# Android for Work

Before you can enroll Android devices, you must configure Deep Freeze Cloud Console's access to the devices' Android for Work profiles. These work profiles are managed either using G Suite or Google Play; which tool you use not only defines what administrative capabilities you have through Google, but also how you must set up the connection to Deep Freeze Cloud Console. In both cases, you are seeking to obtain permission for Deep Freeze Cloud Console to act as the EMM (Enterprise Mobility Management) provider. This allows Deep Freeze Cloud Console to sync with G Suite/Google Play to obtain device information and manage devices using their work profiles.

## Configuring a connection to Android for Work managed by Google Play Managed Play Store Account

Google Play is Android for Work's lower-cost option: ideal for smaller businesses, but with fewer administration options and no unique domain.

1. Go to _MDM > Settings._
2. Click the _Android for Work_ tab.
3. In the _Enrollment Type_ drop-down list, select _Managed Play Store Account_.
4. Click _Next_.
5. Provide your username and password. Click _Next_.
6. Click _Get Started_.
7. Enter the name of your company into the Organization Name field.
8. Enable the _I have read and agree to the managed Google Play agreement_ option.
9. Click _Next_.
10. &#x20;Click _Complete Registration_.

Deep Freeze Cloud Console is now connected to Android for Work, and you can start enrolling Android devices.

## Configuring a connection to Android for Work managed by G Suite Google Managed Domain (G Suite)

G Suite is Android for Work's premium management option: higher cost, but with more administration options and a customer-defined domain name.

Configuring the connection between Deep Freeze Cloud Console and G Suite is a three step process:

1. Unenroll from your existing EMM provider (if needed)
2. Generate a new EMM token in G Suite
3. Configure Deep Freeze Cloud Console as a G Suite EMM provider

### Step 1: Unenrolling from your existing G Suite EMM provider

Your G Suite account can only have one EMM provider at a time. If you have an existing software package acting as EMM provider, you must first unenroll your devices from that provider and remove its connection to G Suite before you can configure the connection to Deep Freeze Cloud Console.

How to unenroll from your existing provider varies according to provider.

### Step 2: Generating a new G Suite EMM token

In order to obtain permission to act as EMM provider, Deep Freeze Cloud Console must be configured with a valid EMM token-essentially a passcode generated by G Suite. You must use the G Suite administration tools to generate a new token.

Use your browser to navigate to G Suite for your domain. Log in as an administrator.

1. Open the Admin app.
2. Click the Security icon.
3. Expand the EMM provider for Android options.
4. Enable the EMM provider option if it is not already enabled.
5. Click Generate Token.
6. Copy the resulting alphanumeric code for later use.

### Step 3: Configuring Deep Freeze Cloud Console as G Suite EMM provider

1. Go to _MDM > Settings_.
2. Click the Android for Work tab.
3. In the Enrollment Type drop down list, select Google Managed Domain (G Suite).
4. Provide values for the following settings:
   * Domain – enter your G Suite domain into this field.
   * Administrator Email – enter the email address you use to log into the administrator account into this field.
   * EMM Token – enter the EMM token value you generated earlier into this field.

5\. Click _Enroll_.

Deep Freeze Cloud Console is now connected to Android for Work, and you can start enrolling Android devices.

