Enroll Work Managed Device Using a QR Code

The QR code enrollment method sets up and configures Work Managed Device and Corporate Owned Personally Enabled (COPE) modes by scanning a QR code generated with the Enrollment Configuration Wizard or from any QR code generator, such as Web Toolkit Online.

To use the UEM console to create the QR code, see the Enrollment Configuration Wizard (Devices > Lifecycle > Staging > List View > Configure Enrollment).

Important: This enrollment flow is available for Managed Google Play and Managed Google Domain users. This enrollment flow is supported on Android 7.0+ devices.

1. Power on the factory reset or out of the box device. The setup wizard prompts the user to tap the Welcome screen six times.The taps have to be done in the same place on the screen.

   • For Android 8.0+ devices, proceed to step 2 in order to download the QR code reader.

   • For Android 9.0+ devices, the camera will open automatically after you complete the six taps.

2. Connect to Wi-Fi and the setup wizard automatically downloads a QR code reader. The QR code reader app automatically starts once complete. On Android 8.0 and 9.0 devices, you can use mobile connectivity. On Android 10 or later, Wi-Fi is required.

3. Scan your QR code. For Android 9.0+ devices, use the QR code option on the camera to scan. You can use any online QR code generator, such as Web Toolkit Online.

To create your unique QR code, enter the following code into the QR Code Text Format field:

{"android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME":
"com.airwatch.androidagent/com.airwatch.agent.DeviceAdministratorReceiver","android.app.extra.PROVISIONING_DEVICE_ADMIN_SIGNATURE_CHECKSUM":
"6kyqxDOjgS30jvQuzh4uvHPk-0bmAD-1QU7vtW7i_o8=\n","android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION":"https://getwsone.com/mobileenrollment/airwatchagent.apk",
"android.app.extra.PROVISIONING_SKIP_ENCRYPTION": false,"android.app.extra.PROVISIONING_WIFI_SSID": "Your_SSID","android.app.extra.PROVISIONING_WIFI_PASSWORD": "Password",
"android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": 
{"serverurl": "Server URL",
"gid": "Group ID",  
"un":"Username",
"pw":"Password"}
}

1. The setup wizard automatically downloads the Workspace ONE Intelligent Hub and automatically configures the Server URL, Group ID, Username, and Password as specified in the generated QR code.

   Note: When Server, Group ID, Username, and Password are all included in the configuration, any additional enrollment prompts are skipped by the Hub

2. Enter the user credentials of not previously configured in the QR code.

   If enrollment was successful, the My Device page displays on the device. All profiles and applications start to push automatically to the device.

   The Workspace ONE UEM console reports the status of Android on the users devices. You can check the Details View page to verify the device enrolled in Work Managed Mode successfully.

Generate a QR Code Using the Enrollment Configuration Wizard

Create a QR Code to scan with your Android 7.0 or later devices to stage the device quickly. The wizard simplifies the staging configuration process.

1. Navigate to Devices > Lifecycle > Staging > List View > Configure Enrollment > Android > QR Code in the Workspace ONE UEM console.

2. Connect the device to Wi-Fi prior to enrollment by enabling the Wi-Fi toggle. The following options display:

   Setting	Description
   SSID	Enter the Service Set Identifier, more commonly known as the name of the Wi-Fi Network.
   Password	Enter the Wi-Fi password for the entered SSID.

3. Select Next.

4. Select the Workspace ONE Intelligent Hub to push to devices during staging. The default selection is Use latest Workspace ONE Intelligent Hub.

   If you do not have the Workspace ONE Intelligent Hub added, select Hosted on an external URL and enter the address in the URL text box to point to an externally-hosted Workspace ONE Intelligent Hub Package.

5. Select Next.

6. Set the Enrollment Details settings. To use token-based authentication, leave both options disabled.

   Setting	Description
   Organization Group	Enable and select the organization group the QR Code staging package uses.
   User name	Configure login credentials. Enter the Workspace ONE UEM account user name.
   Password	Enter the corresponding password.
   System Apps	Applies to Work Managed devices only. You can Enable to keep non-critical system applications installed on your Work Managed device. Select Disable which remove these applications.
   Force AOSP/ Closed Network Enrollment	When this field is enabled, you can enroll GMS and non-GMS devices in the same organization group regardless of the Work Managed device enrollment type set during Android EMM registration. - If the flag is set to use GMS and the UEM console is set to AOSP in the Android EMM registration page, the device will use the UEM console flag and enroll without Google account.
   	If the flag is set to use GMS and the UEM console is set to User-Based or Device-Based accounts, the Intelligent Hub will attempt a GMS enrollment flow. If the device is non-GMS, enrollment fails.

7. Select Next.

8. The Summary page allows you to Download File of the PDF. Select View PDF to see a preview of your QR Code Format selections.