FAQs & Troubleshooting - MDM Device Enrollment

In this comprehensive guide, you'll find answers to common questions and solutions to potential issues encountered during the enrollment process of mobile devices into your organization's MDM setup.

General FAQs

How do I know if my phone or tablet is supported for device enrollment?

Most devices running Android 6.0+ and iOS 7.0+ are supported. You can learn more about supported devices for Android and iOS here.

What data is collected or managed on my enrolled device?

Only the IMEI and Serial Numbers of iPhones and iPads are collected for the purposes of uniquely identifying the devices in NIC enrollment services. Read more about data privacy here.

Is there an NICeMail services helpdesk email or phone number to contact for assistance or report issues?

You can reach out to NICeMail services Helpdesk through:

How can I unenroll my device if I need to switch to a new device for work?

It is recommended to contact NICeMail services Helpdesk to setup a new device, since unenrolling the device will remove all work apps including OneAuth. If you lose OneAuth MFA, you may lose access to NICeMail services on other devices like your computer browser. So please contact helpdesk-email@gov.in about enrolling a new device and setting up MFA on it, before removing any apps on your existing device.

Does device enrollment impact the battery life or device performance?

The software is optimized to run on minimal resources. There will not be any noticeable impact on battery life or device performance. The main purpose of device enrollment is to create a layer of protection for your official apps and data.

Where can I find the enrollment QR code to scan?

The QR code can be found by clicking on the profile icon on the top right side of the NICeMail services. Find the enrollment steps here.

How many mobile devices can I enroll using the QR code?

Only one device can be enrolled using the QR shown in your email browser window. To enroll an additional device or switch to a new one, contact the NICeMail services helpdesk at helpdesk-email@gov.in.

I have already enrolled two devices. Can I enroll more devices?

You can enroll up to two devices, which can either be two mobile devices or one mobile device and one laptop/desktop. The QR only works for the first device you enroll. To enroll additional devices, please contact the NICeMail services helpdesk at helpdesk-email@gov.in.

What is MDM?

Mobile Device Management (MDM) is a software used by your organization to manage and secure the work apps and data present on your devices.

What are my benefits for enrolling the device?

Work/personal apps and data are separated to ensure better security and user privacy. It also makes access to your official apps convenient by providing an App Catalog. More benefits can be found here.

While logging in to Gov Mail or Gov OneAuth, I get an error "This device can only be used by assigned users"

This error occurs if you attempt to use a different username than the one used during device enrollment. Please use the same credentials you used during MDM enrollment when logging in from an enrolled device. If you need to add multiple accounts, please contact your Delegated Administrator for further assistance.

Are there any restrictions on using certain features or apps on my device while enrolled in MDM?

No, there can be minimal policy changes, such as setting a strong PIN for device or while accessing official apps. You can continue to install any apps for personal purposes. On an enrolled Android phone, you can install personal apps in the Personal tab. On an iOS device, you can install personal apps from the App Store using your personal iCloud account like you always do.

How do I know if my device is currently enrolled in MDM?

On Android phones, you can navigate to the Accounts within Settings to check for a Work Profile, and on iOS you can navigate to Settings app -> VPN and Device Management under General Settings, to check for any MDM profiles.

What happens if I delete work apps from my device?

If you delete work apps from your device, it may remove your access to official email, calendar, contacts, and other work-related resources. It's recommended not to delete work apps from your device unless instructed by the NICeMail services helpdesk.

What are the restriction I have for the Work Profile?

Once the device is enrolled and a work profile is created, certain features are restricted within the work profile:

  • Clipboard Paste : Copying and pasting work content through the clipboard is disabled. 
  • Debugging Feature : Activities, services, receivers of the MDM app, or any other component of the MDM app cannot be started. This includes starting activities, making service calls, accessing content providers, sending broadcasts, installing/uninstalling packages, and clearing user data.
  • Install Side-Loading Apps : Installing any personal apps except for work apps installed through the Play Store is disabled. 
  • Screen Capture : Taking screenshots within the work profile is disabled. 
  • Data Sharing Across Profiles : Sharing data from the personal profile to the work profile is disabled. 
  • Share Configured WiFi : Sharing the admin-configured WiFi is disabled.

However, within the work profile, sharing data from one work app to another work app is permitted.

Is it possible to enroll the device if clone apps or Dual Space are installed on the mobile?

No, it is not possible to enroll the device if clone apps or Dual Space are installed on the mobile.

If we initiate a screen share on WhatsApp within the work profile, can we display our work profile screen to the other user?

