Enroll an Android Device in Mobile Device Management (AirWatch)

Overview

Stanford's Mobile Device Management (MDM) service installs profiles on your device that configure and maintain settings on your device. MDM helps protect your privacy and the university's data.

Before you can enroll your Android device in the MDM service, you must install the Intelligent Hub app from the Google Play Store. You need a Google account to do this.

Depending on your device, you may also need to install additional services to support the enterprise capabilities of your device. If your device blocks the installation, change your security settings to allow installation of applications not obtained from the Google Play Store.

During the enrollment process you'll be required to set a password with a minimum of four characters on your device.

Back up your device before enrolling! Your cellular carrier typically provides a mechanism to back up your pictures, contacts, etc. Do this first.

What to expect after you enroll in MDM

Your device will:

• Require a password to unlock it. Stanford requires that your password is a minimum of four digits. Some manufacturers require a stronger password.
• Time out after a period of inactivity and require a password to unlock it. You can change your display preferences in Settings to adjust the screen time out.
• Sync your email, contacts, and calendar appointments during the first few minutes after installation if email activation is supported on your device. 
• Check periodically to make sure it isn't rooted.
• Display the Stanford App Catalog.
• Perform otherwise as it did before you installed the MDM.

Before you begin

• Check that your device is running Android OS 8 or later. You cannot enroll a device in MDM if the OS is below 8.
• Make sure you have a Google ID — otherwise, you won't be able to download the Intelligent Hub app from Google Play. See Create your Google Account if you need to set one up.
• Remove any SD cards because they may become inaccessible after encryption.

Download Intelligent Hub

You must be using your Android device to begin the enrollment process.

1. Install the Intelligent Hub app on your Android device.
   
   

Enroll in MDM

Enrollment consists of three parts:

• Authenticate - authenticate to Hub with your Stanford credentials
• Secure - grant permissions to Hub and set a passcode
• Configure - configure your Stanford email account

Authenticate

1. After the Intelligent Hub app installs, tap Open.
   Alternatively, you can open Intelligent Hub from your home screen by tapping Hub.
2. At the prompt for your email address or server, enter your @stanford.edu email address and tap Next.
   
3. You may be asked to allow the Hub to make and manage phone calls. Tap Allow.
   Note: While this capability exists in Intelligent Hub, Stanford University does not access this feature. See the MDM Privacy page for more information.
   
4. Next, theLogin screen displays. Enter your SUNet ID and password and tap Login. You will also be prompted to enter a second factor for two-step authentication.
   There is typically a delay before the next page displays.
5. Select the ownership of the device and then tap Next.
   
6. Tap Accept to accept Stanford's terms and conditions.
   
7. Next the Privacy page displays. Tap I understand.
   
8. When the data sharing page displays, tap I agree. You have completed the authentication.
   

Secure

1.  Tap Next.
   
2. Hub informs you that it needs to be the device administrator. Tap Next.
   
3. Tap Activate to grant permissions to  Hub to manage your device.
   

Install additional services (not required for all devices)

Depending on your device, you may also need to install additional services to support the enterprise capabilities of your device.

• You may see a message that says you need to enable installation of enterprise apps not available in the Play Store. Open the Settings app, enable Unknown sources  (often in the Security settings) to allow installation of apps from sources other than the Play Store. Then, return to the installation.
• If you are using a Samsung device:
  • You may be prompted to install the  Samsung ELM app. If prompted, open with package installer and then tap Install.
  • After the app installs, the Activate device administrator screen displays.Tap Activate.
  • Agree to the Samsung KNOX privacy notice terms and then tap Confirm.
• On some devices, information regarding how the Hub Enterprise Service interacts with your device is displayed across several screens. Tap Next to advance to the next screen. On the last screen, tap Install. If the Activate device administrator screen displays once again, tap Activate.

Set a password

If you have not already set a password on your device you will be prompted to do so now.

1. A message saying that a device password is required displays. Tap Create Passcode.
   
2. Enter a PIN or password that consists of at least four characters and tap Continue. Some manufacturers require a stronger password).
3. Confirm your password by entering it again.

Configure

1. The next part of enrollment configures enterprise resources for your device. Tap Next.
   
2. Tap Continue to begin setting up your Stanford email.
   
3. Enter your @stanford.edu email password and enter it again to confirm. Then, tap OK.
   
4. When the configuration completes, tap Next.
   
5. A page allowing you to access your account information displays. You can navigate away from this page.
   

Activate your Stanford mail

To activate your Stanford email account, tap the Email app or navigate to Settings > Accounts > Exchange ActiveSync.

Connect to the Stanford VPN (not available on all devices)

See Configure VPN for Android for instructions on how to connect to the Stanford VPN with your Android device.

Manage your mobile device

Once your device is successfully enrolled in Mobile Device Management (MDM), you can manage your device in MyDevices. It can take up to 8 hours before your device appears. See Manage a Mobile Device for more information.