Android Enterprise Introduction SOTI Webinar May 2021

DON’T GET
LEFT BEHIND
LEARN WHAT’S NEW WITH
ANDROID™ ENTERPRISE
SOTI Confidential - Only for use under NDA - Do not distribute.

Google, Android, Gmail, Chrome and other marks are trademarks of Google LLC
INTRODUCTION
Webinar Speakers
Damon Greaves M. Raza

Principal Instructor Partner Enablement – Android Enterprise
SOTI Google

AGENDA
01 Introduction
02 Android Enterprise Overview
03 Comprehensive Management & Simplified Deployments
04 Simple App Management with Managed Google Play
05 Android Enterprise Recommended
06 Questions

SOTI PARTNER BYTES
Open Technical Product Enable Adoption of Continuous
Sessions Features & Functionality the SOTI ONE Platform Feedback

PARTNERING WITH
ANDROID™ ENTERPRISE

21% Mobile OS
Non-Android Business
Users
Market
Android has the most Share
devices and the most

users
79%
Android
Users
Source: IDC
2021 | Confidential and Proprietary.

Google Play is
the world’s largest
distribution platform
2M+
available apps on Google Play
90B+
app installs on Google Play

The Most Diverse Ecosystem of Devices in the World
Smartphone Tablet Single Use Devices Rugged Devices
Premium and affordable Customer service, back Connecting field Devices for industrial
devices for productivity office, support and task workers environments
Kiosks Point of Sale Systems Signage VR Headsets
Interactive customer Streamlining Real-time digital Trainings, delighting

interface payments signage customers
Why Android
Enterprise?

LLC
Google, Android, Gmail, Chrome and other marks are trademarks of Google LLC.
Work is more mobile
More connected More flexible
More customized More productive
More efficient More competitive

But most
organizations
Managed Unmanaged Workers with no
still have a huge devices devices mobile access
mobility gap
15%
of Android B2B devices are
managed by an EMM
Rest are unmanaged or using

ActiveSync
Source: Verizon Mobile Security Index 2020

Challenges
Security
Malware
Deployment Customization
Intrusions & Management & Budget
Espionage
Need: Multi-layered security for

OS, hardware & software
2021
2021 || Confidential
Confidential and
and Proprietary.
Proprietary.
Challenges
Deployment
& Management
Security More devices = more complexity Customization
Support & resources & Budget
Provisioning
Need: A comprehensive
platform that’s simple to setup,
manage & use
2021
Confidential and
and Proprietary.
Proprietary.
Challenges
Customization
Security Deployment & Budget
& Management Unique use cases
Varied budgets
Need: Flexible solution with a
variety of available devices
2021
Confidential and
and Proprietary.
Proprietary.
Secure
Multiple layers of security built-in to
devices and the ecosystem
Android is Comprehensive
A wide range of deployment and
the solution management options
for enterprise Flexible

A variety of devices to meet every use case
and budget
mobility
Innovative
Backed by the power of Google

What is Android
Enterprise?

LLC
Enterprise Mobility solution
Android powers a connected workforce with multiple layers of security,
comprehensive management, and a range of devices to fit any job.
Devices EMM Applications

Android Has Had Sustained Investment in Enterprise
Lollipop Marshmallow Nougat Oreo Pie 10 11
Work profile for APIs for Work profile Zero-touch Shared device / Personal / work Work profile and
BYOD Dedicated password enrollment multi-user calendar sync asset
Devices management for
Fully managed (single use) File-based Employee privacy Lock-task mode Improved tools company-owned
device encryption disclosures for multiple apps for work profile devices
Runtime provisioning
Managed permissions Always-on VPN In-app profile Improved
Google Play switching Manual system separation
Improved cert Turn off work updates between work +
support mode personal profiles
Enterprise WiFi
Data usage provisioning Connected work
tracking + personal apps

Android Enterprise
Management App Distribution Security

Consistent, powerful Private managed Comprehensive, multi-layer
& flexible management capabilities Google Play Store platform security
with Google Play Protect architecture

Comprehensive
Management &
Simplified Deployments

Flexible Device Management Options
Personal Device Personally Enabled Work Only Dedicated Device
Fully managed device Fully managed device

Work profile Fully managed device
with work profile in lock task mode
Note: For illustrative purposes only

Level of control higher

Architecture
Work Profile
Managed Device
IT Manager
SOTI
MobiControl
Managed
Google Play COSU
COPE
Google Binding