No, if you initiate a screen share on WhatsApp within the work profile, you cannot display your work profile screen to the other user.

How many devices can I Enroll?

You can enroll up to two devices, which can either be two mobile devices or one mobile device and one laptop/desktop. Contact the NICeMail services helpdesk at helpdesk-email@gov.in to enroll additional devices.

Can the same device be enrolled after a factory reset?

It is recommended to contact the NICeMail services helpdesk to remove your registered device from the MDM server before re-enrolling the same device after a factory reset.

Why is app installation not working after enrollment, even after a long wait?

If app installation is not working after device enrollment, perform the following steps:

  1. Check Internet Connectivity:
    • Ensure your device is connected to the internet.
    • Switch the internet connection if using WiFi.
  2. Clear Play Store, Play Service & Download Manager Cache:
    • Open the Settings app on your Android device.
    • Scroll down and select Apps & notifications (or just Apps on some devices).
    • Tap on See all apps if needed, then scroll down and select Google Play Store.
    • Tap on Storage & cache.
    • Tap on Clear Cache.
    • Repeat the above steps to clear the cache for both Play Services and Download Manager as well.

What should I do if I lost my mobile device? How can I log in to the new email service?

In the event of a lost or unavailable mobile phone , please utilize the backup codes generated during the initial setup instead of the TOTP to access your account. If you haven't previously downloaded backup codes, kindly reach out to your Delegated Administrator for assistance.

Can I change the MFA authentication mode back to SMS-based OTP?

Please contact your department's Delegated Administrator for further assistance.

Android device enrollment

What permissions do the ME MDM app require?

The ME MDM app requires two permissions alone to enroll the devices:

  • Camera (to scan the QR code)
  • Notifications (to inform completion of enrollment)

Even after the Work Profile is created successfully, I'm not getting the NICeMail services apps installed automatically.

It usually takes around 2-3 minutes for the account to be setup and apps installed. You will see a notification on the device from ME MDM work profile app saying enrollment is successful. Once the enrollment is complete, it is recommended to wait 8-10 minutes for the apps to be installed on the registered devices as a managed playstore will be configured inside the work profile. Please be patient and check again after allowing some time for the process to complete. If the issue persists, please follow the instructions below to resolve the issue:

  1. Check your mobile internet speed. If you think the network might be slow, connect to a stronger and more stable network before trying to install the apps again.
  2. Make sure your mobile device meets the compatibility and system requirements for Android and iOS. Incompatible devices or outdated operating systems may prevent MDM and other work apps from installing.
  3. Ensure your mobile device has enough storage to install the apps. If your device is running low on storage, the apps may fail to install. 
  4. Ensure that Developer options are disabled on your Android device, as these settings can interfere with the installation of MDM applications. You can usually find this option within the Device Settings under Developer options.

If you've already tried the above-mentioned resolutions and the issue persists, please contact the NICeMail services helpdesk for assistance.

MDM app says that unable to proceed due to USB Debugging enabled

It is not generally recommended to keep USB Debugging enabled since it may lead to security risks. To rectify this error, go to the developer options in device Settings, and disable USB Debugging.

After completing the enrollment process, I tried to log in to the Gov OneAuth app and Gov Mail app, but I was asked to enter an OTP from the authenticator app. I haven’t set up my Gov OneAuth yet. What should I do?

Please reach out to the NICeMail services helpdesk for further assistance.

I cannot find any of the regular apps on Play Store under the Work tab. Why?

You will only find apps approved by NIC in the Play Store under the Work tab. You will not be able to search and install any personal apps in the Work tab. You can continue to install apps for your personal use outside the work profile from Play Store app shown in personal tab.

Should I scan the QR code from device camera or ME MDM app in Android?

The QR code has to be scanned through the ME MDM app. The QR code can be found by clicking on the profile icon on the top right side of the NICeMail services. 

Can I see the applied restrictions on the enrolled Android device?

No, you cannot view the applied restrictions on the enrolled Android device.

I'm unable to preview PDFs in the Gov Mail app. How can I fix this?

You should be able to open PDF files within the Gov Mail app. If you're having trouble previewing PDFs, follow these steps:

  1. Open the MDM app catalog in your Android Work profile.
  2. Check if there are any new updates available for the Gov Mail app.
  3. If an update is available, click Update to install the latest version of the app.

If the issue persists, please reach out to the NICeMail Services Helpdesk for further assistance.

I've accidentally deleted ME MDM app due to low storage, now I'm unable to access Gov OneAuth. How to access my mail on Desktop?

