How to create a QR code to enroll a device into Android Enterprise Device Owner (DO) mode

Environment

• Android Enterprise
• Device Owner

Overview

This article provides information on how to create a QR code for provisioning an Android device into Android Enterprise’s device owner mode.

The following parameters are used to generate a QR code:

1. android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME — Specifies the device admin component name of your application that you want to set as device owner.

2. android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_CHECKSUM — Specifies the package checksum of your app that you want to set as device owner. To generate the package checksum, you can use openssl as specified below:

   cat name-of-APK.apk | openssl dgst -binary -sha256 | openssl base64 | tr '+/' '-_' | tr -d '='
   

3. android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION — Specifies the location/address where the device owner app is stored.

4. android.app.extra.PROVISIONING_SKIP_ENCRYPTION — Optional parameter used to skip encryption while provisioning the device into device owner mode.

5. android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED — Optional parameter used to enable/disable all system apps depending on the value specified.

6. android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE — Optional parameter. You can specify a list of parameters depending on what the device owner app supports. This bundle is delivered to the device owner app.

For example, if you have downloaded a Knox SDK sample app and want to make that app a device owner, the following can be used to generate a QR code:

{
    "android.app.extra.PROVISIONING_DEVICE_ADMIN_COMPONENT_NAME":
    "com.samsung.knox.example.knoxsdk/com.samsung.knox.example.knoxsdk.DeviceAdminReceiver",

    "android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_CHECKSUM":
    "PACKAGE_CHECKSUM",

    "android.app.extra.PROVISIONING_DEVICE_ADMIN_PACKAGE_DOWNLOAD_LOCATION":
    "PACKAGE_DOWNLOAD_LOCATION",
    "android.app.extra.PROVISIONING_SKIP_ENCRYPTION": true,

    "android.app.extra.PROVISIONING_LEAVE_ALL_SYSTEM_APPS_ENABLED":true,
    "android.app.extra.PROVISIONING_ADMIN_EXTRAS_BUNDLE": {
    }
}

Additional information

For more details on how to enroll and provision a device in Device Owner (DO), see the Android Management API documentation.

To read more about the Knox SDK, refer to the Knox SDK API reference.