EMM Enrollment

Prior to Enrolling in AirWatch

Any new devices procured from CUIT will have AirWatch pre-installed. If you are enrolling into AirWatch on an existing CUIT-managed device, please ensure that you do the following:

In order to ensure the security of your device prior to enrollment, all devices will be wiped during the enrollment process. Make sure you know your LionMail device password, so you can set up your email after enrollment is complete. If you do not remember your device password, you can reset it.

Prior to your scheduled enrollment date, ensure that you save any important data that you do not want to lose by reviewing the information below for your device. Make sure you understand which data is stored locally on your device, which is stored in the device manufacturer’s cloud service (for example, iCloud) and which is stored in a Columbia cloud service (LionMail and/or Exchange.) Data stored in a cloud service will not be lost during enrollment.

If you would like assistance in restoring your apps to your device following enrollment, please bring your laptop with you to your appointment. If you do not have a laptop, ask the CUIT representative helping you with your enrollment for a second appointment.

You will not be able to restore your device from a backup while enrolling in AirWatch**.

  • Prior to enrollment, make sure to back up all photos and videos on your device following Apple's instructions.
  • Restoring Apps for iOS devices: Because you will not be able to restore your phone from a backup following enrollment, you will need to re-download all apps you have purchased from the Apple App Store, or reinstall them via iTunes.

**Once you have completed enrollment, you can resume backing up your device as you normally would.

Android devices can be restored from a backup following the installation of AirWatch.

  • Ensure that you have backed up your data following the instructions for your device on Samsung’s website. This includes photos and videos, which cannot be restored from a backup.

Click on the corresponding document to enroll your Android or iOS Device. Please note that for Android devices, you will need to encrypt your device prior to enrollment.

Before beginning enrollment, you will need to encrypt your device. Encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.

1. Navigate to your device’s Settings, then tap Security > Encrypt device.

Image of S5 homescreen, Settings circled. Image of Settings screen, Security circled. Security screen, Encrypt device circled


2. Tap Encrypt Device at the bottom of the screen, then tap Encrypt Device once more. Do not select fast encryption.

Encrypt device screen, Encrypt device circled. Confirm encryption screen, Encrypt device circled.

3. If you have a password, you will be prompted to enter it for confirmation.

Keep in mind that encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.

Confirm password screen with Confirm password and Continue circled

4. Once encryption is done, you are ready to begin enrollment.

Before beginning enrollment, you will need to encrypt your device. Encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.

1. Navigate to your device’s Settings, then tap Lock screen and security > Other security settings > Encrypt device.

Android Settings screen, Lock screen and security item circled; Lock screen and security screen, Other security settings cirlced. Other security settings screen, Encrypt device circled.

2. Tap Encrypt Device at the bottom of the screen. If you have a password, you will be prompted to enter it for confirmation, then tap Next.

Confirm password screen, Confirm password and Continue button circled

3. Tap Encrypt Device once more. Do not select fast encryption.

Keep in mind that encryption can take an hour or more, depending on how much data is to be encrypted. Start with your battery at least 80% charged and keep your device plugged in until encryption is complete.

Confirm encryption screen, Encrypt device button circled

4. Once encryption is done, you are ready to begin enrollment.

The Galaxy S7 and S8 are partially encrypted right out of the box, but before beginning enrollment, you will need to complete this encryption. Encrypting your device will only take a minute or two.

1. Navigate to your device’s Settings, then tap Lock Screen and Security > Secure Startup.

Settings screen, Lock screen and security circled. Lock screen and security screen, secure startup circled.

2. If you have a PIN, enter it and tap Done. Then check Require PIN when phone turns on, and tap OK.

Confirm PIN screen, Enter the current PIN field and Done button circled. Secure startup screen, Require PIN when phone turn option selected, OK circled

3. Encryption is done and you are ready to begin enrollment.

I. Installing AirWatch

1. Go to the Play Store, and search for AirWatch. Install the Agent.

Google Play: AirWatch installation screen with Install circled

2. Once the Agent is installed, tap Open

II. Enrolling in AirWatch

1. The Agent will guide you through a series of steps in order to install AirWatch on your device. Tap Email Address for your authentication method.

AirWatch installation screen with Open button circled
AirWatch welcome screen, Email address button circled

2. The next screen will prompt you to enter your corporate email ID. Enter your uni@columbia.edu address and hit Continue.

Authenticate screen with Enter your corporate email ID circled

3. At the Authenticate screen, enter your uni and your directory password, and hit Continue.

Authenticate screen with Username and Password fields circled

III. Securing your Device

1. AirWatch will now inform you that it needs to be the device administrator. Select Continue.

Secure screen with Continue button circled

2. Tap Activate to give AirWatch permission to manage your device.

Device administrator screen with Activate circled

IV. Install AirWatch enterprise service (not required for all devices)


1. You may receive a message that says you need to enable installation of enterprise apps not available in the Play Store. Tap Continue.