Please be cautious before deleting any work apps installed via MDM, as this could potentially result in losing access to your official work apps. In the event that you do not have access to the Gov OneAuth app for TOTP authentication, please utilize the Backup Codes generated during the initial setup to access your account.

If you haven't previously downloaded backup codes, kindly reach out to your Delegated Administrator for assistance.

My mobile device becomes very slow after MDM enrollment. What should I do?

The MDM software is designed to use minimal resources, but if your device is running slow, try the following:

  1. Ensure you have enough available storage on your device.
  2. Android recommends keeping 5-10 percent of device storage free for optimal MDM performance.
  3. Consider pausing the workspace when it’s not in use to improve device speed.

What should I do if I encounter difficulties with the Gov Mail app on my mobile device, such as it closing or crashing on its own?

If the Gov app on your mobile device is closing or crashing unexpectedly, follow these steps:

  1. Ensure that your device has sufficient free storage space. Lack of space can cause apps to malfunction. 
  2. Go to your device's settings to check for and install any available software updates.
  3. Access the MDM app catalog in your Android Work profile and check for any available updates for the Gov Mail app.
  4. If updates are available, make sure to install them.

If you still encounter issues after following these steps, contact your IT support or help desk for further assistance.

I tried setting up Work Profile on my mobile device, but I'm receiving an error message: 'Couldn't set up your work profile. Contact your IT department or try again later.' What should I do?

  1. Ensure your device has sufficient available storage for the Work profile installation. 
  2. Make sure that your mobile device meets the compatibility and system requirements specified in this document for Android devices.
  3. Ensure that Developer options are turned off on your Android device, as these settings can interfere with MDM installation. You can usually find this setting in Device Settings under Developer options. 
  4. Confirm that the work profile is correctly installed on your device. On most Android devices, you can check this by going to Android Settings > Accounts > Work. For specific instructions, refer to the help documentation provided by your device manufacturer. 

If the issue persists, please contact NICeMail services helpdesk for further assistance.

iPhone and iPad device enrollment

Safari could not install a profile due to an unknown error

You will encounter this error if you have enabled Stolen Device Protection in FaceID and Passcode settings. Waiting for one hour and trying to re-enroll the device will prevent the issue from occurring again. You will also be notified when you can re-enroll.

Unable to find the profile downloaded in Settings

Apple automatically deletes an downloaded profile if it is not installed within 8 minutes for security reasons. This could also occur if you click ‘cancel’ on the profile installation prompt. For both cases, you can restart the enrollment process. Open the QR code from your NICeMail services, and scan the displayed QR code again from your device Camera.

Security Delay due to Stolen Device Protection

Stolen Device Protection is an Apple feature that disables changing important security settings like passcodes, installing MDM profile, etc, for one hour when executed from an unfamiliar location. You should wait one hour to regenerate the QR code and attempt the enrollment. You will receive a notification when you can proceed with the enrollment. You can turn on Stolen Device Protection in Settings:

  1. Go to Settings, then tap Face ID & Passcode.
  2. Enter your device passcode.
  3. Tap Stolen Device protection, then turn Stolen Device Protection on or off.

After iOS enrollment and profile install success, I am not getting Gov Mail or Gov One Auth apps

It usually takes around 2-3 minutes for the apps to start appearing on the home screen. If needed, the apps can be found in the App Catalog for immediate download.

Invalid Enrollment Invite! Contact your IT Administrator

This error occurs if you try to enroll another device using the same QR code. You can check if your mobile device is already enrolled. If you are looking to enroll another device, contact the NICeMail services helpdesk.

If I accidentally selected cancel while Mail app installation prompt, how can I install Mail app again?

You can install any NIC approved app by opening 'App Catalog' on your iPhone, and clicking the install button next to the app.

What is App Catalog on my iPhone?

App catalog is a repository of apps that NIC has provided for your use. You can quickly find apps that you require and install them without having to reach out to NICeMail services helpdesk at helpdesk-email@gov.in.

Why am I receiving an error after scanning the QR code during enrollment on an iPhone 15 Pro?

If you encounter an error during the enrollment process after scanning the QR code on an iPhone 15 Pro, the issue might occur if you have enabled Request Desktop Website in Safari.

To resolve this issue, you need to disable the "Request Desktop Website" setting in Safari. Follow these steps:

  1. Go to iPhone Settings.
  2. Select Safari.
  3. Find and disable Request Desktop Website.

Once this setting is disabled, the enrollment process should work correctly.

PREVIOUS

UP NEXT