# Configuring and deploying for Android

This guide explains how to deploy the Nexthink Mobile application for Android devices. It is intended for IT administrators responsible for device management and Nexthink onboarding, and it assumes familiarity with Android device management concepts and with administering a Unified Endpoint Management (UEM) solution.

This guide explains how to deploy the Nexthink Mobile application for Android devices. It is intended for IT administrators responsible for device management and Nexthink onboarding, and it assumes familiarity with Android device management concepts and with administering a Unified Endpoint Management (UEM) solution.

{% hint style="info" %}
This documentation uses Microsoft Intune admin center as an example; however, you can perform the same configuration using any other solution as well.
{% endhint %}

## Before you begin

Create an installation token; refer to the [creating-an-installation-token](https://docs.nexthink.com/platform/configuring_nexthink/bringing-data-into-your-nexthink-instance/connecting-mobile-devices-to-nexthink/creating-an-installation-token "mention") documentation.

## Adding Nexthink Mobile

Perform the following steps to add Nexthink Mobile to Intune.

{% stepper %}
{% step %}
Select **Apps > Android > Create**.
{% endstep %}

{% step %}
For **App type**, select **Managed Google Play app**:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-68c2d825518d31cc45aa42027953a9d4b63cd022%2Fintune-create-app.png?alt=media" alt="" width="563"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
In Google Play, go to the **Search Play Store** dashboard.
{% endstep %}

{% step %}
Search for the keyword "Nexthink Mobile" and install the app from the search result:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-fa328de862c841110db15e8dc0ffb22f14dcf71f%2Fimage.png?alt=media" alt="" width="563"><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}

***

## Creating an app configuration policy

Create an app configuration policy and assign it to your Entra ID groups by following the steps below.

{% stepper %}
{% step %}
Go to **Apps > Manage apps > Configuration**.
{% endstep %}

{% step %}
Select **Create > Managed devices**:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-9c7f187a004be04f31fe00edb3c660d271e55527%2Fintune-create-managed-app.png?alt=media" alt="" width="563"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
On the **Create app configuration policy** dashboard, fill in the following fields:

* **Name**: Add a meaningful name for your policy.
* **Platform**: Select **Android Enterprise**.
* **Profile type**: Select the profile that is applicable to your organization.
  {% endstep %}

{% step %}
Select **Targeted app** and select the previously created app from the list and proceed to **Settings**:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-6f0c23933126952bd6aafcd892a0d2d5efe3cec7%2Fintune-select-app.png?alt=media" alt="" width="563"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Select **+Add** and enable the **Post notification** permission; select **Auto grant** to allow Nexthink Mobile to send notifications, or **Auto deny** to prevent it:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2F9lOd2IZ60FpBq9xUVU9m%2Fimage.png?alt=media&#x26;token=a38f89b6-b32e-42ba-b4ae-2f37dc9e3868" alt="" width="563"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
In **Configurations settings format**, select **Use configuration designer** from the dropdown and select the lower **+Add** button:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-03d50001d378da9ebcb934c98d8cd63f33415983%2Fintune-create-policy.png?alt=media" alt="" width="521"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Select the following configuration keys, and set the pertaining value types and configuration values:

