Enrollment

Overview

Enrollment links a device to your MDM and makes the MDM agent (Device Policy Controller, or DPC) the device owner. Before enrolling devices, create an enrollment profile in your MDM. The profile sets the management use case and provides the enrollment details used by each enrollment method.

MDM enrollment profile

Most Datalogic devices are enrolled as fully managed. Some MDMs call this mode work managed or device owner.

SOTI MobiControl

These steps are based on SOTI's Android Enterprise enrollment documentation guide.

Prerequisites

Your SOTI MobiControl deployment must have Android Enterprise configured and connected to managed Google Play before enrolling Android Enterprise devices.

1. Sign in to the SOTI MobiControl web console.
2. Open the Global Settings menu.
3. Select Android Enterprise.
4. Complete the Android Enterprise setup and managed Google Play binding if they have not already been configured.
5. Navigate to the enrollment configuration page.
6. Select the option to create a new enrollment configuration.
7. Enter a name for the enrollment configuration.
8. Select Android Enterprise as the enrollment platform, if prompted.
9. Select Work Managed as the enrollment type, if prompted.
10. Select the device group to which enrolled devices will be assigned, if this option is available.
11. Configure the required enrollment authentication settings.
12. Configure any additional enrollment restrictions required by your organization.
13. Select Save to save the enrollment configuration.
14. Verify that the enrollment configuration appears in the SOTI MobiControl console.

Microsoft Intune

These steps are based on Microsoft's Set up enrollment for Android Enterprise fully managed devices guide.

Prerequisites

Your Intune tenant must be connected to managed Google Play before you can create an Android Enterprise enrollment profile. See the prerequisites in Microsoft's guide.

1. Open a web browser and go to the Microsoft Intune admin center.
2. Sign in with your Intune administrator account.
3. In the left menu, select Devices.
4. Select Enrollment.
5. Select the Android tab.
6. Under Android Enterprise > Enrollment Profiles, select Corporate-owned, fully managed user devices.
7. Select Create policy.
8. In the Name field, enter a name for the profile (for example, Datalogic Fully Managed). Write this name down; it can be used later to group the enrolled devices.
9. Optionally, enter a Description.
10. Under Token type, select Corporate-owned, fully managed (default).
11. Optionally, set Apply device name template to Yes and enter a naming template (for example, DL-{{SERIAL}}).
12. Select Next.
13. Optionally, on the Device group page, select Search by group name and choose a static device group for the enrolled devices.
14. Select Next.
15. Optionally, on the Scope tags page, add scope tags.
16. Select Next.
17. On the Review + create page, check the summary and select Create.
18. Select the new profile in the list.
19. Select Token to view the enrollment token and QR code. Use these with the enrollment method below.

SureMDM

These steps are based on 42Gears' How to Create a QR Code To Enroll Android Devices To SureMDM guide.

Prerequisites

Your SureMDM deployment must be enrolled with Android Enterprise before you can create an Android Enterprise enrollment QR code. See 42Gears' Android Enterprise enrollment guide.

1. Sign in to the SureMDM web console.
2. Navigate to Enrollment.
3. Select List View.
4. Select Create QR Code.
5. In the Name field, enter a name for the enrollment configuration (for example, Datalogic Fully Managed).
6. Under Platform, select Android.
7. Under Enrollment Type, select Android Enterprise Enrollment.
8. Select Next.
9. Select the device group to which enrolled devices will be assigned.
10. Select the device naming option and configure the device name as required.
11. Optionally, configure the QR code expiration date and maximum number of devices allowed to enroll.
12. Open Provisioning Settings.
13. Configure the provisioning options required by your organization.
14. Select Save to save the provisioning settings.
15. Optionally, configure the locale settings.
16. Configure Wi-Fi credentials if the devices need Wi-Fi during provisioning.
17. Configure mobile data or proxy settings if required.
18. Select Next.
19. Select Save to generate the enrollment QR code.
20. Verify that the QR code appears in the SureMDM console.

Workspace ONEWorkspace ONE (formerly AirWatch)

These steps are based on Omnissa's Configuring Work Managed Device Enrollment guide.

