To provide an intuitive end user experience for the migration, this page will guide you through a successful migration. Not completing these steps could result in a failed migration or users not being able to access all apps they need.
Device needs to be eligible for migration. For example. Samsung devices with Knox Container enabled cannot be migrated.
Check eligibility for migration by navigating to Device Details > Custom Attributes and make sure migration.eligible
attribute has a value of True
.
Before you migrate, you will need to create Smart Groups for all devices that are being migrated. You can create separate groups for staging a small number of devices for testing purposes before you deploy to all your devices.
The Workspace ONE UEM console provides a seamless process that helps you create Smart Groups to migrate all devices from Android (Legacy) to Android Work Profile deployment.
Select the applicable **Organization Group (OG)**to which your new smart group applies and from which it can be managed. Selecting an OG is optional.
Navigate to Groups & Settings > Groups > Assignment Groups and then select Add Smart Group
Enter a Name for the smart group.
Configure the Smart Group type:
At least one device deployed as Android (legacy) needs to be selected as eligible for migration or you will get errors while setting up the migration.
Select Save.
Android Enterprise profiles are separate from device administrator, or Android (Legacy) profiles. You must re-create profiles for Android enterprise. These profiles are available for configuration after completing the Android enterprise registration.
On UEM consoles lower than 9.4.0, Android enterprise profiles are available under Devices > Profiles & Resources > Profiles > Add > Add Profile > Android > Android for Work.
On UEM consoles 9.4.0 and higher, Android enterprise profiles are available under Devices > Profiles & Resources > Profiles > Add > Add Profile > Android.
Note: If the Wi-Fi profile was configured for your Android (Legacy) deployment, you must create and assign an Android Wi-Fi profile to the devices selected for migration before you can create a migration.
Android device profiles ensure proper use of devices, protection of sensitive data, and workplace functionality. Profiles serve many different purposes, from letting you enforce corporate rules and procedures to tailoring and preparing Android devices for how they are used.
Once an application is added to the Workspace ONE UEM console, it can be distributed to device administrator, also known as Android (Legacy), and Android enterprise enrollments. If a public application has been added to the UEM console prior to Android enterprise registration, the application management section of this guide will help you configure settings so there will be no disruption to existing app assignments.
Internal applications cannot be managed for Work Profile management mode under Android Enterprise. In order to make sure internal applications are available for devices that have migrated to Work Profile, you must upload the application to the Managed Google console as a private application prior to migration.
Use Workspace ONE UEM to manage the deployment and maintenance of publicly available mobile applications from Google Play Store. Make sure every public app is approved for your organization to ensure seamless migration.
Note: If you are migrating to Work Managed devices, review your Play Store restriction policy prior to migration. If the Play Store is blocked prior to migration, your devices will be treated as AOSP Work Managed devices, and will not support public app management. If you’d like to deploy apps from the Play Store after migrating to Work Managed, ensure the Play Store is not blocked on your legacy enrolled devices prior to migration to Work Managed.
If a public app has been added to the UEM console prior to the Android (Legacy) migration and Android Enterprise registration, this task will help you make sure all apps are imported after the migration.
These steps simply ensure the UEM console is aware the app has been approved on managed Google Play. It is now possible to assign this app to Android enterprise enrollments after the migration has completed.
Navigate to https://play.google.com/work (log in with the same Gmail account used to configure Android enterprise), search for the app(s) and approve it for your organization.
In the UEM console, navigate to Apps & Books > Native > Public > Add Application > Android > Import from Play .
Select Import once the list of approved apps displays
After migration, the app cache is cleared and users will have to re-enter there credentials.
The Network Requirements for Android is a list of known endpoints for current and past versions of enterprise management APIs. Check your network settings to ensure a connection between Workspace ONE, the Google Play Store, and Android devices.
Once you’ve walked through the prerequisites, you are ready to proceed with the migration with your desired device mode.