Configure Android Factory Reset Protection
Restriction
These instructions only apply to Android Enterprise fully managed devices.
Factory Reset Protection (FRP) is an Android security feature that ensures a device can only be reset to its factory settings when the Google account credentials are known.
You can configure Google accounts to unlock any Android Enterprise fully managed device that was reset with FRP turned on.
-
Create one or more Google accounts you want to use for FRP, or use existing accounts.
Warning
Make sure you share the account credentials with your organization. These are required to unlock a device that was reset to its factory settings with FRP turned on.
-
Get the internal Google IDs of your accounts.
- Go to https://accounts.google.com/Login
- Sign in with the Google account you want to use for FRP. If you’re already signed in with a different account, sign out first.
- Go to https://developers.google.com/people/api/rest/v1/people/get
- In the Try this API section, enter
people/me
in the resourceName field andnames
in the personFields field. -
Select Execute.
This calls the Google API.
In the response, the internal Google ID is the 21-digit number in a line like the following:
"resourceName": "people/123456789012345678901"
-
In Sophos Central Admin, go to My Products > Mobile.
- On the menu sidebar, select Setup > Google setup and then the Android Enterprise tab.
- Under Factory Reset Protection, select Use FRP.
-
In Google+ IDs, enter the internal Google IDs of the accounts you want to use for FRP.
Warning
If the internal Google IDs you enter in Sophos Mobile Admin are invalid, or if you forget the credentials of the Google accounts, devices become unusable when you reset them to their factory settings with FRP turned on.
-
Select Save.
FRP is turned on for all your Android Enterprise fully managed devices. This happens the next time a device synchronizes with Sophos Mobile.