Prerequisites

Your Workspace ONE UEM environment must be registered with Google as an Android Enterprise EMM provider before enrolling fully managed devices.

1. Sign in to the Workspace ONE UEM console.
2. Select the organization group where the devices will be enrolled.
3. Navigate to Devices > Lifecycle > Staging > List View.
4. Select Configure Enrollment.
5. Select Android.
6. Select Custom DPC as the management type.
7. Select Configure.
8. In the Wi-Fi section, optionally configure the Wi-Fi network the devices will use during provisioning.
9. Select Next.
10. In the Hub section, select the latest Workspace ONE Intelligent Hub or specify an externally hosted Hub package.
11. Select Next.
12. In the Enrollment Details section, enable Configure Organization Group.
13. Select the organization group where the devices will be enrolled.
14. Configure the enrollment authentication settings required by your organization.
15. Configure whether system applications should remain available on the fully managed devices.
16. Select Next.
17. Review the enrollment configuration.
18. Download the generated enrollment configuration or QR code if required for the subsequent enrollment method.

Enrollment method

Datalogic devices support three enrollment methods. Each starts from a factory reset device in the Setup Wizard and uses the enrollment profile created above.

Zero-TouchZero-Touch (Recommended)

Android zero-touch enrollment automatically enrolls devices in your MDM during initial setup. Simply power on the device and connect it to the internet using cellular data. If cellular connectivity is unavailable, connect to Wi-Fi instead.

Connecting to a network

WWAN devices with an active SIM card connect to the cellular network automatically. On WLAN devices, scan a Wi-Fi QR code with the built-in scanner to connect to Wi-Fi. Wi-Fi QR codes can be created with the Wi-Fi QR Code Generator.

1. Purchase devices from an authorized zero-touch reseller, including directly from Datalogic.
2. Then the reseller registers the devices to your organization's zero-touch account.
3. Sign in to the zero-touch enrollment portal and create a configuration for your MDM.
4. Assign the configuration to your devices.
5. Power on the device (or factory reset it).
6. Connect to a network, either celluar or Wi-Fi. (Scan a Wi-Fi QR code)
7. The device downloads the MDM agent and enrolls automatically.

AE QR CodeAndroid Enterprise QR Code

QR code enrollment uses an Android Enterprise enrollment QR code that contains the MDM agent download location and enrollment details. On Datalogic devices, the QR code can be scanned at any point in the Setup Wizard using the built-in scanner. There is no need to tap the Welcome screen six times or use the camera.

Datalogic Android Enterprise QR Code Generator

The Datalogic Android Enterprise QR Code Generator creates enrollment QR codes for Datalogic devices and can add Datalogic-specific properties such as Wi-Fi, APN, and EAP settings.

The generator includes predefined settings for the following MDMs:

• SOTI MobiControl
• Workspace ONE Intelligent Hub
• Wavelink Avalanche
• Esper
• ManageEngine
• MobileIron Go
• MobileIron Mobile@Work
• Microsoft Intune
• Samsung Knox Manage
• SureMDM Nix Agent
• Other (entered manually)

For any other MDM, select Other and enter the enrollment details provided by your MDM. See Generate QR Code for details on each field.

1. Create an enrollment profile in your MDM console and note the enrollment details (or export its QR code).
2. Open the Android Enterprise QR Code Generator, select your MDM, and complete the enrollment fields.
3. Generate the QR code.
4. On a factory reset device, scan the QR code from the Setup Wizard. The device downloads the MDM agent and enrolls.

Enrollment details can also be embedded in a Scan2Deploy barcode. See Scan2Deploy Enterprise Enrollment.

Manual

Manual enrollment is useful for small deployments or testing when zero-touch and QR code enrollment are not available.

1. Factory reset the device and start the Setup Wizard.
2. Connect to a Wi-Fi network.
3. On the Google sign-in screen, enter the DPC identifier provided by your MDM (for example, afw#setup) in the email field instead of a Google account.
4. The device downloads the MDM agent.
5. Follow the on-screen prompts and sign in with your MDM enrollment credentials.