Connecting Android Devices
Android smart devices can be enrolled in Avalanche using an Avalanche Enabler application. Android devices can be enrolled in Avalanche using the following management modes:
•Device admin mode is used for company-owned devices, since it has full control over the device and its data. Device admin mode uses the standard Avalanche enabler. (Requires Android 4.1+.)
•Android Enterprise work profile mode is typically used for employee-owned devices (BYOD), since it creates a work profile that is distinct from the rest of the device. Work profile mode uses the Android Enterprise enabler. (Requires Android 5.1+.)
•Android Enterprise fully managed mode is typically used for company-owned devices, since it has full control over the device and its data. Fully managed mode uses the Android Enterprise enabler. Fully managed devices can also be put into dedicated device mode (kiosk/lock task). (Requires Android 6.0+.)
In addition to installing the Enabler, you must create at least one enrollment rule in order to connect Android devices to the server. For information about creating enrollment rules, see Creating Enrollment Rules for Smart Devices.
Android devices also require an SSL certificate to securely connect to the smart device server. For more information, see Obtaining SSL Certificates.
Avalanche offers device specific enablers to manage Android 4.1+ devices using device admin mode. A universal Android enabler is also available for devices running Android 4.4 or newer.
Some Honeywell CK75, CT50, and CN80 devices and Datalogic Joya Touch devices require additional steps to set the Avalanche enabler as a device owner. For more information, see the Community article Avalanche extender for setting up device owner on Android devices.
Enrolling Android 10 or newer
To enroll a device in device admin mode
1.Navigate to the Wavelink download site.
2.Select Android > QR Code. An enrollment QR code downloads.
3.Open the downloaded enrollment QR code.
4.Factory reset the device.
5.On the language selection screen, tap the screen 4 times, avoiding the buttons. The camera turns on.
6.Scan the enrollment QR code.
7.Follow the on-screen device setup steps.
8.Open the Avalanche enabler.
9.Allow device admin permissions.
10.Enter your Enrollment ID, Password, and Server address in the text boxes and tap Register.
11.If the device is a Samsung SAFE device, accept the Knox end user license agreement. If this agreement is not accepted, the device will not sync with the smart device server.
The device is placed in the folder associated with the enrollment rule it used and can be viewed from the inventory tab.
Enrolling Android 9 or older
To allow installation from outside sources
Because the standard Avalanche Enabler is installed from the Wavelink site, you must enable installation from outside sources on the device to be able to install it.
•On Android 7.1 or older, navigate to Settings > Security > Unknown sources on the device, and enable the Unknown sources option.
•On Android 8.0 or newer, navigate to Settings > Apps & Notifications > Special access > Install unknown apps on the device. Select the browser on the device and set it to Allow.
To enroll a device in device admin mode
1.Use the device to download and install the Enabler from the download site. Enablers are device specific.
2.Open the app.
3.Tap Accept to agree to the terms and conditions.
4.Tap Activate this device admin app to allow the application to be a device administrator.
5.Tap Allow to give Avalanche the necessary device permissions.
6.Enter your Enrollment ID, Password, and Server address in the text boxes and tap Register.
7.If the device is a Samsung SAFE device, accept the Knox end user license agreement. If this agreement is not accepted, the device will not sync with the smart device server.
The device is placed in the folder associated with the enrollment rule it used and can be viewed from the inventory tab.
Using Android bulk enrollment
If you have multiple Android devices to enroll Avalanche using the standard enabler, you can mass enroll them by copying a single configuration file to each device. Avalanche will use the information in the file to automatically enroll the device when the Avalanche Enabler is first run on the device. This way, you don't have to manually enter the log in credentials for Avalanche on each device to enroll it. This feature is only available for the standard Avalanche enabler.
Samsung SAFE devices should not be enrolled using bulk enrollment.
To create an enroll.prf for bulk enrollment
1.Create an enrollment rule and make a note of the enrollment ID and password.
2.Create a text file named enroll.prf that has the following text inside it:
enrollid=[Enrollment ID]
pwd=[Enrollment Password]
server=[Server Address]
3.Copy the enroll.prf file to the devices in one of the following locations:
•Zebra devices: /enterprise/usr/persist/
•Android 4.4+:/internal sdcard/persist/
•Android 4.3 or older:/external sdcard/persist/
After the file is uploaded to the device, run the Avalanche Enabler app. It will automatically reference the enrollment file and enroll the device.
Android Enterprise offers secure management of encrypted Android devices through work profile mode or fully managed mode. For more information, see Getting Started with Android Enterprise.
Enrolling a device using the Android Enterprise enabler requires an enrollment rule that is linked to an enterprise account. For more information about enrollment rules, see Creating Enrollment Rules for Smart Devices.
To enroll a device in work profile mode
1.Use the device to download and install the Ivanti Avalanche Android Enterprise enabler from the Google Play Store.
2.Open the enabler.
3.Enter the Enrollment ID, Password, and Server address in the text boxes and tap Setup Profile.
4.Tap Accept & continue to agree to Google's work profile terms and conditions.
The work profile is created, and the enabler is moved into the work profile.
5.From the work profile, open the Ivanti Avalanche Enterprise enabler. Work profile apps are indicated by a small briefcase badge on the icon.
6.(Optional) Enter the user's corporate user name and email address.
7.Tap Enroll.
The device is placed in the folder associated with the enrollment rule it used and can be viewed from the inventory tab.
To enroll a device in fully managed mode
1.Factory reset the device.
2.Enter the information to connect to your Wi-Fi network.
3.Tap Set up as new.
4.In the email or phone field, enter afw#avalanche and tap Next.
5.Tap Install to download and install the Avalanche Android Enterprise enabler.
6.Tap Accept & continue to allow Avalanche to manage the device and set up Android Enterprise.
7.Enter the Enrollment ID, Password, and Server address in the text boxes and tap Enroll.
Google Play services are installed and the device is enrolled in Avalanche. This may take some time.
The device is placed in the folder associated with the enrollment rule it used and can be viewed from the inventory tab.
Fully managed mode also offers simplified provisioning options. For more information, see QR Code Provisioning and NFC Provisioning.