<table data-full-width="true"><thead><tr><th width="162.66668701171875">Configuration key</th><th width="112.6666259765625">Value type</th><th>Configuratoin value</th></tr></thead><tbody><tr><td>Data Upload Network</td><td>choice</td><td><p>Choose one of the following options:</p><ul><li><strong>Upload Always</strong>: Includes Wi-Fi and mobile data</li><li><strong>Upload only when not roaming</strong>: Includes Wi-Fi and mobile data</li><li><strong>Upload only over wifi</strong>: Wi-Fi only</li></ul></td></tr><tr><td>Collect Network Identifiers</td><td>bool</td><td>Select to collect the SSID and BSSID from the connecting network.</td></tr><tr><td>Force Show Settings Screen</td><td>bool</td><td>Select the checkbox.</td></tr><tr><td>Nexthink Installation Token</td><td>string</td><td>The installation token you generated for your Nexthink tenant.</td></tr><tr><td>Nexthink Proxy URL</td><td>string</td><td>The URL of your Nexthink tenant, according to the following pattern: <code>https://&#x3C;instance>.data.&#x3C;region>.nexthink.cloud</code><br>Example: <code>https://instance.data.eu.nexthink.cloud</code></td></tr><tr><td>Primary user UPN</td><td>variable</td><td>Select <strong>User principal name (UPN)</strong> in the <strong>Configuration value</strong> dropdown list.</td></tr><tr><td>Support email address</td><td>string</td><td>Define the email address to which Nexthink Mobile sends logs. When sending logs, the app opens the email app, and sets the defined email address as recipient.</td></tr><tr><td>Unique Device Identifier</td><td>variable</td><td><p>Select <strong>Intune Device ID</strong> in the <strong>Configuration value</strong> dropdown list.</p><p>⚠️ This is needed to ensure correct functionality with the connector.</p></td></tr></tbody></table>
{% endstep %}

{% step %}
Select **Add groups** and add the groups to which you want to assign the policy, then select **Create** to finalize the app.
{% endstep %}
{% endstepper %}

## Installing Nexthink Mobile on client devices

After creating an app configuration policy, you can define which device groups install Nexthink Mobile automatically and which ones must install it manually:

* Fully company-managed devices can automatically install Nexthink Mobile through the UEM solution.
* Bring your own devices (BYOD) must have a work profile on them and install Nexthink Mobile manually from the app store.

First, select Nexthink Mobile by following the steps below.

{% stepper %}
{% step %}
Select the app from the list of Android apps:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-4d7eed108995bcb3a35527efb52c34980cfbccf3%2Fintune-install-app.png?alt=media" alt="Select app to set up for automatic and manual installation" width="563"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Select **Properties**, then **Assignments > Edit**.
{% endstep %}
{% endstepper %}

Proceed with [#automatic-installation](#automatic-installation "mention") or [#manual-installation](#manual-installation "mention") based on the specific device types.

### Automatic installation

Select **+ Add group** under **Required**, and set the **Update priority** to **High priority**:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-dd7d10c3833ca44eb8e63235fdc387e253a76dc8%2Fintune-auto-install-groups.png?alt=media" alt="Automatic installation groups" width="563"><figcaption></figcaption></figure>

Device groups in this category will install Nexthink Mobile automatically the next time Intune syncs with the devices.

### Manual installation

Select **+ Add group** under **Available for enrolled devices**:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-c190f1752234a0a3d2f2acdfc440d25849e1f1b5%2Fintune-manual-install-groups.png?alt=media" alt="Manual installation groups" width="563"><figcaption></figcaption></figure>

At this point, Nexthink Mobile will be available in your organization's company portal, from where users can install it directly on their client mobile devices.

***

## Launching Nexthink Mobile automatically

By default, after the installation, the mobile device user must open Nexthink Mobile manually for the first time. This only has to be done once; after that, the app will automatically launch following each device reboot.

However, depending on the device manufacturer, you might use an OEM plugin, configured in Intune, to launch it automatically on user devices after installation. The following sections explain such use cases.

### Samsung Knox Service Plugin

**Prerequisites**

* The **Samsung Knox Service Plugin** is added to your organization’s app collection.
* The plugin is deployed and installed on the target Samsung mobile devices.

**Plugin configuration**

{% stepper %}
{% step %}
In Intune, go to **Devices > Managed devices > Configuration**.
{% endstep %}

{% step %}
Select **Create profile**, add the following values and select **Create**:

* **Platform**: Android Enterprise
* **Profile type**: Templates
* **Template name**: OEMConfig
  {% endstep %}

{% step %}
Add a meaningful name for the profile, then click **Select an OEMConfig app** and select the **Knox Service Plugin** app.
{% endstep %}

{% step %}
Select the **Knox Service Plugin** profile type and configure a **Device-wide policy**:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-eecedfa2fe348c51667613bfdd4e723e6fad5153%2Fintune-knox-device-wide-policies.png?alt=media" alt="Knox plugin device-wide policies" width="518"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Configure the following settings:

