Sagarlps

New Member

Our customers are facing the same issue while enrolling their Samsung devices.

O

Oliver_Reitz

New Member

Hi,
I have the same problems with Zero Touch.
I don't use Knox.
If I remove the Zero Touch profile I can set it up with the QR code.
With almost 1000 new devices coming out now, there is no good solution.
Please Google help us

Lizzie

Community Manager

Hello @Oliver_Reitz, @Sagarlps and @AndriusG,

Thanks for sharing here, I am sorry to hear this is also impacting some of your devices. I hope you don't mind, I've just sent your direct message to your community inbox, with a few additional questions.

Thanks again,
Lizzie

Welcome to the Community everyone!Have a question or want to start a conversation, click here.

V

Varun3330

Level 1.5: Cupcake

Many of our customers are facing the same issue. QR code enrolment may not be an appropriate way. Please help

W

weberda

Level 2.0: Eclair

Hi everyone.

Samsung released an KB article describing the issue: https://docs.samsungknox.com/admin/knox-platform-for-enterprise/kbas/kba-1120-unable-to-enroll-device-with-zero-touch-enrollment/

As @jasonbayton already posted the only real solution (short-term) is using KME or QR Code enrollment after unassigning the devices in ZT portal. Maybe you can reach out to Samsung account management to see whether the offer some solutions for uploaded devices into KME after purchasing them...

E

EricW

Level 1.6: Donut

I wanted to add more information about provisioning a device directly to Intune by using the QR code token, that bypasses the Zero Touch. What I lost was all the native Samsung apps and the Galaxy store. I was able to learn how to get the apps back by following this information Manage Android Enterprise system apps in Microsoft Intune | Microsoft Learn. But for some reason the Samsung Gallery has decided that it is not available and compatible with the S23 that I am trying to setup. It seems to think it is a S8 phone. So, I Installed the Google Gallery app, the only issue is that you can't access the gallery directly from the camera. As far as I can tell that is my only issue. I was able to compare Samsung apps that are in use, on a non-managed Samsung S20 phone. I added the following Samsung apps using the method in the link above: Samsung Clock, Galaxy Store, Weather and Wi-Fi Calling, and attempted the Gallery. That is working out. Would prefer to have that code that is in the Zero Touch config that says to leave the native apps.

Moombas

Level 4.4: KitKat

Hi Eric,

try to add this in the QR:

"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":true,

I would expect it to work but didn't use it yet.

E

EricW

Level 1.6: Donut

Yes, thank you Moombas, I have that in my Zero Touch configuration, but I do not know where to put that in the Microsoft Intune provisioning token. Yesterday I did find a forum where people said they added that to their QR, but no one gave any type of instructions on how to do that. I tried saving it as a Json file and add the code and use our QR Tiger account to create the QR code again but it didn't work.

Moombas

Level 4.4: KitKat

Hi Eric,

a provisioning QR looks like this (Example from my QR code generator for Soti as MDM but with that intune expire date added as you use intune, not sure if you need it) but tried to rework it for Intune:

{"qrCodeContent":

{"android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM":"I5YvS0O5hXY46mb01BlRjq4oJJGs2kuUcHvVkAPEXlg",

"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME":"com.google.android.apps.work.cloudpc/.receivers.CloudDeviceAdminReceiver",

"android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION":"https://play.google.com/managed/downloadManagingApp?identifier=setup",

"android.app.extra.PROVISIONING_WIFI_SSID":"Wifi_SSID",

"android.app.extra.PROVISIONING_WIFI_SECURITY_TYPE":"WPA",

"android.app.extra.PROVISIONING_WIFI_PASSWORD":"WifiPassword",

"android.app.extra.PROVISIONING_USE_MOBILE_DATA":true,

"android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":true,

"android.app.extra.PROVISIONING_SKIP_ENCRYPTION":true,

"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE":

{"com.google.android.apps.work.clouddpc.EXTRA_ENROLLMENT_TOKEN": "YourEnrollmentToken" ,

"PROVISIONING_MODE":"FULLY_MANAGED_DEVICE"}

},

"expirationDate": "2025-12-31T18:29:59.920206Z"}

The bold ones are those i changed because of Intune, the underlined bold one is the extra line you need to add.

W

weberda

Level 2.0: Eclair

@EricW Did you add "com.sec.android.gallery3d" ?

How to enable system apps in Work Profile on a Samsung device | Samsung Knox Documentation

E

EricW

Level 1.6: Donut

I did, I got an error message, saying that "the application was not found in the Managed Play store. (0xC7D24FBB). When I attempted to use a web browser to access the Galaxy Store and install it told me that the app was not compatible for this device and said the model number was for a S8 phone. Very strange, but yet all the other apps installed.

Show more replies

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded