Setting up Ivanti EPMM with a closed network / AOSP deployment

There are situations where the onboarding, registration and management of devices is limited and requires a different approach. Examples of these kinds of situations are:

  • In an environment that does not have connectivity to Google mobile services (GMS) due to restrictions in the organization or due to a closed network.

  • In countries where Google mobile services are not available.

  • Where devices that do not have Google mobile services but vendors have enabled Android Enterprise AOSP (Android Open Source Project.)

With Ivanti EPMM version and later, supports a new mode of deployment:

  • Integrated deployment (GMS/Non-GMS) - the entire Ivanti EPMM instance serves devices in full Android Enterprise mode (for example, Samsung devices) and also devices that do not have GMS (for example, AR/VR devices.)

This feature applies to Android 6 or supported newer versions.

Ivanti recommends administrators set the device ownership for AOSP devices. This can be done at: Settings > System Settings > Users & Devices > Device Registration.

  • In the Ownership Settings section, in the "Default Ownership of Android devices using Google ZT or Samsung KME or non-GMS (AOSP) mode" field, select Company ownedor Employee owned.

Devices that are non-GMS will be identified and reported to the Device Details page. Administrators can view individual devices and run a search for "Non GMS Device."

Use cases

AOSP deployment can work side-by-side with Android Enterprise deployment.

Supported modes of registration supported:

  • Device Admin mode

  • Device Owner mode

Below are the possible use cases for this feature.

Table 100.  Use cases for Closed network / AOSP deployment

Use Case

Expected Result

Only the AOSP configuration is pushed

AOSP in Device Admin or Device Owner mode.

Both AOSP and Android Enterprise configurations are pushed

Android Enterprise configuration takes priority over AOSP.

Device is registered in AOSP and the Android Enterprise configuration is pushed to the registered device

The registered device retains AOSP mode. Android Enterprise configuration applies only to fresh registrations.

Process of setting up:

  1. Enabling a closed network / AOSP deployment in Ivanti EPMM.

  2. Creating a new Android Enterprise configuration.

  3. Provisioning the Android device.

  4. Managing the closed network / AOSP devices.

Once you have AOSP deployment in place, you can disable AOSP.

Next steps 

Enabling a closed network / AOSP deployment in Ivanti EPMM