* **Enable device policy controls**: Set to **true**.
* **Application management policies**: Select **Configure** and configure the following policies:
  * **Enable application management controls**: Set to **true**.
  * **Battery optimization allowlist**: Add the following Nexthink Mobile package name: `com.nexthink.mobile.nexthinkapp`
  * **Package Name for Auto-Launch**: Add the following Nexthink Mobile package name: `com.nexthink.mobile.nexthinkapp`
  * **Enable permission controls**: Set to **true**.
    {% endstep %}

{% step %}
You do not need to define **Scope tags**; proceed to **Assignments**, and select **+ Add groups** to define which device groups will be part of the policy.
{% endstep %}
{% endstepper %}

### Zebra OEM Plugin

**Prerequisites**

* The **Zebra OEMConfig Powered by MX** is added to your organization’s app collection.
* The plugin is deployed and installed on the target Samsung mobile devices.

**Plugin configuration**

{% stepper %}
{% step %}
In Intune, go to **Devices > Managed devices > Configuration**.
{% endstep %}

{% step %}
Select **Create profile**, add the following values and select **Create**:

* **Platform**: Android Enterprise
* **Profile type**: Templates
* **Template name**: OEMConfig
  {% endstep %}

{% step %}
Add a meaningful name for the profile, then click **Select an OEMConfig app** and select the **Zebra OEMConfig Powered by MX** app.
{% endstep %}

{% step %}
Select the **Zebra OEMConfig Powered by MX** profile type and open the **Package Configuration**:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-c78ac8b9d48c51a5ea1b834c19f14690a2b9c575%2Fintune-zebra-package-sonfiguration.png?alt=media" alt="Adding a Package Configuration" width="426"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Add a new setting:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-0e0c01dc500111fe86bc58fbf87d2eabf3f8395e%2Fintune-zebra-device-package-configuration.png?alt=media" alt="Adding a new setting" width="563"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Add the Nexthink Mobile package name `com.nexthink.mobile.nexthinkapp`, and [app signature](#certificate-signature-value):

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-8440068df6df5401ac6ba7e67f422e0536c6f1f5%2Fintune-zebra-package-name.png?alt=media" alt="Adding package name and certificate" width="548"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Select **Feature Variances** and add a new feature variance:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-598ca7d3c3017d0812c85d076229b5392bb6d221%2Fintune-zebra-feature-variances.png?alt=media" alt="Adding a feature variance" width="563"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Add a new setting and select the **Exempt from Battery Optimization** variance type:

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-595eb670f1c95c6c94a8d016b57b7c6d267e010c%2Fintune-zebra-battery-optimization.png?alt=media" alt="Adding Exemp from Battery Optimization feature variance" width="563"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
To make sure the Nexthink Notification is not shown on Zebra devices to users, add a new feature variance and select the **Hide Notification** variance type.

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-50ce58ba348e015b87d100912c31d4522d550edb%2Fintune-zebra-hide-notifications.png?alt=media" alt="Adding Hide Notifications featrure variance" width="563"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
To enable auto-launch for Nexthink Mobile, add a new feature variance and select the **Launch app after install/upgrade** variance type.

<figure><img src="https://268444917-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxJSUDk9NTtCHYPG5EWs3%2Fuploads%2Fgit-blob-346b37e4d3779e85af8258d2cebb1ed43b1fee64%2Fintune-zebra-auto-launch.png?alt=media" alt="Adding Launch app feature variance" width="563"><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}

#### Certificate signature

When asked for a certificate signature for Nexthink Mobile, provide the value in the expandable section below.

<details>

<summary>Certificate signature value</summary>

```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```

</details>

## Configure Nexthink Mobile on client devices (optional)

If needed, see the [configuring-on-client-devices](https://docs.nexthink.com/platform/configuring_nexthink/bringing-data-into-your-nexthink-instance/connecting-mobile-devices-to-nexthink/configuring-on-client-devices "mention") documentation to learn how to configure Nexthink Mobile on client devices.