Work Profile Not Created for Successful DO (WPC) Enrollments
Last updated July 26th, 2023
- Knox Mobile Enrollment (KME)
- Android 11
- Device Owner (DO) profile: Work profile on company-owned device (WP-C)
Users using KME to enroll devices with a DO (WP-C) MDM profile are experiencing an issue where the work profile is not being created, but the enrollment is completed without any errors.
In Android 11, Google made many changes in order to protect user privacy on company-owned devices. One of the changes was the replacement of the device management mode called fully managed device with a work profile with a new work profile on company-owned device.
This profile type requires a certain configuration of the KME profile. If the KME profile configuration is incorrect, then the work profile will fail to be created.
During the KME Android Enterprise (DO) profile creation, there are 2 options:
Force Device Owner enrollment
Let MDM choose to enroll as a Device Owner or Profile Owner.
If you are enrolling in a WP-C MDM profile, please ensure that Let MDM choose to enroll as a Device Owner or Profile Owner is selected.
If Force Device Owner enrollment is selected, the provisioning mode is automatically set to PROVISIONING_MODE_FULLY_MANAGED_DEVICE (DO without a work profile) instead of PROVISIONING_MODE_MANAGED_PROFILE (WPC).
To learn more about the different device management modes in Android 11, see the Knox Platform for Enterprise admin guide.Back to KBAs
Is this page helpful?
Thank you for your feedback!