Secure screen with Continue button circled


2. Your device’s Security settings will open up. Check the Unknown sources box to allow installation of apps from sources other than the Play Store and then tap OK. Then, tap your device's back button to return to the installation.

Lock screen and security, with ON selected for Unknown sources

3. AirWatch will prompt you to unlock enterprise capabilities on your device. Tap Continue.

Secure screen with Continue button circled

4. Your device will guide you through installation of the Samsung ELM service. To begin, tap Next.

AirWatch Samsung ELM screen, with Next button circled

5. You will be asked to activate Samsung ELM as a device administrator. Tap Activate.

Device administrator screen with Activate button circled

6. Check the box to agree to the Privacy Policy notice, then tap Confirm.

ELM Agent screen with Confirm button circled

7. Tap Device Settings, and you will be brought to Screen unlock settings.

Secure screen with Device Settings button circled

8. Tap Password, then choose a password that is at least 6 characters. Tap Continue then re-enter your password to confirm.

Set password screen with password field circled

9. Choose to display or hide notifications on the lock screen, then tap Done.

Notifications on lock screen screen, with Show content option selected, and Done button circled

V. Configuring Your Device

1. Once Samsung ELM has been installed, AirWatch will configure enterprise resources assigned to your device. Tap Continue.

Configure screen, with Continue button circled


2. Install all apps that have been assigned to you by your department, by tapping Play Store for each app.

Configure screen with Play Store circled

Enrollment is now complete, and you may tap Exit to close the Wizard. The AirWatch agent will open and your device’s compliance status will be displayed.

1. For new devices, during the setup process you will see a screen that says “Columbia University Information Technology will automatically configure your iPhone”. Tap Next.

Configuration screen, Next button circled

2. Log in with your uni and directory password, then tap Next.

Log In screen, with uni filled in Username field and directory password filled into Password field, Next button circled

3. Entering or Creating an Apple ID

  a. If you have an Apple ID, enter it, then move to Step 4.
  b. If you do not, tap Don’t have an Apple ID or forgot it? Then tap Set Up Later in Settings, and Don’t Use.

Apple ID screen with Apple ID and Password fields circled; Apple ID screen with Don't have an Apple ID or forgot it? button circled

4. At the Welcome screen, tap Get Started.

iPhone welcome screen with Get Started button circled

5. You will be prompted to allow AirWatch to assign apps and books to you. Tap Continue. AirWatch will automatically download apps assigned to your department.

Allow App and Book Assignment pop-up, Continue button circled

6. AirWatch will prompt you to set a passcode within an hour. Tap Continue. The passcode must be at least 6 alphanumeric characters.

Passcode Requirement pop-up with Continue circled

7. Open the AirWatch Agent App, which will prompt you to set an AirWatch PIN. This PIN is separate from the Passcode you created in the previous step, and will only be used to open the AirWatch Agent. The PIN must contain at least 4 numbers, which cannot be repeating, ascending, or descending.

AirWatch Agent screen with Passcode fields circled. Passcode Restriction pop-up with passcode requirements circled.

8. Enrollment is now complete, and if you open the AirWatch Agent app, your device’s compliance status will be displayed.

My Device screen with Enrollment status circled

If your device is new and you are NOT using DEP (Apple’s Device Enrollment Program), follow these steps to set up your device.

If you have already set up your device, SKIP to Section II: Downloading and Enrolling in AirWatch.

I. Setting up your device

1. Turn on your phone, and press the home button or slide the screen to the right to begin setup. Select your preferred language and your country or region.

iOS start screens; English option circled, United States option circled

2. Choose to use a Wi-Fi network or Cellular Connection, then choose to enable or disable Location Services and Touch ID.

Choose a WiFi Network screen: Columbia University and Use Cellular Connection options circled; Location Services screen, Enable Location Services screen (choose your own option); Touch ID screen, Set up Touch ID later option circled

3. Create a Passcode. As per CUIT’s policy, this passcode will need to be 6 numbers, and cannot contain ascending, descending, or repeating numbers. Confirm this Passcode at the next screen.

Create a Passcode screen, password fields circled

4. The next screen will ask you how you would like to set up your phone – from backup, or as a new phone. Tap on the desired option.

Apps & Data screen, select your desired option

5. Once you have set up your device, you will be brought to a screen that asks you to either enter your pre-existing Apple ID, or create one. Please note that you will need an Apple ID in order to download AirWatch and all other apps.

  • If you already have an Apple ID, enter it and skip to Step 12.
  • If you do not have an Apple ID, tap Don’t have an Apple ID or forgot it? Then, tap Create a Free Apple ID.
Apple ID screen; Don't have an Apple ID or forget it? option circled.

