Android Enterprise initial setup

Different operating modes in Securepoint Mobile Device Management

Last adaptation to the version: 1.26

New:

The individual operating modes are available as separate articles

An enrolment token with PIN is mandatory for ZeroTouch enrolment

Last updated:

01.2025

notempty

This article refers to a Beta version

Operating modes in MDM

Is my device compatible?

The compatibility between iOS and Securepoint Mobile Security is always tested on current devices.

notempty

The device must not be rooted!

iOS / iPadOS Version	Mobile Security	Remark
up to 15.5		Technologically not compatible
15.5 up to 16	()	Version 15.5 is the technically lowest supported version Technologically compatible, but not all functions are supported by the operating system.
17 up to 26		Technologically compatible

The latest version is required to use all functions.

Compatibilities Android

Compatibility of Android versions with Securepoint Mobile Security:

notempty

The device must not be rooted!

Android Version	Mobile Security	Remark
until including 6		Technologically not compatible
7 up to 13	()	Version 7 is the technically lowest supported version Technologically compatible, but not all functions are supported by the operating system.
From 14		All devices from Android 7.0 with access to the Google Play Api are supported This excludes, for example, newer devices from Huawei that do not have access to Google Play! Mobile Security and MDM is compatible with the devices recommended by Google. The current list of compatible devices can be found at https://androidenterprisepartners.withgoogle.com/devices/# Due to the large number of different manufacturers and operating system versions we can not guarantee 100% compatibility. Devices that are not explicitly recommended by Google can work. We cannot guarantee a solution for problems with unlisted devices.

Decision path for the right operating mode

BYOD: Bring your own Device

Personal device with business use:

Every employee uses his or her private device
Apps and data for work purposes are stored in a work container

Registration by scanning the registration token with the App Android Device Policy from the Google Play Store.
Hint:This app does not appear on the Home screen or in the App Launcher.
The app is launched from the list of installed apps in the Google Play Store

The Wiki article Android operating mode BYOD describes the enrollment of an Android device in BYOD operating mode.

COPE: Company owned, personal enabled

Company owned with private use:

The company buys the device for the user
Private use is permitted
Separation of private and professional apps and data through containers
Simple control of the private area by the MDM.
- e.g.: Allow / forbid access to pictures
- Allow / forbid address exchange
It is possible to transfer the device to purely private use
Settings under: Mobile Security Android Devices → Register new device →
→ More options → Allow private use: Private use is allowed
Additionally in the profile: Tab Personal use Activate

Registration by scanning or entering the registration token after a factory reset

Register by adding the device to a Zero Touch configuration under

The Wiki article Android operating mode COPE describes the enrollment of an Android device in COPE operating mode.

COBO: Company owned, business only

Company owned without private use:

The devices are intended for use in the enterprise environment only.
The IT administrator has full control over the smartphone
Private data is strictly prohibited on the device
Settings under: Mobile Security Android Devices → Register new device →
→ More options → Allow private use: Private use is not allowed

Registration by scanning or entering the registration token after a factory reset

Register by adding the device to a Zero Touch configuration under

The Wiki article Android operating mode COBO describes the enrollment of an Android device in COBO operating mode.

COSU: Company owned, single use

Company owned with a single application:

COSU devices are configured for a specific task.
This is mostly realized via a kiosk mode
Settings under: Mobile Security Android Profiles → Tab Applications → Applications Add application or choose application → entry Installation type Kiosk

Registration by scanning or entering the registration token after a factory reset

Register by adding the device to a Zero Touch configuration under

The Wiki article Android operating mode COSU describes the enrollment of an Android device in operating mode COSU.