Configuring a Connection to Android for Work
Before you can enroll Android devices, you must configure Deep Freeze Cloud Console’s access to the devices’ Android for Work profiles. These work profiles are managed either using G Suite or Google Play; which tool you use not only defines what administrative capabilities you have through Google, but also how you must set up the connection to Deep Freeze Cloud Console. In both cases, you are seeking to obtain permission for Deep Freeze Cloud Console to act as the EMM (Enterprise Mobility Management) provider. This allows Deep Freeze Cloud Console to sync with G Suite/Google Play to obtain device information and manage devices using their work profiles.
Configuring a Connection to Android for Work Managed by Google Play
The following instructions describe how to configure Deep Freeze Cloud Console to link to Google Play. Google Play is Android for Work’s lower-cost option: ideal for smaller businesses, but with fewer administration options and no unique domain.
1. Go to MDM > Settings.
2. Click the Android for Work tab.
3. In the Enrollment Type drop down list, select Managed Play Store Account.
4. Click Next.
The browser opens the Google login screen.
5. Provide your user name and password. Click Next.
A Google Play window opens.
6. Click Get Started.
7. Enter the name of your company into the Organization Name field.
8. Enable the I have read and agree to the managed Google Play agreement option.
9. Click Next.
10. Click Complete Registration.
Deep Freeze Cloud Console is now connected to Android for Work, and you can start enrolling Android devices.
Configuring a Connection to Android for Work Managed by G Suite
The following instructions describe how to configure Deep Freeze Cloud Console to link to G Suite. G Suite is Android for Work’s premium management option: higher cost, but with more administration options and a customer-defined domain name.
Configuring the connection between Deep Freeze Cloud Console and G Suite is a three step process: unenroll from your existing EMM provider (if needed), generate a new EMM token in G Suite, then configure Deep Freeze Cloud Console.
Step 1: Unenrolling from your existing G Suite EMM provider
Your G Suite account can only have one EMM provider at a time. If you have an existing software package acting as EMM provider, you must first unenroll your devices from that provider and remove its connection to G Suite before you can configure the connection to Deep Freeze Cloud Console.
How to unenroll from your existing provider varies according to provider.
Step 2: Generating a new G Suite EMM token
In order to obtain permission to act as EMM provider, Deep Freeze Cloud Console must be configured with a valid EMM token—essentially a passcode generated by G Suite. You must use the G Suite administration tools to generate a new token.
1. Use your browser to navigate to G Suite for your domain. Log in as an administrator.
2. Open the Admin app.
3. Click the Security icon.
4. Expand the EMM provider for Android options.
5. Enable the EMM provider option if it is not already enabled.
6. Click Generate Token.
7. Copy the resulting alphanumeric code for later use.
Step 3: Configuring Deep Freeze Cloud Console as G Suite EMM provider
1. Go to MDM > Settings.
2. Click the Android for Work tab.
3. In the Enrollment Type drop down list, select Google Managed Domain (G Suite).
Additional settings appear.
4. Provide values for the following settings:
> Domain – enter your G Suite domain into this field.
> Administrator Email – enter the email address you use to log into the administrator account into this field.
> EMM Token – enter the EMM token value you generated earlier into this field.
5. Click Enroll.
Deep Freeze Cloud Console is now connected to Android for Work, and you can start enrolling Android devices.