Skip to main content
Zero Touch Enrollment

Deploy Devices ThatConfigure Themselves

Ship devices straight to employees: they configure themselves on first boot.

Works with Apple ADE, Android Zero Touch and Samsung Knox. Define your enrollment profile once, every new device is ready the moment it powers on, with no IT staging.

A new smartphone taken out of its box next to a laptop, ready to enroll on first boot

Highlights

Why IT Teams Choose Zero Touch Enrollment

Manual device provisioning does not scale. Every new hire means 30+ minutes of hands-on configuration per device, and remote employees wait days for pre-staged hardware to arrive. Zero touch deployment eliminates both problems by letting devices configure themselves the moment they connect to the internet.

Direct Shipping

No IT Staging Required

Ship devices from any authorized reseller directly to employees. Each device enrolls automatically on first boot through Apple ADE, Android Zero Touch or Samsung Knox Mobile Enrollment (KME), fully configured with your apps and policies.

Device Ownership

Always Enrolled

Zero touch enrollment binds devices to your MDM at the hardware level. Even after a factory reset, the device re-enrolls automatically and reapplies your security policies.

One-Click Deploy

One Profile, Every Device

Build your enrollment profile once with apps, restrictions, Wi-Fi, VPN, and email. Every new device inherits the same setup automatically, saving 30+ minutes per device.

How it works

How Zero Touch Deployment Works

Appaloosa connects directly with Apple Business Manager and Android Zero Touch portals. From purchase to first boot, device provisioning is fully automated in four steps.

  1. 01

    Connect

    Link your Apple Business Manager or Android Zero Touch portal to Appaloosa

  2. 02

    Purchase

    Order iOS or Android devices from any authorized reseller

  3. 03

    Assign

    Devices appear automatically in your Appaloosa console, ready to configure

  4. 04

    Ship

    Send devices to employees. They enroll and configure on first power-on.

Integrations

Pre-Configure Your Business Tools at Enrollment

  • Apple ADE

    Link Apple Business Manager to Appaloosa. iPhone, iPad and Mac bought through Apple or an authorized reseller enroll on first boot, supervised, with the Setup Assistant screens you choose.

  • Samsung Knox Mobile Enrollment (KME)

    Enroll Samsung devices at scale through Knox Mobile Enrollment. Devices registered by your reseller are provisioned automatically the moment they connect, with no manual staging.

  • Android Enterprise

    Use Android zero-touch enrollment and Android Enterprise to ship devices straight to employees. Work profile or fully managed: apps and policies are applied before first use.

Zero Touch Deployment in Practice

Remote Onboarding

Onboard remote and hybrid workers without shipping devices through IT first. Ship to the employee's address and let zero touch enrollment handle the rest.

Fleet Rollouts

Deploy hundreds of devices in a single wave without adding IT headcount. Zero touch provisioning removes per-device configuration entirely.

Security Baseline

Every device meets your security baseline from the first second it powers on. Passcode policies, encryption, app restrictions, and network settings apply automatically.

They trust us

Get started

See Zero Touch Deployment in Action

Walk through the full enrollment flow with our team. See how Appaloosa provisions devices automatically from purchase to first boot.

Get Started

Or talk to our sales team.

Free 14-day trial
Expert Support

FAQ

Zero Touch Deployment FAQ

zero touch mdm
Zero touch deployment is an automated device enrollment method supported by Apple (through Apple ADE, formerly DEP) and Google (through Android Zero Touch), and Samsung (through Knox Mobile Enrollment, KME). When a company purchases devices from an authorized reseller, those devices are registered to the company's MDM server. On first boot, the device connects to the MDM, downloads its configuration profile, installs corporate apps, and applies security policies. The employee receives a fully configured, production-ready device without IT ever touching it.
Devices must come from an authorized Apple or Android Zero Touch reseller, but most major carriers and enterprise device distributors already qualify. Ask your current supplier if they support Apple Business Manager or Android Zero Touch registration. If they do, no change to your procurement process is needed.
Zero touch enrollment enforces security from the very first second a device is powered on. Encryption, passcode requirements, app restrictions, and network policies are applied before the employee can use the device. On iOS, devices are placed in supervised mode, which prevents users from removing the MDM profile. On Android, the device owner mode ensures the same level of control. Even after a factory reset, the device re-enrolls automatically.
Zero touch enrollment is designed for new device purchases. Devices already deployed can still be managed through Appaloosa using standard MDM enrollment (QR code, enrollment link, or manual profile installation). For Apple devices, you can also add existing hardware to Apple Business Manager using Apple Configurator, which then enables automated enrollment on the next factory reset.
On average, zero touch deployment saves 30 to 45 minutes of IT time per device. That includes the time normally spent unboxing, connecting to Wi-Fi, installing apps, configuring email, and applying restrictions. For a rollout of 500 devices, that represents over 250 hours of IT labor eliminated. The savings grow further when you factor in shipping logistics, since devices go directly from the reseller to the employee instead of routing through IT.
Still have questions?Our team answers in minutes.
Talk to us