Category filter

How to enroll a device in Android Enterprise as Work Profile on Company-Owned Device

Google has introduced a new feature for managing Work Profile on Company-Owned Devices (WP-C) in Android Enterprise. WP-C consists of devices owned by the organization and provided to employees for work and personal use. Enrolling these devices creates a dedicated work profile that effectively separates work-related data from personal information. This enrollment allows you to maintain control over the devices and enhance the device security without compromising user privacy. With Hexnode, you can enroll your device in Android Enterprise as a Work Profile on a company-owned device.

Notes:

  • Device requirements:
    1. Samsung Knox devices: Android version 11.0 and above.
    2. Standard Android devices: Android version 10.0 and above.

Initially, enroll your organization in Android Enterprise program and then follow the steps mentioned below to enroll your device as a Work Profile on Company-Owned Device (WP-C).

Hexnode UEM console configuration

  1. Navigate to Admin > Android Enterprise > Organization.
  2. Under Organization, a QR code of the default enrollment profile will be displayed along with configured organization and enrollment profile details.
  3. Note:


    You can also view the QR Code on your Hexnode UEM portal from Enroll > All Enrollments > Enterprise > Android Enterprise > Organization or Platform-Specific > Android > Android Enterprise > Organization.

    Enrolling Android devices as Work Profile on Company-Owned Device (WP-C) using QR code

  4. Change the default enrollment profile to the desired one, where the Enterprise management type was set as Work Profile on a company-owned device during its creation. This will update the QR code and other details according to the configuration of the selected enrollment profile. You can create a new profile by navigating to Enroll > Platform-Specific > Android > Android Enterprise > Enrollment Profiles.
  5. Note:


    The default enrollment profile should not be removed or deleted from the Hexnode UEM console until the device has completed its enrollment process; otherwise, the enrollment process will fail.

Device enrollment steps

If your device is already set up, perform a factory reset to initiate enrollment. Make sure to remove all associated accounts from the device before executing the factory reset. You can start the enrollment directly from the welcome screen for new devices.

  1. Tap on the welcome screen 6 times.
    Welcome screen appears on the device after it is reset or powered on
  2. A QR code reader will get installed on your device.
  3. Note:

    • Devices without a built-in QR code scanner will prompt users to connect to a network before scanning the QR code. In such cases, if the Add Wi-Fi Network Configuration to QR Code option is configured while setting up the enrollment profile, ensure the device is connected to the same network specified in the portal before scanning the QR code; otherwise, the scan will fail.
    • If the device is not in the range of the configured Wi-Fi network after scanning the QR Code, it will continue returning to the QR Code scanning page until the device can be connected to the configured network.

  4. Using the QR code reader, scan the QR code for ‘Work Profile on Company-Owned Device (WP-C)’. You can locate this QR code within your Hexnode portal by navigating to Admin > Android Enterprise > Organizations to view the QR code.
    Note:

    You can also view the QR code on your Hexnode UEM portal from:

    Enroll > All Enrollments > Enterprise > Android Enterprise > Organizations

    Or

    Enroll > Platform-Specific > Android > Android Enterprise > Organizations

    Screen displaying a QR code scanner on the device

  5. Click on Agree to continue the installation process.

    Screen displaying the permission to set up a work profile

  6. Click on Agree after reading the Hexnode End-User License Agreement.
    Screen displaying the permission to complete work profile on company-owned device enrollment
  7. Your device will begin enrolling with Hexnode UEM.
    Hexnode app page showing that the device is currently undergoing enrollment
  8. Next, you will be brought back to some standard setup screens such as the option to add their personal Google account. You can either skip this option or continue with this step to complete the setup.
    Screen displaying the option to set up a Google account on the device
  9. The installation is successfully completed as soon as a work profile is created on your device.
    Hexnode home page displaying that work profile on company-owned device enrollment has been successfully completed
  10. After the work profile is created, an additional Hexnode for Work app, with a work badge on the icon, will be generated under the work profile.
    Hexnode for Work app with a badge after work profile on company-owned device enrollment
  11. Now open the Hexnode for Work app without the badge.
  12. The app will prompt its uninstallation. Tap Uninstall to uninstall the app.
Note:


There might be some device-specific differences in the enrollment procedure. For example, some devices might ask for additional permissions, which the user must agree to before proceeding.

After enrollment, the device will have a container that separates personal data from company data. You will also have the option to turn off the work profile on the device.

  • Managing 'Android Enterprise' Devices