Factory Reset Protection

Updated 4 weeks ago by Sriram Kakarala

When a device is set up using EMM method (afw#mobilock), it does provide extra security in the sense that user’s cannot uninstall the Scalefusion app, but it leaves one gap that user’s can still Factory reset the device using OEM specific hardware key combinations.

Factory Reset Protection (FRP) for EMM devices, enables an organization to prevent the misuse of devices against unauthorized Factory resets on the devices. So that even if the user factory resets a device, they would still need a pre-authorized set of GMail accounts to complete the setup on device after factory reset.

This feature does not prevent the factory resetting of the device, but allows you to configure some accounts that will be used to set up device and without these accounts, a factory reset device is of not much use.

This tutorial guides you through the process of setting up Factory Reset Protection (FRP) on your Dashboard and applying it to devices.

Before You Begin

  1. Make sure you have enabled EMM on your account as described here.
  2. Make sure that you have enrolled the devices using afw#mobilock as described here.
  3. The latest Scalefusion Android client has been updated on the device.
  4. Have a Google Plus/Gmail account that can be used for activation.

How It Works

In brief,

  1. On Dashboard you can configure multiple Google Plus accounts that you want to use for FRP.
  2. Once FRP is activated, when a device is factory reset, then ONLY the accounts configured on Dashboard can be used to setup the device. User cannot enter any other account. They cannot also Skip the GMail setup after the device is Factory reset.

When does FRP Work?

Factory Reset Protection or FRP works when a EMM device is factory reset in the following two ways,  

  1. When the device is factory reset using OEM specific hardware keys.
  2. When the device is factory reset from the Dashboard.

Setting up the Devices to Support FRP

  1. If you have previously set up your device using afw#mobilock, then push the latest Scalefusion version from Dashboard and wait for the device to complete updating the Sclaefusion client.
  2. On a new device or a factory reset device, start setting up using afw#mobilock as described here. This will download the latest client.

Configuring & Activating FRP on the Dashboard

  1. Navigate to Device profile & policies > All configurations > Android Utilities > Factory Reset Protection
  2. Read the quick start guide and Click on CONFIGURE
  3. You will be shown a Dialog informing you that, At this point you will be redirected to Google Authentication page, where you would need a Google Plus/GMail account. Click OK.
  4. In the Google Authentication page, either Choose the account that you want to use for FRP activation OR login with a new account. Follow the on-screen instructions to complete login.
  5. Once the login is complete, you will be redirected to Scalefusion Dashboard, displaying the account that was added with ACTIVATE FRP button on top.
  6. Click on ACTIVATE FRP. This will activate the FRP and will sync the email id’s that you have added till now with the devices.
  7. You can add more accounts if you want to protect the devices with more accounts. To do this click on ADD MORE GOOGLE+ ACCOUNT button.

Deactivating one Account from FRP

If you don't want to use a particular Google Account to be used for FRP, click on the Deactivate icon next to it and that account will be removed from FRP list on device.

Deactivating FRP from All Devices

To Deactivate FRP completely from all the devices, click on DEACTIVATE FRP button. All the devices which have internet and received the Push message will update the FRP list on device so that they can be factory reset and used normally.

For devices which don’t receive push, no change will happen that is they will still be using the configured Google Accounts to protect factory reset until they receive the push. If these devices are reset before they receive the push, then you would need the account(s) to setup the device.

What to do If you are not able to set up a device normally after a Factory reset?

  1. If you have Activated FRP, then you need to use one of the emails configured on Dashboard to start setting up the device.
    1. If you have changed the password of the Google account within the last 24 hours, then you need to wait for a day.
  2. If you have Deactivated FRP, and even then the device is not allowing to setup, then the device might not have received push. Please try with one of the email accounts configured on Dashboard.

How did we do?

Powered by HelpDocs (opens in a new tab)