Android zero-touch enrollment
Roll out corporate-owned Android devices at scale—no manual setup. With Codeproof + Android zero-touch, devices auto-provision on first boot and apply your apps, policies, and security in minutes.
What is zero-touch enrollment?
Zero-touch enrollment is Google’s streamlined provisioning flow for corporate-owned Android devices. When an employee powers on a zero-touch device for the first time, it automatically initiates enrollment, downloads the Codeproof MDM agent, and applies management profiles, required apps, and configuration—without user intervention.
Why teams choose Codeproof + zero-touch
- • Speed: Provision hundreds or thousands of devices in parallel—no QR codes, no manual steps.
- • Consistency: Every device receives the same baseline, apps, and restrictions from first boot.
- • Security: Enforce passcodes, encryption, Play Protect, app allow-lists/deny-lists, network/VPN, and more.
- • Resilience: Replacements and resets re-enroll automatically, reducing IT tickets and downtime.
Requirements & eligibility
- Android 8.0 (Oreo) or later on supported, Google-certified devices.
- Devices purchased through participating carriers/resellers and assigned in the zero-touch portal.
- Network connectivity on first boot to reach Google enrollment and Codeproof services.
Supported deployment modes
- Fully managed (work-only): Locked-down corporate device with full policy control.
- Dedicated/Kiosk: Single-purpose or multi-app kiosk (POS, field device, digital signage).
- Corporate-owned work profile (COPE): Corporate device with separate work/personal spaces (where supported).
How it works (end to end)
- Purchase: Order zero-touch-compatible devices from an authorized zero-touch reseller or carrier partner.
- Portal access: Codeproof (or your reseller/carrier) provisions your zero-touch customer portal and invites your admin users.
- Configure: In the portal, create/set the Codeproof MDM enrollment configuration (DPC) and default options (support info, network prompts, etc.).
- Assign: Apply that configuration to device IMEIs/serials (bulk upload or API).
- Unbox & power on: On first boot with Wi-Fi or cellular, the device detects its assignment and begins enrollment automatically.
- Auto-configure: Codeproof applies your policies, Wi-Fi/VPN, certificates, apps, and restrictions based on the assigned profile.
- Ready to work: The device appears in the Cyber Device Manager console, where you can push policies, apps, and manage it remotely.
Security highlights
- Mandatory device passcode/biometric, encryption, and Play Integrity checks.
- App allow-list/deny-list, Managed Google Play, silent installs/updates.
- Network controls (Wi-Fi, APN/VPN), hotspot/Airdrop-like sharing restrictions, USB/debugging controls.
- Lost/stolen workflows: remote lock, wipe, location (where enabled).
- Factory Reset Protection (FRP) safeguards to prevent unauthorized reuse after reset.
Procurement & portal setup
Codeproof can work with your preferred reseller to set up the zero-touch portal, define default configurations, and associate devices at purchase so they’re ready to ship directly to end users.
Common use cases
- Field services, logistics, public safety, healthcare, retail POS
- Shared devices and kiosks with app pinning and usage restrictions
- Rapid replacements—re-enroll automatically after a factory reset
What you’ll need to get started
- List of IMEIs/serials for devices being purchased
- Zero-touch portal access (via your reseller/Google account)
- Codeproof tenant with Android policies, apps, and network profiles defined
FAQs
What is Android zero-touch?
What types of devices can be enrolled with Android zero-touch?
Can I get access to the zero-touch portal?
What is the zero-touch customer portal?
What is the zero-touch vendor/reseller portal?
Who creates the customer portal account?
createCustomer
). Customers then sign in with those invited Google accounts.
API reference.
Does Codeproof offer Android zero-touch reseller/vendor accounts?
Is enrollment over the air (OTA)?
What happens after a factory reset?
Does zero-touch work with BYOD?
Can we switch to kiosk mode?
"Throughout my experience with Codeproof, it has worked flawlessly. Even more importantly, Codeproof support is unrivaled."
Working with Codeproof has been a relief, it allows our company to have control over software and devices and visibility to ensure our employees have the proper equipment to do their job each and every day.
We didn’t make a single compromise to get the protection we wanted and needed.
We have site phones that we need locked and tracked. We have recovered lost or stolen phones...and pushed new apps remotely.
The Codeproof platform not only assists in fleet management, it has made retrieving company property far more reliable.
Customer support is always accessible, and the team consistently goes out of their way to ensure the MDM platform meets all of our needs.
Codeproof had the right balance of easy individual device configuration and group-level settings, as well as an excellent support team and willingness to add new features to meet our needs, all at a competitive price.
Having our employees work in remote locations, Codeproof has really helped us manage our devices...They are very helpful and detailed when explaining thing.
Codeproof has made device management much easier than some larger MDM solutions. From the beginning of our trial Console, up to the present, we were able to easily contact the development team at Codeproof with any ideas for improvements.
With Codeproof, the first thing I noticed is that the UI is much more intuitive and simpler to navigate. I feel like there are as many, if not more, features available to me in Code Proof but they are a little easier to find.
Foundation is so grateful for the partnership with Codeproof and their willingness to support students and families in need of literacy resources. While our technical needs are likely less than that of other companies, we have found great value in the Codeproof product.
Codeproof has great customer support. If there is an issue, or if we need assistance with anything, they are very quick to respond and lend a hand.
Terrapin Pharmacy’s Executive Management and Technology Developers would be extremely likely to recommend Codeproof to others based upon the interactions we have had with the Codeproof team and the can-do culture within their organization.
Codeproof is a very comprehensive MDM product. We received great service at all times from their technicians when we had issues. They are continually working on improving the product with feedback from customers like us, so we can have better control of our remote equipment.
[An] upbeat, well-organized, and helpful company. Codeproof provided superior customer support during a time of uncertainty.
Codeproof has been an asset in maintaining security, control and reducing liability of our mobile devices by allowing us blanketed control of our mobile fleet at all times regardless of day and location. It will continue to be the foundation for our mobile security for now and the future. Their security options and scalability is priceless.
I chose Codeproof over other players in the market because it's simple and customizable dashboard caters to the needs of my business. Codeproof tries to find solutions and treats you as partners rather than just a customer.
I chose Codeproof for our internal MDM solutions over other options because the case study and utilization of the system were very understandable. It decreased our potential costs related to device investments while increasing device security and reducing operational costs.

















