EMM Enrollment

Disclaimer: Please note that VMWare has re-branded AirWatch EMM (Enterprise Mobility Management) to WorkSpace ONE UEM (Unified Endpoint Management). We are working on upgrading our current system on October 17, 2018 with no image maintenance and as little software installation time as possible. With this rebranding transition, all AirWatch users will see a new app icon and name ("Hub") on their mobile device, but will be minimally disturbed otherwise:

Agent app icon will change to Hub app icon

Prior to Enrolling in AirWatch

Any new devices procured from CUIT will have AirWatch pre-installed. If you are enrolling into AirWatch on an existing CUIT-managed device, please ensure that you do the following:

In order to ensure the security of your device prior to enrollment, all devices will be wiped during the enrollment process. Make sure you know your LionMail device password, so you can set up your email after enrollment is complete. If you do not remember your device password, you can reset it.

Prior to your scheduled enrollment date, ensure that you save any important data that you do not want to lose by reviewing the information below for your device. Make sure you understand which data is stored locally on your device, which is stored in the device manufacturer’s cloud service (for example, iCloud) and which is stored in a Columbia cloud service (LionMail and/or Exchange.) Data stored in a cloud service will not be lost during enrollment.

If you would like assistance in restoring your apps to your device following enrollment, please bring your laptop with you to your appointment. If you do not have a laptop, ask the CUIT representative helping you with your enrollment for a second appointment.

You will not be able to restore your device from a backup while enrolling in AirWatch**.

  • Prior to enrollment, make sure to back up all photos and videos on your device following Apple's instructions.
  • Restoring Apps for iOS devices: Because you will not be able to restore your phone from a backup following enrollment, you will need to re-download all apps you have purchased from the Apple App Store, or reinstall them via iTunes.

**Once you have completed enrollment, you can resume backing up your device as you normally would.

Android devices can be restored from a backup following the installation of AirWatch.

  • Ensure that you have backed up your data following the instructions for your device on Samsung’s website. This includes photos and videos, which cannot be restored from a backup.

Click on the corresponding document to enroll your Android or iOS Device. Please note that for Android devices, you will need to encrypt your device prior to enrollment.

Before beginning enrollment, you will need to encrypt your device. Encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.

1. Navigate to your device’s Settings, then tap Security > Encrypt device.

Image of S5 homescreen, Settings circled. Image of Settings screen, Security circled. Security screen, Encrypt device circled


2. Tap Encrypt Device at the bottom of the screen, then tap Encrypt Device once more. Do not select fast encryption.

Encrypt device screen, Encrypt device circled. Confirm encryption screen, Encrypt device circled.

3. If you have a password, you will be prompted to enter it for confirmation.

Keep in mind that encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.

Confirm password screen with Confirm password and Continue circled

4. Once encryption is done, you are ready to begin enrollment.

Before beginning enrollment, you will need to encrypt your device. Encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.

1. Navigate to your device’s Settings, then tap Lock screen and security > Other security settings > Encrypt device.

Android Settings screen, Lock screen and security item circled; Lock screen and security screen, Other security settings cirlced. Other security settings screen, Encrypt device circled.

2. Tap Encrypt Device at the bottom of the screen. If you have a password, you will be prompted to enter it for confirmation, then tap Next.

Confirm password screen, Confirm password and Continue button circled

3. Tap Encrypt Device once more. Do not select fast encryption.

Keep in mind that encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.

Confirm encryption screen, Encrypt device button circled

4. Once encryption is done, you are ready to begin enrollment.

The Galaxy S7 and S8 are partially encrypted right out of the box, but before beginning enrollment, you will need to complete this encryption. Encrypting your device will only take a minute or two.

1. Navigate to your device’s Settings, then tap Lock Screen and Security > Secure Startup.

Settings screen, Lock screen and security circled. Lock screen and security screen, secure startup circled.

2. If you have a PIN, enter it and tap Done. Then check Require PIN when phone turns on, and tap OK.

Confirm PIN screen, Enter the current PIN field and Done button circled. Secure startup screen, Require PIN when phone turn option selected, OK circled

3. Encryption is done and you are ready to begin enrollment.

I. Installing AirWatch

1. Go to the Play Store, and search for AirWatch. Install the Agent.

Google Play: AirWatch installation screen with Install circled

2. Once the Agent is installed, tap Open

II. Enrolling in AirWatch

1. The Agent will guide you through a series of steps in order to install AirWatch on your device. Tap Email Address for your authentication method.

