The Device Owner mode enrollment by NFC works on any Android 6+ GMS devices.
It can be done:
- either by the Enterprise before sending the device to the user. This is the most common use case, specifically for mass deployments.
- or directly by the User when receiving the factory device in reset factory mode. We advise NFC tags stickers for this use case.
How NFC enrollment works
To enroll an Android Device with NFC, you need a master device. This master device holds a NFC configuration file which contains all the information required by the Android device to enrol in Device Owner mode.
The NFC enrollment occurs just after a factory reset, when the device displays the Android welcome screen. Just bump the master device on the target device, then the configuration file is automatically pushed through NFC to the target device. Enrollment starts.
The master device can be either an Android device with a specific NFC app running on it, or a dedicated NFC card or sticker.
NFC enrollment with an Android master device
For this enrollment scenario, you need a dedicated Android device as a master device. This master device must run Android 5+.
Transfer the configuration file to the root node on the master Android device. Run the provisioner app on the master device, then bump the target device with it.
NFC enrollment with a NFC card or sticker
For this enrollment scenario, you need a specific hardware to write data to a NFC card or sticker. This hardware consists in a NFC writer and a NFC card or sticker. You can select the hardware of your choice. We can advise Tagstand for NFC stickers.
Once the NFC configuration is ready, just write it down on the NFC card or sticker, then bump the target device with it.
The file format consists in a list of parameters with a key and a value. Some of the parameters are mandatory, whereas others are optional.
The first mandatory parameter is the name of the DPC to install on the device. This parameter must not be changed.
The second mandatory parameter is the token of the profile the device will use once enrolled. This parameter can be found on the WizyEMM console, in the QR Code tab of the profile you want to use.
The third parameter is the WiFi network to use during enrollment. The following information can be specified:
- The network SSID, which is a string,
- The network password, which is a string,
WiFi extra information
The WiFi network security type can be forced to one of the following values: NONE, WPA, WEP or EAP.
If the WiFi network is hidden, a specific parameter can be used to specify that:
In order to display the enrollment using a specific language, the following parameter can be used:
The locale value must be in the format country_CODE.
The timezone can be forced to a specific value if needed.
Depending on the device manufacturer, some system apps can be preinstalled on the device. If you don't want these extra apps to be installed, you can specify it with the following parameter:
Device data can be ciphered for an extra security layer. This step can take a significant time during the enrollment. You can skip this step with the following parameter:
If you want to display your own company logo during the enrollment, you can use the following parameter to do so:
The value must be a valid URI pointing to a PNG file.
By default, the main predominant color used during the enrollment is either orange or blue, depending on the Android version used. If you want to specify your own predominant color, use the following parameter:
The value must be a hexadecimal color code, with 2 digits for each color: 0xRED-GREEN-BLUE. For example, for a full red color, use 0xFF0000. For a full blue color, use 0x0000FF. To choose a color and fetch the hexadecimal color code, please visit https://htmlcolorcodes.com/.