How to enroll Fire OS devices?

Enrollment is the process of adding devices to the MDM console for device administration. Hexnode supports various device platforms, and there are numerous enrollment methods for each platform. Based on the enrollment criteria, such as the total number of devices being enrolled, the company’s scalability, user authentication, security preferences, etc., the organization can use any method to enroll their devices. The following are the different methods of enrolling Fire OS devices:

1. Enrollment without authentication
2. Authenticated enrollment
   • Email/SMS enrollment
   • Self enrollment
3. QR Code enrollment
4. Pre-Approved enrollment
5. Bulk enrollment

1. Enrollment without authentication

This is the easiest way of enrolling devices. It is a quick enrollment technique that involves no user authentication, and any devices can be enrolled by entering the server name. The devices enrolled using this method will be assigned to a default user. However, you may change the owner of the device from the Hexnode portal after the enrollment.

In Hexnode MDM Portal:

1. Navigate to Enroll > All Enrollments > Quick > Open Enrollment > Change enrollment method.
2. Choose the user Domain. Only the user from the selected domain can be chosen as the default user.
3. Select a Default User. You can also create a new user by clicking on +Add New User to assign the devices.
4. Enter a password in the Default password field. Though it has nothing to do with enrolling Fire OS devices, it is mandatory for proceeding with open enrollment. This password is used for Windows device enrollment.
5. Based on the type of ownership to be chosen for the enrolling device, you can select either Corporate or Personal under the option Ownership.
6. Click Continue.

On the device:

1. Open Amazon Appstore.
2. Download and install the Hexnode MDM application.
3. Open the app and enter the server name, which will look something like: yourportal.hexnodemdm.com
4. Enable the Device administration, Usage access, and Notification access.
5. Click Next.
6. Your device will now be enrolled with Hexnode MDM.

2. Authenticated Enrollment

Authenticated enrollment enforces user authentication while enrolling devices. This enrollment mode enables the users to provision their devices using the enrollment credentials sent by the administrator. Device enrollment with authentication guarantees that only valid users add their devices to the Hexnode MDM console. There are two different methods of authenticated enrollment:

1. Email or SMS enrollment
2. Self enrollment

Email or SMS enrollment

User can enroll their devices with the enrollment credentials send via enrollment mail. The mail contains username and password for enrollment. In this method, the user will have to authenticate the enrollment using these enrollment credentials.

In the Hexnode Console:

1. Navigate to Enroll > All Enrollments > Invite > Email/QR Code/SMS.
2. Select the types of users to be enrolled via Enrollment Request.
3. Choose the Ownership from Corporate, Personal, Let the user choose or Choose it later.
4. Click Continue.
5. A message Enrollment settings successfully updated will be displayed.
6. Choose the Domain.
7. You can send enrollment request to either a single user or bulk users. To send enrollment request to Single User, choose a user to assign the devices. If you want to send requests to a number of users, toggle the button to Bulk User and select a CSV file containing the necessary details.
8. Click Send.

On the device:

1. Open Amazon Appstore.
2. Download and install the Hexnode MDM application.
3. Open the app and enter the server name which will look something like: yourportal.hexnodemdm.com.
4. Click Next.
5. In the next page, choose how to authenticate the enrollment.
   • For local users, select Authenticate with Hexnode. Choose the Domain as ‘local’ and enter the username and password.
   • For AD users, click on Authenticate with Hexnode. Choose your AD domain from the Domain drop-down and type in the username and password.
     
     Notes:

     • Enter the username in the format NetBiosName\SAMAccountName if the domain is not selected.
     • Enter the SAMAccountName as the username if you have already selected the domain.

   • For Azure AD users, click on Authenticate with Microsoft and enter the Azure AD username and password.
   • For Google users, click on Authenticate with Google and enter the G Suite username and password.
   • For Okta users, click on Authenticate with Okta and complete the on-screen procedure.
6. Click Next.
7. Enable the following permissions: Device administration, Usage access, and Notification access. Click Next.
8. Your device will now be enrolled with Hexnode MDM.

Self enrollment

Self-enrollment allows the users to enroll devices using their Active Directory/Azure Active Directory/Google/Okta user credentials. For other users, the admin can create a default user and a dedicated password manually and send it to them via email.

In the Hexnode Portal:

1. Navigate to Enroll > All Enrollments > Invite > Email/QR Code/SMS.
2. Select the types of users to be enrolled via Self Enrollment.
3. Choose the Ownership from Corporate, Personal, Let the user choose or Choose it later.
4. Click Continue.
5. A message Enrollment settings successfully updated will be displayed.
6. Choose the Domain.
7. You can send enrollment request to either a single user or bulk users. To send enrollment request to Single User, choose a user to assign the devices. If you want to send requests to a number of users, toggle the button to Bulk User and select a CSV file containing the necessary details.
8. Click on Send.

On the device:

1. Open Amazon Appstore.
2. Download and install the Hexnode MDM application.
3. Open the app and enter the server name which will look something like: yourportal.hexnodemdm.com.
4. Click Next.
5. In the next page, choose how to authenticate the enrollment.
   • For local users, select Authenticate with Hexnode. Choose the Domain as ‘local’ and enter the username and password.
   • For AD users, click on Authenticate with Hexnode. Choose your AD domain from the Domain drop-down and type in the username and password.
     
