Prepare devices for zero-touch enrollment

To prepare Android zero-touch enrollment devices before deploying them to your users, do as follows:

1. Check that the devices you want to deploy are registered in the Google zero-touch enrollment portal.

   Usually, the reseller registers the devices for you.

2. In the Google zero-touch enrollment portal, assign the Sophos Mobile configuration to the devices.

   Alternatively, select the Sophos Mobile configuration as default configuration to assign it to new devices automatically.

3. Distribute the devices to your users.

   Users must have a Sophos Fusion user account. If you turn on Use managed Google domain device enrollment in your Android Enterprise settings, users must instead have an account in your managed Google domain.

When a user turns the device on for the first time, the Android setup assistant starts. After the device has connected to the internet, it enrolls with Sophos Mobile as an Android Enterprise fully managed device.