Android Platform Guide
Zero on Android extends the native Android Work Profile capabilities with additional DLP controls, VPN integration, and centralized management.
Architecture
Android integration leverages:
- Android Work Profile: Native managed profile API
- Device Admin: Enterprise management capabilities
- VPN Always-On: Persistent VPN for work traffic
- Work Contacts: Isolated contacts and calendar
Requirements
| Requirement | Specification |
|---|---|
| Android Version | Android 10+ (API 29+) |
| Work Profile | Device must support managed profiles |
| Storage | 500 MB free space |
Enrollment Methods
QR Code Enrollment
- Open the Zero app
- Tap "Enroll Device"
- Scan the QR code provided by your admin
- Accept work profile creation
- Work profile apps will be installed
Token Enrollment
- Open the Zero app
- Tap "Enroll with Token"
- Enter the enrollment token
- Complete the setup wizard
Zero-Touch Enrollment
For new devices, Zero supports Android Zero-Touch enrollment. Pre-configure devices through the zero-touch portal for automatic enrollment.
Work Profile Features
App Separation
- Work apps display a briefcase badge
- Separate app drawer section for work apps
- Isolated storage per profile
Managed Apps
Admins can push apps to the work profile:
- Slack, Microsoft Teams, Zoom
- Google Workspace / Microsoft 365
- Custom internal apps
- Managed Play Store
Data Loss Prevention
- Cross-Profile Sharing: Block sharing from work to personal
- Screenshot Restriction: Prevent screenshots of work apps
- Copy/Paste Control: Block clipboard between profiles
- Contact Separation: Isolate work contacts
VPN Configuration
Zero configures an always-on VPN for work traffic:
- All work profile traffic routes through VPN
- Kill switch blocks traffic if VPN disconnects
- Split tunneling keeps personal traffic local
Battery Optimization: The VPN service should be excluded
from battery optimization to maintain persistent connectivity.
Device Management
From the Zero management console, admins can:
- Push/remove apps from work profile
- Configure work profile policies
- View device compliance status
- Remote wipe work profile only
- Lock work profile temporarily
User Controls
Users can manage their work profile through the Zero app:
- Pause Work: Temporarily disable work profile (if allowed)
- Work Hours: Schedule automatic profile pause
- Notifications: Configure work notification settings
Troubleshooting
Enrollment Failed
- Check internet connectivity
- Verify enrollment token hasn't expired
- Ensure device meets Android version requirements
- Factory reset if previously enrolled with another MDM
VPN Keeps Disconnecting
- Disable battery optimization for Zero
- Check network connectivity
- Verify VPN server is reachable