Android MDM Installation Instructions | IT Services

Overview

The settings used in the installation instructions should be similar for all Android devices. Due to different versions of the Android OS and hardware, the name and location of menus and options may vary.

Before you can enroll your Android device in the MDM service, you must install the AirWatch app from the Google Play Store. You need a Google account to do this.

Depending on your device, you may also need to install an additional service to support the enterprise capabilities of your device. If your device blocks the installation, change your security settings to allow installation of applications not obtained from the Google Play Store.

During the enrollment process you'll be required to set a password with a minimum of four digits on your device. Your device also needs to be encrypted; it must be plugged in and charged to 80% before encryption can begin. If your device is already encrypted, you will skip this step during enrollment.

What to expect after you install a profile

Your device will:

• Require a password to unlock it. Stanford requires that your password is a minimum of four digits. Some manufacturers, such as Samsung, require  a stronger password.
• Time out after a period of inactivity and require a password to unlock it. You can change your display preferences in Settings to adjust the screen time out.
• Sync your email, contacts, and calendar appointments during the first few minutes after installation if email activation is supported on your device. See Will MDM Work on My Android?
• Display the AirWatch app and the Stanford App Catalog.
• Perform otherwise as it did before you installed the MDM.

Before you begin

• Check that your device is running Android OS 4.0 or above. You cannot enroll a device in MDM if the OS is below 4.0.
• Check the list of devices successfully enrolled in MDM during Stanford's testing to see if your device is on it.
• Make sure you have a Google ID. Otherwise, you won't be able to download  AirWatch from Google Play. See Create a new Google Account if you need to set one up.
• Make sure your device is at least 80% charged and plugged in.  Otherwise, you will not be able to encrypt.
• Back up your device. If you encrypt your device and then forget your password you will need to set your device to factory reset.
• Remove any SD cards because they may become inaccessible after encryption.

Download AirWatch

1. Log in to mdm.stanford.edu/client/register.
2. If the WebLogin screen displays, enter your SUNet ID and password and tap Login. You also may have to enter an authentication code for two-step authentication.
3. Read the instructions and then tap  Begin Enrollment.

    

4. If prompted to "Complete action using," tap Play Store and Just once.
5. On the AirWatch MDM Agent page, tap Install.

   

6. You may be prompted to sign in to your Google Play account in order to install the app. Sign in and then tap Install.
7. When the App permissions screen displays, tap Accept.

   

Enroll in MDM

Authenticate

1. After the AirWatch MDM Agent installs, tap Open. Alternatively, you can open AirWatch from the home screen. With your apps displayed, tap AirWatch Agent.
2. Choose Email Address for your authentication method..

   

3. At the prompt for your corporate email ID, enter your @stanford.edu email address and tap Continue.

   

4. If you didn't enter a valid email address, the next screen  prompts you for a server and group ID. If this screen displays, enter the following and then tap Enroll Device.
   • Server: mm.stanford.edu
   • Group ID: SU-MDM or SU-Google (depending on where your @stanford.edu email is hosted)
   • Continue without email address: checked
5. If you are prompted to "Complete action using," select the browser of your choice and tap Always so you don't see this message again during the enrollment process.
6. If the WebLogin screen displays, enter your SUNet ID and password and tap Login. You also may have to enter an authentication code for two-step authentication.
7. Select the owner of the device and then tap Continue.

   

8. Tap Accept to accept the terms of use.

Secure

1. You have completed the authentication part of enrollment and are ready to ensure you device is compliant with Stanford's policies. Tap Get Started.

   

2. AirWatch informs you that it needs to be the device administrator. Tap Continue.

   

3. Tap Activate to grant permissions to AirWatch to manage your device.

   

Install AirWatch enterprise service (not required for all devices)

1. Depending on your device, you may see a message that says you need to enable installation of enterprise apps not available in the Play Store. Tap Device Settings.

   

2. The Settings app opens. Check the Unknown sources box to allow installation of apps from sources other than the Play Store. Then, tap your device's back button to return to the installation. Tap Continue to install the enterprise service .
3. Information regarding how the AirWatch enterprise service interacts with your device is displayed across several screens. Tap Next to advance to the next screen. On the last screen, tap Install.
4. The Activate device administrator screen displays once again. Tap Activate.

Configure

1. The next part of enrollment configures enterprise resources for your device. Tap Continue.

   

2. Tap Continue to begin setting up your Stanford.Note: Stanford email is not available on all devices.

   

3. Enter your @stanford.edu email password and enter it again to confirm. Then, tap OK.

   

4. If an Install Applications screen displays listing one or more applications that have been assigned to you, tap Continue.
5. When the configuration completes, tap Exit.

   

Set a password and encrypt your device

Note: Encryption can take an hour or more. Start with your battery at least 80% charged and keep your device plugged in until encryption is completed.

1. A message saying that a passcode is required displays. Tap OK.

   

2. The Settings app opens. Tap Password.
3. Enter a password that consists of at least four digits. Some manufacturers require a stronger password (for example, Samsung requires a six-character alphanumeric password).
4. Confirm your password by entering it again.
5. Tap Encrypt Device.

   

6. Confirm that you want to continue with device encrption.

   

7. Tap Encrypt device.

   

8. Enter your password.
9. Tap Encrypt device again to confirm that you want to encrypt this device.

Connect to the Stanford VPN (not available on all devices)

See Configure VPN for Android for instructions on how to connect to the Stanford VPN with your Android device.

Last modified August 8, 2013