Work Profile
The modern approach to BYOD
Separates work and personal applications
IT can manage business data and erase

work-related apps if a device is lost
Employees keep their photos, personal

apps and data private

Robust Control Over Asset Management
& Personal Use
On company-owned devices, work profile can now manage more than just work data.
Asset management tools Personal usage policies
○ Full device reset ○ Personal app allow/block list
○ Factory reset protection ○ Hardware (Camera, Bluetooth)

management management
○ Work profile cannot be removed ○ OS features like telephony,

connectivity and location
○ System update management
○ How long work can stay
○ Device-wide security logs paused

Deployment Options to Simplify Setup
For work managed devices
NFC
Transfer configurations to a new device with an NFC bump
EMM Token
Users enter a code to install a specific EMM agent for provisioning
QR Code
Scan a QR code to enroll a device from the setup wizard
Zero-Touch
Enroll devices in bulk with full management and no manual setup

Android Zero-Touch
Enrollment
Enforced
management and
security for
organizations
Simplicity and
flexibility for IT
Easy productivity
for users

Zero-Touch Enrollment Process
Seamless setup and deployment of corporate owned Android devices
Company buys bulk Reseller creates Company Admin End user receives
order of compatible customer account creates enterprise device. Once powered
devices from within mobility management on and connected,
zero-touch approved zero-touch portal, configurations that will enrollment launches
Reseller. uploads purchased apply to users and automatically and
devices IMEI, then ships devices in configurations are
the device to zero-touch portal. applied.
Company.

Introducing Zero-Touch Enrollment
Android Zero-Touch Enrollment Available for All

Android 9+ GMS-Certified Devices
What is changing? Why is this important?

● Google is making zero-touch available ● With this update, all GMS devices that run
on all GMS-certified smartphones and Android 9+, now support zero-touch
tablets running Android 9.0 and up enrollment out-of-the-box
● Previously, zero-touch was a feature ● Backwards compatibility to Android 9+
Android device manufacturers had to means devices in-channel are supported
individually enable
● Samsung devices will now support zero-
● Updated via Google Play Services touch in addition to KME

Work Profile
Bring Your Own Device Setup
• Download SOTI MobiControl from the Google Play Store
• Open SOTI MobiControl agent and enter enrollment ID

provided from your SOTI Administrator
• Click accept when prompted for setting up Work Profile
• Your device should now be enrolled with the “Work Profile”

installed

Fully Managed
Quick Response Code (QR)
• QR code provisioning allows us to pass along Android

Enterprise configuration parameters to new devices
• The Admin can generate a code and email it to an end user or

print it on a piece of paper for devices to scan
• As of Android 9.0, the QR code scanner is available on the

Welcome Screen on first boot
• Ideal for devices that don’t support NFC and scenarios where
devices are distributed remotely

Fully Managed
Near Field Communication (NFC)
• NFC provisioning allows us to pass along Android Enterprise

configuration parameters to new devices physically
• Ideal for “white glove prep” scenarios where a significant

number of devices need to be provisioned and the staging
device is present
• Available on Android 6.0+, devices must have NFC enabled at

factory settings

Fully Managed
EMM Token
• EMM Token provisioning allows us to setup Android devices

into a fully managed state
• Known as the “Hashtag” method, when prompted for entering
a Google account, the user instead enters afw#mobicontrol
• It requires no optional hardware, such as a camera or NFC
chip
• Available on Android 6.0+; for provisioning a small set of
devices or for testing purposes

Fully Managed
Zero-Touch Enrollment
• Partners can sign into the Zero Touch portal to upload the
• Find your device and click on “Configuration”
device IMEI's that your customer has purchased
https://partner.android.com/zerotouch
• The admin from the customer side can then sign in and apply
• Choose your configuration and “Click Update”
their configuration for enrolling Android devices into SOTI
MobiControl
• Fill in the Configuration name, EMM DPC, DPC extras,
Company name, Support email address, Support phone
number, Custom message
• Once complete the customer admin can now look to apply
this configuration to their SOTI MobiControl devices
• In the “Devices” section they have the option to apply the
configuration to a single device or a group of devices

Managed Play
Select, Distribute &

Configure
IT admins
Managed Play
Developers End-users
Publish, Restrict & Test Browse & Use

Android Enterprise brings together enterprise
1 grade devices, EMM’s and Managed Google Play
Android Android Enterprise Recommended allows
Enterprise 2 customers to select devices and EMM’s

with confidence
Key Takeaways
Android Enterprise allows for multiple use
3 cases such as Work Profile, fully managed or
dedicated devices

