Zero Touch Deployment in MDM: Requirements & How

Zero-touch deployment is an effective way for enterprises to bind large-scale devices to their organizations and further automatic configuration. How can it be used? The logistics & transportation sector can give an example.

A freight service company will equip truck drivers with tablet devices, like Samsung or iPad. When the number of fleets reaches over 1000, the touchless deployment method is able to streamline the process and makes out-of-the-box possible.

Zero-touch deployment has been applied in various operating systems - Android, Windows, and iOS. Although systems have different names for the no-touch deployment, functions are similar. In this article, we will introduce its meaning and how to set it up in the three common OS.

Part 1: What is Zero-touch deployment?

Zero-touch deployment (ZTD) is a process where devices issued to employees are preconfigured to download corporate software, apps, settings, and policies when first turned on. Depending on the network environment, for instance, Wi-Fi, it requires zero intervention from the IT department of a company and functions as a self-setup automated workflow.

If you have a high-volume deployment strategy for enterprise devices (COBO & COPE), zero-touch deployment is the best option to put into effect.

Technologies behind zero-touch deployment

Here are a few of the core technologies that make Zero Touch Deployment possible:

• Cloud Computing - helps deliver configuration files over the air and enables remote provisioning.
• Internet of Things (IoT) - enables devices to send, receive, and exchange data, and further connect with different endpoints.
• Software Defined Networking (SDN) - provides centralized control of network and delivers automated and on-demand network services to applications.
• Virtualization - creates virtual resources such as servers, storage devices, networks, etc.

Reasons of using zero touch deployment

Characterized by automation, zero touch deployment streamlines the process of configuring a large number of company devices such as smartphones, tablets, laptops, and computers. In addition to efficiency, there are more benefits to using this deployment method.

• 1. Consistent and standardized configurations
• 2. Loss prevention even device factory reset
• 3. Simplified onboarding for new employees
• 4. Better control over user access to company resources
• 5. Easy update settings and management

Part 2: What are the requirements for utilizing zero touch deployment?

Zero touch deployment requires a combination of a portal, software, physical devices and network to be implemented.

Part 3: How to set up zero-touch deployment?(Android/iOS/Windows)

Simply put, the process of implementing zero-touch deployment goes in this way:

• 1) Purchase devices that support ZTD;
• 2) Log into the zero-touch portal using the account from the device seller.
• 3) Create a configuration profile containing settings and applications that the devices should have;
• 4) Add the parameter that copies from your MDM/EMM provider.
• 5) Apply the configuration file to enterprise devices.

Compare ZTD in different systems

Here's a table of Zero Touch Deployment Requirements for Android, Apple, and Windows. See what you need based on device operating systems.

Now, let's start the implementation. You can check the step-by-step guide according to the device's OS.

1 How to start zero-touch deployment for Android?

To start Android zero touch deployment, you should make preparations for an eligible vendor, supported devices, and device management platform.

AirDroid is one of device management solutions in Android's Enterprise Solutions Directory. Here, we use it as a demonstration.

2 How to start zero-touch deployment for Apple devices?

Apple zero touch deployment needs an account of Apple Business Manager (ABM). It's worth knowing that ABM is a portal for the IT admin to deploy and manage Apple devices centrally. Its capabilities include automatically deploying devices, apps, and also IDs used by employees.

Source: developer.apple.com

Now, let's continue setting up.

3 How to start zero-touch deployment for Windows?

To enable Windows zero touch deployment, the IT staff should be able to access to Azure Active Directory portal and Microsoft Intune. Here are the steps to get started:

Part 4: Devices compatible with zero-touch deployment

Part 5: Concerns about zero-touch deployment

While ZTD has numerous advantages, it also has a few challenges and concerns. Here are a few of them:

Security and privacy – ZTD involves pushing predefined configurations and settings to devices. Ensuring each device receives the correct settings and configurations is crucial. Organizations must take stringent precautions to prevent unauthorized access to devices.

Compatibility and device support – every device cannot support ZTD. Therefore, organizations must ensure they requisition the correct devices supported by their ZTD platform.

Integration with existing systems – ZTD may require integration with an organization’s existing IT infrastructure, such as application management systems, directory services, MDM/EMM solutions, etc.

FAQs

What is the difference between zero-touch and light-touch deployment?

Maverick

ZTD devices are preconfigured with the necessary policies, settings and applications before they are released to the employee – ZTD minimizes the need for human interaction during set up.
Light-touch deployment is a partially automated system, which requires some intervention from IT administrators or the end user/employee. Some settings are preconfigured, but employees are required to answer a few prompts or go through a guided setup wizard.

Can zero-touch deployment be used for software updates?

Maverick

Yes, ZTD can be used for automated software updates. Using the MDM/EMM solution IT administrators can push software updates, security patches etc.

Do I need special hardware or software for zero-touch deployment?

Maverick

You only need devices compatible to the ZTD platform and EMM/MDM solution the organization opts for. The EMM/MDM solution needs to support the ZTD platform you’ve enrolled with. For Windows, you need an Azure AD tenant to link to you MDM/EMM solution.

Can zero-touch deployment be used in a Bring Your Own Device (BYOD) environment?

Maverick

ZTD may not be applicable in a BYOD environment for a few reasons:
Device ownership – devices are owned by the employees not the organization, which means they don’t have the authority to preconfigure or enroll these devices in the MDM/EMM solution.
User Consent – employees usually have concerns over giving full control of their personal devices to the organizations.