6. Swipe the dials to select your birthday. At the next screen, enter your first and last name.

Email address screen, Use your current email address option circled; Enter email address, email field circled with uni@columbia.edu entered, next button circled

8. Select a password. This password will ONLY be associated with your iTunes account, and will be required when downloading new apps. Please note that the password must be at least 8 characters, and include a number as well as an uppercase and lowercase letter.

Password screen, password and verify fields circled

9. You will be prompted to select three (3) Security Questions along with answers.

Security Questions screen, with Question and Answer fields circled

10. Apple will ask you to agree to their Terms and Conditions. Select Agree in the bottom right hand corner. You may see a loading screen as your new Apple ID is created.

Terms and Conditions screen, Agree accepted; Apple ID creation screen (waiting)

11. Choose to Set Up Siri, or Turn On Siri Later. You can always opt to turn Siri on or off later. At the next screen, choose to either Share Analytics with Apple or not. Finally, you may see an option to select Standard or Zoomed view. If you do, select your preference.

Siri screen, Set Up Siri circled (can also opt out); Analytics screen, Share with Apple circled (can also opt out); Display Zoom screen, Choose a view circled (choose your preference)

12. Select Get Started at the bottom of the screen.

Welcome to iPhone screen, Get Started circled

13. Navigate to Settings > Verify Your Email Address. Tap Verify Email Address, and you will be sent a 6-digit verification code. Type this code in.

Settings screen, Verify Your Email Address button circled; Suggestions screen, Verify Email Address circled; Verify Email Address screen, verification field circled

14. Navigate to the App Store, and search AirWatch Agent. Tap Get and then Install.

iPhone home screen, App Store icon circled; App Store screen, Airwatch agent typed into search field; AirWatch Agent page, Get button circled

15. You will be prompted to sign in with the password you created in Step 8. Enter the password, then tap Get. Since your Apple ID has not yet been used to download apps, you will need to review account information. Tap Review.

AirWatch installation screen with Sign-in Required pop-up, Get button circled; AirWatch installation screen with new Apple ID pop-up, Review button circled

16. Tap the switch by Agree to Terms and Conditions to toggle it on, then verify that your title and name are correct and tap Next. Fill out your Payment Method. Keep in mind that you will never be charged unless you make a purchase via the App Store. Tap Next.

Complete your Apple ID screen, Agree to Terms and Conditions option circled, Next button circled; Complete your Apple ID screen, Next button circled; Complete your Apple ID screen, Next button circled

17. Press Continue to complete the creation of your Apple ID.

Apple ID Completed screen with uni@columbia.edu confirmed as user

II. Downloading and Enrolling in AirWatch

1. Once you have navigated to the App Store, searched for AirWatch Agent, and downloaded the app, tap Open. Tap Email Address for the authentication method.

AirWatch Agent app screen, Open circled; Welcome to AirWatch screen, Email Address authentication method circled

2. The next screen will prompt you to enter your corporate email ID. Enter your uni@columbia.edu address and hit Go.

Authenticate screen, with uni@columbia.edu entered into Email field

3. At the Authenticate screen, enter your Uni and your directory password, and hit Next.

Authenticate screen, with uni entered as Username and directory password entered

III. Securing your Device

1. AirWatch will prompt you to enable device management. Tap Redirect & Enable, then tap Install at the next screen to install the Device Manager.

Secure screen, Redirect & Enable button circled; Install Profile screen, Install button circled

2. Tap Install twice, then Trust to confirm the installation of the profile. Once the profile has installed, tap Done.

Installing Profile screen, Install circled; Warning screen, Install button circled; Warning screen with Remote Management pop-up, Trust button circled; Profile installed screen, Done button circled

3. Tap Open to complete initial configuration for your iOS device, then tap Done. Tap Allow to allow the AirWatch Agent to send you notifications.

Configure screen, with Open this page in "agent" pop-up, Open button circled; Configure screen with Done button circled; Pop-up reading "Agent" would like to send you notifications, with Allow circled

4.  AirWatch will prompt you to set a passcode within an hour. Tap Continue. The passcode must be at least 6 alphanumeric characters.

Passcode Requirement pop-up, with Continue button circled

5.  You will be prompted to allow AirWatch to assign apps and books to you. Tap Continue. AirWatch will automatically download apps assigned to your department.

Allow App and Book assignment pop-up, Continue button circled

6. Open the AirWatch Agent App, which will prompt you to set an AirWatch PIN. This PIN is separate from the Passcode you created in the previous step, and will only be used to open the AirWatch Agent. The PIN must contain at least 4 numbers, which cannot be repeating, ascending, or descending.

Airwatch Agent screen with New Passcode fields circled; Passcode Restriction popup with passcode requirements circled

7. Enrollment is now complete, and if you open the AirWatch Agent, your device’s compliance status will be displayed.

MyDevice screen displaying compliance status