QR Code based enrollment is one of the several enrollment methods which can be used to activate Company Owned devices (Work Managed or KIOSK) in Android Enterprise (also known as Android For Work) . This procedure is applicable from Android 7.0 & higher.
This article provides step-by-step procedure to enroll & activate the devices using QR code.
The procedure is broadly categorized into two, they being
QR code configuration.
Device enroll with QR code.
Note : Applicable to Kiosk & Work Managed policies.
Login to WeGuard console with valid credentials.
From left menu click on Policy Groups option.
Notice list of policies created in the account. Select the desired policy (make sure it is either Kiosk or Work Managed). By the way, for the newly created account, default policies would show up based on the selection while sign-up.
From the policy details, scroll down to find the QR CODE category and click on it.
Notice QR settings with default configurations being,
Skip Encryption : Indicates whether device encryption can be skipped as part of device owner or managed profile provisioning. The default value is ON (toggle ON), meaning device data will not be encrypted.
Wi-Fi Config : Setup WiFi configuration for device to auto connect during setup process. The default value is OFF (toggle OFF), meaning Admin will not be able to configure Wi-Fi details.
Locale & Time : Setup locale & time. The default value is OFF (toggle OFF), meaning device language & time zone will not be configured.
IT Policy Compliance : Configure the policies such as - Location Settings, Bluetooth Settings, Disable Factory Reset, Disable Safe Boot, Disable Screen Capture.
Let's go over the procedure to configure Wi-Fi details
Enable WiFi Config option.
Enter SSID, Security Type & Password.
Proxy settings will be OFF, if there is proxy server setup provide the details by choosing Manual or Automatic.
In the same way, admin can enable "Locale and Time"
Enable "Locale and Time" option.
Choose Language from drop down. The default is English (US).
Choose the Time zone from drop down.
To embed WiFi, Locale & Time to policy QR click "SAVE AND CONTINUE".
To view the QR, the admin can either click on "View QR" or go back to the policy group page and click on the QR code icon.
This completes the QR configuration part.
On the device welcome screen, tap 6 times.
A QR code reader will open on the device. The behavior slightly varies on different OEMs.
When the device prompts to scan the QR, scan the QR configured based on requirement (as above). In this case kiosk policy QR.
The image below informs that the particular device belongs to the organization.
The device is getting ready for setup.
Need to click ‘Accept & continue’.
Need to click ‘More’ and then ‘Accept’.
Now WeGuard automatically launches and gets activated and prompts for certain permissions which are to be given by the user.
The device would get the policy and impose the restrictions, install apps on the device.
Device is set up in Kiosk mode now and ready to use.
Once the enrollment, activation is done, the admin should find the device on the console in the Devices page.