AirWatch installation screen with Open button circled
AirWatch welcome screen, Email address button circled

2. The next screen will prompt you to enter your corporate email ID. Enter your uni@columbia.edu address and hit Continue.

Authenticate screen with Enter your corporate email ID circled

3. At the Authenticate screen, enter your uni and your directory password, and hit Continue.

Authenticate screen with Username and Password fields circled

III. Securing your Device

1. AirWatch will now inform you that it needs to be the device administrator. Select Continue.

Secure screen with Continue button circled

2. Tap Activate to give AirWatch permission to manage your device.

Device administrator screen with Activate circled

IV. Install AirWatch enterprise service (not required for all devices)


1. You may receive a message that says you need to enable installation of enterprise apps not available in the Play Store. Tap Continue.

Secure screen with Continue button circled


2. Your device’s Security settings will open up. Check the Unknown sources box to allow installation of apps from sources other than the Play Store and then tap OK. Then, tap your device's back button to return to the installation.

Lock screen and security, with ON selected for Unknown sources

3. AirWatch will prompt you to unlock enterprise capabilities on your device. Tap Continue.

Secure screen with Continue button circled

4. Your device will guide you through installation of the Samsung ELM service. To begin, tap Next.

AirWatch Samsung ELM screen, with Next button circled

5. You will be asked to activate Samsung ELM as a device administrator. Tap Activate.

Device administrator screen with Activate button circled

6. Check the box to agree to the Privacy Policy notice, then tap Confirm.

ELM Agent screen with Confirm button circled

7. Tap Device Settings, and you will be brought to Screen unlock settings.

Secure screen with Device Settings button circled

8. Tap Password, then choose a password that is at least 6 characters. Tap Continue then re-enter your password to confirm.

Set password screen with password field circled

9. Choose to display or hide notifications on the lock screen, then tap Done.

Notifications on lock screen screen, with Show content option selected, and Done button circled

V. Configuring Your Device

1. Once Samsung ELM has been installed, AirWatch will configure enterprise resources assigned to your device. Tap Continue.

Configure screen, with Continue button circled


2. Install all apps that have been assigned to you by your department, by tapping Play Store for each app.

Configure screen with Play Store circled

Enrollment is now complete, and you may tap Exit to close the Wizard. The AirWatch agent will open and your device’s compliance status will be displayed.

1. For new devices, during the setup process you will see a screen that says “Columbia University Information Technology will automatically configure your iPhone”. Tap Next.

Configuration screen, Next button circled

2. Log in with your uni and directory password, then tap Next.

Log In screen, with uni filled in Username field and directory password filled into Password field, Next button circled

3. Entering or Creating an Apple ID

  a. If you have an Apple ID, enter it, then move to Step 4.
  b. If you do not, tap Don’t have an Apple ID or forgot it? Then tap Set Up Later in Settings, and Don’t Use.

Apple ID screen with Apple ID and Password fields circled; Apple ID screen with Don't have an Apple ID or forgot it? button circled

4. At the Welcome screen, tap Get Started.

iPhone welcome screen with Get Started button circled

5. You will be prompted to allow AirWatch to assign apps and books to you. Tap Continue. AirWatch will automatically download apps assigned to your department.

Allow App and Book Assignment pop-up, Continue button circled

6. AirWatch will prompt you to set a passcode within an hour. Tap Continue. The passcode must be at least 6 alphanumeric characters.

Passcode Requirement pop-up with Continue circled

7. Open the AirWatch Agent App, which will prompt you to set an AirWatch PIN. This PIN is separate from the Passcode you created in the previous step, and will only be used to open the AirWatch Agent. The PIN must contain at least 4 numbers, which cannot be repeating, ascending, or descending.

AirWatch Agent screen with Passcode fields circled. Passcode Restriction pop-up with passcode requirements circled.

8. Enrollment is now complete, and if you open the AirWatch Agent app, your device’s compliance status will be displayed.

My Device screen with Enrollment status circled