     Notes:

     • Enter the username in the format NetBiosName\SAMAccountName if the domain is not selected.
     • Enter the SAMAccountName as the username if you have already selected the domain.

   • For Azure AD users, click on Authenticate with Microsoft and enter the Azure AD username and password.
   • For Google users, click on Authenticate with Google and enter the G Suite username and password.
   • For Okta users, click on Authenticate with Okta and complete the on-screen procedure.
6. Click Next.
7. Enable the following permissions: Device administration, Usage access, and Notification access. Click Next.
8. Your device will now be enrolled with Hexnode MDM.

3. QR Code Enrollment

At times, it becomes quite difficult with enrollment using the portal name, username & password. Hexnode MDM lets you enroll the devices by merely scanning the QR code.

Quick Enrollment

Open Enrollment permits you to enroll the devices quickly by entering the enrollment URL or scanning a QR code from the device.

1. Login to your Hexnode MDM portal.
2. Navigate to Enroll > All Enrollments > Quick > QR Code – Bulk.



3. Download the Hexnode MDM app on the device from the Amazon Appstore.
4. Open the app and tap on the QR code icon on the bottom left of the screen.



5. Scan the QR code displayed on the Hexnode portal and follow the on-screen instructions to complete the enrollment process.

QR Code Enrollment with Authentication

In this method, the QR code required for the enrollment process will be send to the user via email.

To Send Enrollment Request

1. Login to your Hexnode MDM portal.
2. Navigate to Enroll > All Enrollments > Invite > QR Code.
3. Select the types of users to be enrolled.
4. Change the Ownership to Corporate, Personal, Let the user choose or Choose it later.
5. Click Continue.
6. A message Enrollment settings successfully updated will be displayed.
7. Choose the Domain.
8. Select the user to assign the device and send the enrollment request.
9. Click Send.

An enrollment request mail containing the QR code will be sent to the user.

On the device:

1. Open Amazon Appstore.
2. Download and install the Hexnode MDM app.
3. Open the app and click on the QR Code icon on the bottom left of the screen and scan the QR code received via mail.
4. Click on Agree.
5. Enable Device administration, Usage access, and Notification access permissions.
6. Your device will now be enrolled with Hexnode MDM.

4. Pre-Approved Enrollment

Pre-Approved Enrollment is a bulk enrollment technique which lets you import devices into Hexnode MDM, even before the enrollment is completed from the user end.

1. Navigate to Enroll > All Enrollments > Enterprise > Pre-approve.
2. Select the Domain.
3. Download the sample CSV file by clicking on Download sample CSV file. Either create a new one like the sample or edit the sample file accordingly.
4. Click on Choose file and upload the CSV file containing the mandatory information such as name, email, ownership, serial number and platform. For FireOS devices, platform can be set to Android.
5. Click Next.
6. If there are mistakes in the data included in the CSV file, an error message will be shown. You may correct the CSV file and re-upload it.
7. Hexnode will automatically identify these keys: name, email, mobile, ownership, device name, Serial Number and platform. If there is any mistake in mapping, you have to map the keys manually.
8. The data uploaded in the CSV file will be displayed. Click Next.
9. Choose the option to Send enrollment request to users either via Email / SMS and click on Send.

All the pre-approved devices get listed in the Hexnode portal once the enrollment request is sent. The devices retain a ‘Pre-approved device’ banner until the user initiates the enrollment from the device end.

5. Bulk Enrollment

We had already discussed how authenticated enrollment enforces user authentication while enrolling devices. The user can enroll their devices with the enrollment credentials send via enrollment mail. When you want to enroll many devices, sending enrollment requests individually to each user is a tiresome job for the administrator. You can import a CSV file containing all the users and their details into the Hexnode MDM portal with bulk enrollment. It sends enrollment requests to each of the users specified in the file in one go.

1. Go to Enroll > All Enrollments > Invite > Email.
2. Under Send enrollment request to, switch the button to Bulk User.
3. Upload the CSV file with all the users and their details. You can get a sample CSV file by clicking on Download sample CSV file. You need to provide the following details regarding the user to send bulk enrollment request.
   A Sample CSV file will be of the following format.



Field Name	Description
Name	Description
Name	Provide the name of the user.
Email	Provide the email address of the user to send the enrollment requests.
Mobile Number	Provide the mobile number of the user to which enrollment requests are to be sent.
Ownership	Specify the device ownership type either as Personal or Corporate owned device.
Device Name	Provide a suitable name to identify your device.
Password	Set the password required for authentication.

4. Click on Next and verify the details of the CSV uploaded.
5. Choose the mode through which enrollment request are to be sent and click on Send.

Once the enrollment request is received:

1. Open Amazon Appstore on the device.
2. Download and install the Hexnode MDM application.
3. Open the app and enter the server name which will look something like: yourportal.hexnodemdm.com.
4. Click Next.
5. Enter the username and password included in the enrollment mail or SMS.
6. Enable the following permissions: Device administration, Usage access, and Notification access. Click Next.
7. Your device will now be enrolled with Hexnode MDM.