Skip to content Skip to navigation

Android MDM Installation Instructions


The settings used in the installation instructions should be similar for all Android devices. Due to different versions of the Android OS and hardware, the name and location of menus and options may vary.

Before you can enroll your Android device in the MDM service, you must install the AirWatch app from the Google Play Store. You need a Google account to do this.

Depending on your device, you may also need to install an additional service to support the enterprise capabilities of your device. If your device blocks the installation, change your security settings to allow installation of applications not obtained from the Google Play Store.

During the enrollment process you'll be required to set a password with a minimum of four digits on your device. Your device also needs to be encrypted; it must be plugged in and charged to 80% before encryption can begin. If your device is already encrypted, you will skip this step during enrollment.

What to expect after you install a profile

Your device will:

  • Require a password to unlock it. Stanford requires that your password is a minimum of four digits. Some manufacturers, such as Samsung, require  a stronger password.
  • Time out after a period of inactivity and require a password to unlock it. You can change your display preferences in Settings to adjust the screen time out.
  • Sync your email, contacts, and calendar appointments during the first few minutes after installation if email activation is supported on your device. See Will MDM Work on My Android?
  • Display the AirWatch app and the Stanford App Catalog.
  • Perform otherwise as it did before you installed the MDM.

Before you begin

  • Check that your device is running Android OS 4.0 or above. You cannot enroll a device in MDM if the OS is below 4.0.
  • Check the list of devices successfully enrolled in MDM during Stanford's testing to see if your device is on it.
  • Make sure you have a Google ID. Otherwise, you won't be able to download  AirWatch from Google Play. See Create a new Google Account if you need to set one up.
  • Make sure your device is at least 80% charged and plugged in.  Otherwise, you will not be able to encrypt.
  • Back up your device. If you encrypt your device and then forget your password you will need to set your device to factory reset.
  • Remove any SD cards because they may become inaccessible after encryption.

Download AirWatch

  1. Log in to
  2. If the WebLogin screen displays, enter your SUNet ID and password and tap Login. You also may have to enter an authentication code for two-step authentication.
  3. Read the instructions and then tap  Begin Enrollment.

    begin MDM enrollment
  4. If prompted to "Complete action using," tap Play Store and Just once.
  5. On the AirWatch MDM Agent page, tap Install.

    install AirWatch MDM Agent from Google Play Store
  6. You may be prompted to sign in to your Google Play account in order to install the app. Sign in and then tap Install.
  7. When the App permissions screen displays, tap Accept.

    list of apps that AirWatch needs permission to access

Enroll in MDM


  1. After the AirWatch MDM Agent installs, tap Open. Alternatively, you can open AirWatch from the home screen. With your apps displayed, tap AirWatch Agent.
  2. Choose Email Address for your authentication method..

    choose an authentication method
  3. At the prompt for your corporate email ID, enter your email address and tap Continue.

    enter your email address
  4. If you didn't enter a valid email address, the next screen  prompts you for a server and group ID. If this screen displays, enter the following and then tap Enroll Device.
    • Server:
    • Group ID: SU-MDM or SU-Google (depending on where your email is hosted)
    • Continue without email address: checked
  5. If you are prompted to "Complete action using," select the browser of your choice and tap Always so you don't see this message again during the enrollment process.
  6. If the WebLogin screen displays, enter your SUNet ID and password and tap Login. You also may have to enter an authentication code for two-step authentication.
  7. Select the owner of the device and then tap Continue.

    select the ownership of the device
  8. Tap Accept to accept the terms of use.


  1. You have completed the authentication part of enrollment and are ready to ensure you device is compliant with Stanford's policies. Tap Get Started.

    begin part 2 of enrollment to ensure device is compliant
  2. AirWatch informs you that it needs to be the device administrator. Tap Continue.

    grant permissions to AirWatch
  3. Tap Activate to grant permissions to AirWatch to manage your device.

    activate device administrator

Install AirWatch enterprise service (not required for all devices)

  1. Depending on your device, you may see a message that says you need to enable installation of enterprise apps not available in the Play Store. Tap Device Settings.

    OK AirWatch enterprise service installation
  2. The Settings app opens. Check the Unknown sources box to allow installation of apps from sources other than the Play Store. Then, tap your device's back button to return to the installation. Tap Continue to install the enterprise service .
  3. Information regarding how the AirWatch enterprise service interacts with your device is displayed across several screens. Tap Next to advance to the next screen. On the last screen, tap Install.
  4. The Activate device administrator screen displays once again. Tap Activate.


  1. The next part of enrollment configures enterprise resources for your device. Tap Continue.

    begin configuration part of enabling MDM
  2. Tap Continue to begin setting up your Stanford.
    Note: Stanford email is not available on all devices.

    begin email setup
  3. Enter your email password and enter it again to confirm. Then, tap OK.

    enter your email password
  4. If an Install Applications screen displays listing one or more applications that have been assigned to you, tap Continue.
  5. When the configuration completes, tap Exit.

    exit the setup wizard

Set a password and encrypt your device

Note: Encryption can take an hour or more. Start with your battery at least 80% charged and keep your device plugged in until encryption is completed.

  1. A message saying that a passcode is required displays. Tap OK.

    passcode required message
  2. The Settings app opens. Tap Password.
  3. Enter a password that consists of at least four digits. Some manufacturers require a stronger password (for example, Samsung requires a six-character alphanumeric password).
  4. Confirm your password by entering it again.
  5. Tap Encrypt Device.

    start encrypting your device
  6. Confirm that you want to continue with device encrption.

    confirm encryption
  7. Tap Encrypt device.

    encrypt device
  8. Enter your password.
  9. Tap Encrypt device again to confirm that you want to encrypt this device.

Connect to the Stanford VPN (not available on all devices)

See Configure VPN for Android for instructions on how to connect to the Stanford VPN with your Android device.

Last modified August 8, 2013