Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/Mobile/help/en-us/index.html?contextId=zero-touch

Zero-touch enrollment

Requirements

  • You have an account for the Google zero-touch enrollment portal. Usually, the device reseller creates the account for you when you purchase your first devices.
  • If you registered your organization with Android Enterprise in managed Google domain mode before April 9, 2024, you must turn on Use managed Google domain device enrollment in your Android Enterprise settings. See Managed Google domain device enrollment.

With Android zero-touch enrollment, you can enroll corporate-owned Android devices in bulk.

With zero-touch enrollment, devices automatically enroll with Sophos Mobile as an Android Enterprise fully managed device when the users turn them on.

For details on Google zero-touch enrollment, see the Google zero-touch website and Android Enterprise Help: Zero-touch enrollment for IT admins.

To use zero-touch enrollment, perform the following steps:

  1. Turn on zero-touch enrollment in Sophos Mobile Admin and configure enrollment details. See Set up zero-touch enrollment.
  2. Create a configuration for Sophos Mobile in the Google zero-touch enrollment portal. See Create zero-touch configuration.
  3. Purchase devices that are compatible with zero-touch enrollment from a Google-approved enterprise reseller.
  4. Assign the zero-touch configuration for Sophos Mobile to the devices. See Prepare devices for zero-touch enrollment.