Getting Started with Android Enterprise

Android Enterprise integrates Avalanche and Google APIs to manage your devices, pairing the best of Google security and application management with the device management capabilities of Avalanche.

Creating an Android Enterprise account gives you access to a managed Google Play Store that is unique to your enterprise. You can either create a new enterprise account through Avalanche or enroll an existing one. To manage Android Enterprise devices, use your managed Google Play Store to approve, purchase, and publish apps, then use Avalanche to configure and distribute those apps, configure device settings, and perform actions on the device.

Avalanche can manage Android devices through a selection of different management modes, including work profile mode, fully managed mode, and dedicated device (kiosk/lock task) mode.

Configuring Avalanche for Android Enterprise

1.Secure the smart device server. The smart device server requires an SSL certificate to securely communicate with Android devices. For information about obtaining a certificate, see Obtaining SSL Certificates. For information about adding the certificate to the smart device server, see Importing a Certificate for the Smart Device Server.

2.Secure the web console connection. The connection between the web console and the Avalanche web server must be secured. For information about securing the connection, see Accessing the Web Console Over an HTTPS Connection.

3.Set up notification services. Google's notification service, Firebase Cloud Messaging (FCM), is required to establish communication between Avalanche’s smart device server and your enterprise enrolled Android devices. For information about enabling FCM and its port requirements, see Configuring FCM for Android.

4.Create an Android Enterprise account. An enterprise account connects Avalanche and Google, enabling Android Enterprise device management and giving you access to an enterprise managed Play Store. For information about creating an enterprise account from the Avalanche console, see Creating an Enterprise Account

Enrolling Android Enterprise devices

•Create an enterprise enrollment rule. Enrolling a device using the Android Enterprise enabler requires an enrollment rule that is linked to an enterprise account. For information about enrollment rules, see Creating Enrollment Rules for Smart Devices.

•Enroll work profile devices. Work profile mode is typically used for employee-owned devices (BYOD), since it creates a work profile that is distinct from the rest of the device. Work profiles keep the user's work related accounts, apps, and data separate from their personal data. For information about enrolling work profile devices, see Work Profile Mode. (Requires Android 5.1+.)

•Enroll fully managed devices. Fully managed mode is typically used for company-owned devices, since it has full control over the device and its data. Fully managed device mode offers extensive control over device apps, policies, and settings. For information about enrolling fully managed devices, see Fully Managed Mode. (Requires Android 6.0+.)

Fully managed mode also offers simplified provisioning options. For more information, see QR Code Provisioning and NFC Provisioning.

Managing Android Enterprise devices

•Set up dedicated (kiosk/lock task) devices. Dedicated device mode locks fully managed devices to a single app or set of apps. Dedicated device mode (also known as kiosk mode) is a subset of fully managed mode. To put a device into dedicated device mode, enroll it as a fully managed device then use a restrictions payload to enable lock task mode. For information about setting up dedicated devices, see Dedicated Device (Lock Task) Mode.

•Distribute software to devices. Log in to the managed Play Store to approve, purchase, and publish apps for your enterprise. Then, use Avalanche software payloads to configure, set permissions for, and distribute apps to your devices. For information about creating software payloads, see Software Payload. For information about configuring apps, see Configuring Enterprise Apps. For information about setting app specific runtime permissions, see Setting Enterprise App Permissions.

•Create payloads to configure devices. Use Android Enterprise payloads to configure device settings and restrictions from the Avalanche console. For information about available Android Enterprise payloads, see Smart Device Payloads.

•Perform actions from the console. Click on a device in the device inventory to perform tasks such as retrieving logs, locating the device, or wiping the device. For information about the available tasks, see Device Tasks from the Console.