Device Owner (DO) mode

The Device Owner (DO) mode is suitable for company-owned devices that are exclusively used for work purposes. It restricts personal app installation and access to personal data, making sure that the device remains solely for work-related activities. IT administrators can enforce device management, remote wipe, or preinstall policies and apps on the devices before they are issued to the employees.

Choose one of the following methods to enroll your device in DO mode in IBM® MaaS360®.

Configure by using afw#maas360

Follow the steps to enroll and configure by using afw#maas360.

  1. Turn on the new device or the factory reset device.
  2. Enter afw#maas360 when prompted for the Google account.
  3. Follow the instructions to download the MaaS360 app and to enroll the device.
  4. Enter the Corporate ID and Email address when prompted.

The corporate identifier, email, and domain are sent to the user with the enrollment request. If you are using a unique passcode for enrollment authentication, you are prompted for the unique passcode from the enrollment request. If you are using corporate or local credentials, you are prompted for the username and password.

Configure by using QR Code

Follow the steps to configure by using QR Code.

  1. Generate the QR code by using the Android Device Enrollment Wizard.
  2. Set Device Management as Device Owner.
  3. Set Enrollment mode as QR code.
  4. Start the device and tap 5 times on the Start screen and scan the QR code that is generated in the wizard link.

Configure by using Zero-touch

Follow the steps to configure by using Zero-touch.

  1. Configure JSON in the Android Device Enrollment Wizard.
  2. Select Enrollment mode as Zero-touch (ZT).
  3. Select Device Management as Device Owner.
  4. Generate the JSON.
  5. Configure the Zero-touch Portal settings along with the device IMEI, and then turn on the device to automatically complete the enrollment.
  6. Connect to the wifi network.
  7. Click Accept & Continue to complete the app installation process.
    Note: The installation is completed when a work account is successfully created on your device. The device completes the enrollment setup according to the QR code configuration.
The users must authenticate depending on their wizard settings.

Configure by using KME

Follow the steps to configure by using Samsung Knox Mobile (KME).

  1. Configure JSON in the Android Device Enrollment Wizard.
  2. Select Enrollment mode as Samsung Knox Mobile.
  3. Select Device Management as Device Owner.
  4. Generate the JSON.
  5. Configure the KME Portal settings along with the device IMEI, and then turn on the device to automatically complete the enrollment.
  6. Connect to the wifi network.
  7. Click Accept & Continue to complete the app installation process.
    Note: The installation is completed when a work account is successfully created on your device. The device completes the enrollment setup according to the KME configuration.
Important: The users must authenticate depending on their wizard settings.

DO devices can also be configured as dedicated devices called Corporate-owned dedicated devices (COSU). The DO mode is designed for corporate-owned devices to serve a specific purpose, such as running a single application or providing a kiosk-like experience. Organizations can configure these devices to meet the needs of various use cases, including employee-facing tasks in factory and industrial settings, customer-facing signage and kiosks, and even point-of-sale (POS) terminals. Android provides granular control over various device features, including the lock screen, status bar, keyboard, and other key elements. This control prevents users from enabling unauthorized applications or from actions that might interfere with the intended purpose of that device.