Only DPCs verified and approved by Android Enterprise are permitted to install apps during enterprise device enrollment provisioning. The installation of any non-approved DPCs or app installation attempts not on the allowlist will be blocked during enrollment installation.
Why does Android Enterprise verify and approve DPCs?
To protect Android users and devices, Android Enterprise evaluates all DPCs. This ensures that only trusted and validated DPCs can manage your devices, preventing the installation of unauthorized or malicious apps that could have dangerous permissions and compromise security and privacy.
Error message on device: “App blocked to protect your device”
During enterprise enrollment, if your device displays an error message such as “App blocked to protect your device”, this is because Android Enterprise has not verified and approved the DPC.
What this means:
The DPC or app you are attempting to install is not approved by Android Enterprise and enterprise enrollment using this app cannot proceed for provisioning. This prevents the device from being properly managed or set up for its intended enterprise use.
The DPC or app you are attempting to install is not approved by Android Enterprise and enterprise enrollment using this app cannot proceed for provisioning. This prevents the device from being properly managed or set up for its intended enterprise use.
Troubleshooting steps
For device users
- Contact your IT admin: If you are an employee enrolling a work device, immediately contact your IT admin or the person responsible for device management in your organization. They can verify if the correct DPC is being used.
- Provide the exact error message: When contacting your IT admin provide the exact error message and steps you took to enroll your work device and if possible, include a screenshot of the error.
For IT admins and developers
- Verify DPC approval status:
- Confirm if your DPC is verified and approved by Android Enterprise.
- If you are using a custom DPC, ensure it has completed the Android verification process.
- Confirm with your EMM provider.
- Confirm with your EMM provider that their DPC is on the Android Enterprise allowlist and is the recommended version for provisioning.
- Confirm if your DPC is verified and approved by Android Enterprise.
Developer and EMM guide for DPC approval process
For developers building custom DPCs or EMM providers, getting your DPC verified and approved by Android Enterprise is a critical first step.
Key requirements for DPC approval
-
DPCs or EMM developers must abide by Android Enterprise’s Permissible Usage. Creating a DPC to use Android Enterprise APIs is restricted to commercial enterprise use cases only. The following scenarios are not permitted:
- Device financing solutions (e.g., solutions intended to control device usage used in conjunction with hardware lease arrangements);
- Solutions developed exclusively for the purpose of device monitoring or eavesdropping independent of enterprise device management; and
- Push, preload, or auto install apps and/or services on Android devices without the express and informed prior consent of relevant customers and their end users.
How can I appeal this decision?
After you've verified your app's alignment with the preceding guidelines (including Mobile Unwanted Software (MUwS) and Potentially Harmful Applications (PHAs) as defined by Google Play Protect), if you still feel your app is erroneously blocked, you may request an appeal.