Skip Navigation

Data flow: Activating an
Android Enterprise
device

Diagram showing the steps and the BlackBerry UEM components used when activating a Samsung Knox Workspace device in a dark site environment.
This data flow applies to devices activated with the
Android Enterprise
(
Work space only
) or (
Work and personal - full control
) activation types.
  1. You perform the following actions:
    1. Add a user to
      BlackBerry UEM
      as a local user account or using the account information retrieved from your company directory
    2. Make sure that the "
      Android Enterprise
      (
      Work space only
      )" or "
      Work and personal - full control
      ” activation type is assigned to the user
    3. Allow activation QR codes to include the activation password and the location to download the
      BlackBerry UEM Client
      .
  2. The user resets their device to the factory default settings.
  3. The device restarts and displays a Welcome or Start screen.
  4. The user performs the following actions:
    1. Opens the activation email they received on their computer or another device
    2. Taps the device screen seven times to open a QR code reader
    3. Connects the device to the work
      Wi-Fi
      network
    4. Scans the QR code in the activation email
  5. The device performs the following actions:
    1. Prompts the user to encrypt the device and restarts
    2. Downloads the
      UEM Client
      from the download location specified by the QR code and installs it
  6. The
    UEM Client
    establishes a connection with
    BlackBerry UEM
    and sends an activation request to
    BlackBerry UEM
    . The activation request includes the username, password, device operating system, and unique device identifier.
  7. BlackBerry UEM
    performs following actions:
    1. Inspects the credentials for validity
    2. Creates a device instance
    3. Associates the device instance with the specified user account in the
      BlackBerry UEM
      database
    4. Adds the enrollment session ID to an HTTP session
    5. Sends a successful authentication message to the device
  8. The
    UEM Client
    requests all configuration information and sends the device and software information to
    BlackBerry UEM
    .
  9. BlackBerry UEM
    stores the device information in the database and sends the requested configuration information to the device.
  10. The
    UEM Client
    determines if the device uses
    Knox Platform for Enterprise
    and is running a supported version. If the device uses
    Knox Platform for Enterprise
    , the device connects to the local
    Samsung
    on-premises licensing server and activates the
    Knox
    management license. After it's activated, the
    UEM Client
    applies the appropriate
    Android Enterprise
    IT policy rules.
  11. The device sends an acknowledgment to
    BlackBerry UEM
    that it received and applied the configuration information. The activation process is complete.