Setup ZTE (Zero Touch Enrollment)

How do I setup my ZTE account with TinyMDM as EMM solution?

Zero-touch enrollment is a streamlined process for Android devices. On first boot, devices automatically check if they have received a specific configuration assignment and download the correct device policy controller app (here TinyMDM), which then completes setup on managed device.

Prerequisite: Companies need to purchase devices directly from an enterprise reseller or Google partner, to be able to benefit from the zero-touch enrollment. This reseller sets up your zero-touch enrollment account when your organization first purchases devices registered for zero-touch enrollment, and you will manage everything for your organization from this web portal.

Step 1: Setup your TinyMDM account

Login to your TinyMDM admin account (or create one). If it’s not already done, follow the first steps of the quick start (register your business and setup your policies).

Step 2: Check the info on your ZTE account

In the Devices tab, you can see a list of all zero touch devices you bought from your active ZTE reseller.

In the Resellers tab, you can see who is your active reseller and activate/deactivate the resellers from whom your organization purchases devices.

Step 3: Create a configuration

To create a configuration, click on the button Add Configuration.

Then, in the popup:

• Name your configuration and choose TinyMDM from the EMM DPC list.
• In the field DPC extras:

1. If you want to enroll your devices in Fully Managed (or Kiosk mode), enter the text below by replacing XXXXXXXXXXXXXXXX by the TinyMDM policy’s ID that you want to apply on the devices (visible in your TinyMDM console > Policies tab). Be careful of the case-sensitiveness.

If needed, you can also link your devices to a group of users, itself linked to a policy. To do this, you need to create a group in your TinyMDM console (follow this tutorial if necessary), link it to a policy and then, in your ZTE console, replace XXXXXXXXXXXXXXXX with the id of the group created (visible in your TinyMDM console, Users and Groups tab -> Groups sub-tab). Be careful of the case-sensitiveness.

{
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {"enrollmentId": "XXXXXXXXXXXXXXXX"}
}

2. 2. If you want to enroll your devices in WPCO mode (compatible only from Android 11 and newer versions), enter the text below by replacing XXXXXXXXXXXXXXXX by the TinyMDM policy’s ID that you want to apply on the devices (visible in your TinyMDM console > Policies tab). Be careful of the case-sensitiveness.

If needed, you can also link your devices to a group of users, itself linked to a policy. To do this, you need to create a group in your TinyMDM console (follow this tutorial if necessary), link it to a policy and then, in your ZTE console, replace XXXXXXXXXXXXXXXX with the id of the group created (visible in your TinyMDM console, Users and Groups tab -> Groups sub-tab). Be careful of the case-sensitiveness.

{
"enrollmentId":"XXXXXXXXXX", "provisioningMode":"work_profile_on_fully_managed"
}

Important: once configured, you will not be able to switch your devices from Fully Managed mode to WPCO mode and back, without performing a factory reset. Make sure you select the right option.

Additional ZTE specs: if you want users to have a particular name in your TinyMDM dashboard, you can add a “prefixType” in the DPC extras. The “prefixType” can be DATE, DEVICE_ID, SERIAL_NUMBER, IMEI or CUSTOM. See below:

{
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {"enrollmentId": "XXXXXXXXXXXXXXXX", "prefixType": "DATE"}
}

{
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {"enrollmentId": "XXXXXXXXXXXXXXXX", "prefixType": "DEVICE_ID"}
}

{
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {"enrollmentId": "XXXXXXXXXXXXXXXX", "prefixType": "SERIAL_NUMBER"}
}

{
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {"enrollmentId": "XXXXXXXXXXXXXXXX", "prefixType": "IMEI"}
}

{
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {"enrollmentId": "XXXXXXXXXXXXXXXX", "prefixType": "CUSTOM", "customPrefix" : "YourOwnCustomPrefix"}
}

The new configuration will appear in your configurations list: in the first column, you can see the ID of the configuration (here 234234579). You can select the configuration to be the Default configuration at the top, and click on Apply to apply it on any new device by default.

Note: in most cases, you only need one configuration as it is only to link TinyMDM to all your devices (you must use your TinyMDM dashboard to assign different policies to different users).

Step 4: Add a configuration to your devices

To apply your configuration with TinyMDM as EMM solution to a device, go back to the Devices tab. From here, you can do it manually by selecting the configuration and confirm the update (see screenshot below). But, if you have a lot of devices, you can also do it with a csv file (see next step).

To apply your configuration with TinyMDM as EMM solution to all devices by batch, click on the menu at the top right of the devices and click on Upload batch configurations. From here you can download an example of CSV and prepare your own.To apply your configuration with TinyMDM as EMM solution to all devices by batch, click on the menu at the top right of the devices and click on Upload batch configurations. From here you can download an example of CSV and prepare your own.

The csv must be in the format modemtype,modemid,manufacturer,profiletype,profileid (see example below). Don’t forget to save your file in .csv (with a comma as separator) before uploading it on your ZTE web portal. Done!

Step 5: Manage the devices straight out of the box

Warning: The enrolment of devices via Zero Touch Enrollment is done without scanning a QR code. If devices registered in a ZTE console are enrolled by scanning a QR code, it will be as if they were enrolled twice. The device will then be in an unstable state before being automatically reset.

Devices are managed straight out of the box: on first boot, they check to see if they’ve been assigned a specific configuration, download the correct device policy controller app (TinyMDM), which then completes setup of the managed device. See the steps below!