EMM Enrollment
Please note: The icon of the Workspace ONE Intelligent “HUB” App that will be pre-installed on CUIT-managed devices.
Prior to Enrolling in Workspace ONE UEM
Any new devices procured from CUIT will have Workspace ONE UEM pre-installed. If you are enrolling into Workspace ONE UEM on an existing CUIT-managed device, please ensure that you do the following:
In order to ensure the security of your device prior to enrollment, all devices will be wiped during the enrollment process. Make sure you know your LionMail device password, so you can set up your email after enrollment is complete. If you do not remember your device password, you can reset it.
Prior to your scheduled enrollment date, ensure that you save any important data that you do not want to lose by reviewing the information below for your device. Make sure you understand which data is stored locally on your device, which is stored in the device manufacturer’s cloud service (for example, iCloud) and which is stored in a Columbia cloud service (LionMail and/or Exchange.) Data stored in a cloud service will not be lost during enrollment.
If you would like assistance in restoring your apps to your device following enrollment, please bring your laptop with you to your appointment. If you do not have a laptop, ask the CUIT representative helping you with your enrollment for a second appointment.
You will not be able to restore your device from a backup while enrolling in Workspace ONE UEM**.
- Prior to enrollment, make sure to back up all photos and videos on your device following Apple's instructions.
- Restoring Apps for iOS devices: Because you will not be able to restore your phone from a backup following enrollment, you will need to re-download all apps you have purchased from the Apple App Store, or reinstall them via iTunes.
**Once you have completed enrollment, you can resume backing up your device as you normally would.
Android devices can be restored from a backup following the installation of Workspace ONE UEM.
- Ensure that you have backed up your data following the instructions for your device on Samsung’s website. This includes photos and videos, which cannot be restored from a backup.
Click on the corresponding document to enroll your Android or iOS Device. Please note that for Android devices, you will need to encrypt your device prior to enrollment.
Before beginning enrollment, you will need to encrypt your device. Encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.
1. Navigate to your device’s Settings, then tap Security > Encrypt device.
2. Tap Encrypt Device at the bottom of the screen, then tap Encrypt Device once more. Do not select fast encryption.
3. If you have a password, you will be prompted to enter it for confirmation.
Keep in mind that encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.
4. Once encryption is done, you are ready to begin enrollment.
Before beginning enrollment, you will need to encrypt your device. Encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.
1. Navigate to your device’s Settings, then tap Lock screen and security > Other security settings > Encrypt device.
2. Tap Encrypt Device at the bottom of the screen. If you have a password, you will be prompted to enter it for confirmation, then tap Next.
3. Tap Encrypt Device once more. Do not select fast encryption.
Keep in mind that encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.
4. Once encryption is done, you are ready to begin enrollment.
The Galaxy S7 and S8 are partially encrypted right out of the box, but before beginning enrollment, you will need to complete this encryption. Encrypting your device will only take a minute or two.
1. Navigate to your device’s Settings, then tap Lock Screen and Security > Secure Startup.
2. If you have a PIN, enter it and tap Done. Then check Require PIN when phone turns on, and tap OK.
3. Encryption is done and you are ready to begin enrollment.
I. Installing Workspace ONE UEM
1. Go to the Play Store, and search for Workspace ONE UEM. Install the Agent.
2. Once the Agent is installed, tap Open
II. Enrolling in Workspace ONE UEM
1. The Agent will guide you through a series of steps in order to install Workspace ONE UEM on your device. Tap Email Address for your authentication method.
2. The next screen will prompt you to enter your corporate email ID. Enter your [email protected] address and hit Continue.
3. At the Authenticate screen, enter your uni and your directory password, and hit Continue.
III. Securing your Device
1. Workspace ONE UEM will now inform you that it needs to be the device administrator. Select Continue.
2. Tap Activate to give Workspace ONE UEM permission to manage your device.
IV. Install Workspace ONE UEM enterprise service (not required for all devices)
1. You may receive a message that says you need to enable installation of enterprise apps not available in the Play Store. Tap Continue.
2. Your device’s Security settings will open up. Check the Unknown sources box to allow installation of apps from sources other than the Play Store and then tap OK. Then, tap your device's back button to return to the installation.
3. Workspace ONE UEM will prompt you to unlock enterprise capabilities on your device. Tap Continue.
4. Your device will guide you through installation of the Samsung ELM service. To begin, tap Next.
5. You will be asked to activate Samsung ELM as a device administrator. Tap Activate.
6. Check the box to agree to the Privacy Policy notice, then tap Confirm.
7. Tap Device Settings, and you will be brought to Screen unlock settings.
8. Tap Password, then choose a password that is at least 6 characters. Tap Continue then re-enter your password to confirm.
9. Choose to display or hide notifications on the lock screen, then tap Done.
V. Configuring Your Device
1. Once Samsung ELM has been installed, Workspace ONE UEM will configure enterprise resources assigned to your device. Tap Continue.
2. Install all apps that have been assigned to you by your department, by tapping Play Store for each app.
Enrollment is now complete, and you may tap Exit to close the Wizard. The Workspace ONE UEM agent will open and your device’s compliance status will be displayed.
1. For new devices, during the setup process you will see a screen that says “Columbia University Information Technology will automatically configure your iPhone”. Tap Next.
2. Log in with your uni and directory password, then tap Next.
3. Entering or Creating an Apple ID
a. If you have an Apple ID, enter it, then move to Step 4.
b. If you do not, tap Don’t have an Apple ID or forgot it? Then tap Set Up Later in Settings, and Don’t Use.
4. At the Welcome screen, tap Get Started.
5. You will be prompted to allow Workspace ONE UEM to assign apps and books to you. Tap Continue. Workspace ONE UEM will automatically download apps assigned to your department.
6. Workspace ONE UEM will prompt you to set a passcode within an hour. Tap Continue. The passcode must be at least 6 alphanumeric characters.
7. Open the Workspace ONE UEM Agent App, which will prompt you to set an Workspace ONE UEM PIN. This PIN is separate from the Passcode you created in the previous step, and will only be used to open the Workspace ONE UEM Agent. The PIN must contain at least 4 numbers, which cannot be repeating, ascending, or descending.
8. Enrollment is now complete, and if you open the Workspace ONE UEM Agent app, your device’s compliance status will be displayed.