Android
Enterprise
Recommended

Android Enterprise Recommended
relevant screen UI 1
Enterprise grade Consistent Secure and

features deployment up to date
and management

Android Enterprise Recommended Program
The best Android Enterprise devices and services, validated by Google
Devices Services
Knowledge Rugged EMMs MSPs

worker devices devices
Launched Launched Launched Launched
Feb 2018 Sept 2018 Jan 2019 Feb 2019

New Partner Program
Self service partner portal that provides our partners

with easy access to all the tools, resources
and support they need to grow with Android in one place.
Fulfill validation requirements

by meeting technical and sales requirement.
Earn a partner badge to promote.
Get listed on our Solutions Directory.

How Android Enterprise All Works Together
OEM Carrier
Reseller
Customer
EMM MSP

Android Enterprise Learning Path
Build your knowledge of the Android Enterprise ecosystem with

refreshers and in-depth training courses.
Additional courses
Zero- Security &

Touch Privacy
Associate Professional Expert
Managed What’s
Google Play New in
AE

Welcome to
Android Enterprise Partner Portal
www.androidenterprise.dev
● Register as a new portal user using any Google
account
● Open the activation email from your inbox
● Visit Android Academy

LLC
QUESTIONS?

SURVEY
We Want to Hear From You
• A survey link is available for access in

the chat window
• A link to the session recording and the

survey will be sent in a follow-up email

THANK YOU
SOTI
© Confidential
2021, - Only
SOTI Inc. All for Reserved.
Rights use under NDA - Do not distribute.
SOTI Confidential - Only for use under NDA - Do not distribute LLC
soti.net

Android Enterprise Introduction SOTI Webinar May 2021

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Android Enterprise Introduction SOTI Webinar May 2021

Uploaded by

Copyright:

Available Formats

DON’T GET

SOTI Confidential - Only for use under NDA - Do not distribute.

Damon Greaves M. Raza

SOTI Confidential - Only for use under NDA - Do not distribute.

02 Android Enterprise Overview

03 Comprehensive Management & Simplified Deployments

04 Simple App Management with Managed Google Play

05 Android Enterprise Recommended

SOTI Confidential - Only for use under NDA - Do not distribute.

SOTI Confidential - Only for use under NDA - Do not distribute.

SOTI Confidential - Only for use under NDA - Do not distribute.

devices and the most

2021 | Confidential and Proprietary.

2021 | Confidential and Proprietary.

Smartphone Tablet Single Use Devices Rugged Devices

Kiosks Point of Sale Systems Signage VR Headsets

Interactive customer Streamlining Real-time digital Trainings, delighting

2021 | Confidential and Proprietary.

More connected More flexible

More customized More productive

More efficient More competitive

2021 | Confidential and Proprietary.

Rest are unmanaged or using

2021 | Confidential and Proprietary.

Need: Multi-layered security for

the solution management options

for enterprise Flexible

2021 | Confidential and Proprietary.

2021 | Confidential and Proprietary.

Devices EMM Applications

2021 | Confidential and Proprietary.

Lollipop Marshmallow Nougat Oreo Pie 10 11

2021 | Confidential and Proprietary.

Management App Distribution Security

2021 | Confidential and Proprietary.

2021 | Confidential and Proprietary.

Personal Device Personally Enabled Work Only Dedicated Device

Fully managed device Fully managed device

Note: For illustrative purposes only

2021 | Confidential and Proprietary.

2021 | Confidential and Proprietary.

Separates work and personal applications

IT can manage business data and erase

Employees keep their photos, personal

2021 | Confidential and Proprietary.

Asset management tools Personal usage policies

○ Full device reset ○ Personal app allow/block list

○ Factory reset protection ○ Hardware (Camera, Bluetooth)

○ Work profile cannot be removed ○ OS features like telephony,

2021 | Confidential and Proprietary.

2021 | Confidential and Proprietary.

2021 | Confidential and Proprietary.

2021 | Confidential and Proprietary.

Android Zero-Touch Enrollment Available for All

What is changing? Why is this important?

2021 | Confidential and Proprietary.

• Download SOTI MobiControl from the Google Play Store

• Open SOTI MobiControl agent and enter enrollment ID

• Click accept when prompted for setting up Work Profile

• Your device should now be enrolled with the “Work Profile”

2021 | Confidential and Proprietary.

• QR code provisioning allows us to pass along Android

• The Admin can generate a code and email it to an end user or

• As of Android 9.0, the QR code scanner is available on the