HMD Enable Pro user guide
June 2025
Download the user guide, watch how-to videos, and get help if you're encountering any issues.
June 2025
Short introduction to the HMD Enable Pro management console to get you started
Learn the steps for creating a policy on the HMD Enable Pro management console
Learn how to utilise the additional management features provided by the OEMConfig app
Learn the steps needed to configure HW buttons with the OEMConfig app for Nokia XR20 smartphones
Learn the different ways in which you can enroll a device to the HMD Enable Pro management console
Learn how you can enroll a device to the HMD Enable Pro management console using Zero Touch
Learn how to use the Devices section on the HMD Enable Pro management console
Explore questions related to HMD Enable Pro
Use the Forgot password button on the Log in page to receive further instructions for creating a new password.
If you cannot log in to your account via HMD Enable Pro management platform, please use the “Forgot password?” button in the login view.
Step 1.
Select the "Forgot password?"
Step 2.
Enter your email address to receive further instructions for setting up a new password.
If you are experiencing further issues, please contact your Administrator.
HMD Enable Pro runs on Google Cloud in Hamina, Finland, and there is no limit to how many licences can be purchased or used at the same time.
If the device is no longer in Zero-touch console, it cannot be re-enrolled to the EMM system. The operation cannot be undone.
Yes, you can use Advanced Search in the Devices view to search for specific devices.
Advanced search allows searching for devices utilising filters in the “Devices” section. These can be found on the Devices view by selecting "Search Filters". The result table filters immediately upon choosing the filters. Filters can be hidden and cleared. The following search filters are available:
Recommended browser for using HMD Enable Pro is Google Chrome.
HMD Enable Pro is a global Enterprise Mobility Management (EMM) solution that enables companies to manage their Android device fleet, applications, and security policies. The solution is compatible with devices running Android 9 or later.
IT departments can use HMD Enable Pro to perform tasks such as pushing required applications, establishing security policies, and defining what application usage is permitted or not. Data security features such as remote lock, remote wipe, and location tracking ensure the safety of the devices and the data they access.
HMD Enable Pro provides benefits such as consistent cybersecurity, business data loss prevention and mitigation, increased productivity, and reduced technology overhead.
Mobile Devices Endpoint Security: Consistent cybersecurity across all connected devices
Business Data Loss Prevention and Mitigation: HMD Enable Pro enables security features such as remote lock and wipe to ensure the security of company data and devices.
Increased productivity: When the right applications and settings are already installed on corporate-owned devices, employees spend less time learning how to operate them.
Enables IoT use: With the help of an EMM solution, commercial off-the-shelf (COTS) smartphones can be converted into IoT gateways or other IoT solution enablers.
Reduced Technology Overhead: Reduction in overall costs to your business.
HMD Enable Pro solution consists of several components, including:
In most markets globally - excluding those under embargo and ones mandated by local cloud servers.
HMD Global offers HMD Enable Pro globally in all markets where Android Enterprise is available, with the exception of markets in which it is mandated that local cloud servers must be used for user data, and markets that are under embargo.
The solution is developed by HMD Global in Tampere, Finland.
HMD Enable Pro has been approved by Google and it can be found on the Android Enterprise website.
HMD Enable Pro is equipped with a simple and easy-to-use management console that guides the user through the process of setting up policies and deploying devices. It is easy to learn and operate. No previous IT experience is required.
Learning how to use HMD Enable Pro is quick and easy.
We provide you with clear and straightforward training materials and videos that demonstrate and explain how the solution works and how to get started. Our estimate is that within 10 minutes you would be comfortable enough with the solution to deploy your first devices.
HMD Enable Pro simplifies the user experience, allowing your team to become familiar with your devices more quickly and efficiently.
HMD Enable Pro ensures that all the needed apps and settings that a user, or IoT use case requires, are automatically available in the device, therefore ensuring that the device is ready to use for its designated tasks. Limiting the devices to a few predetermined apps also simplifies the user experience, ensuring that your employees quickly learn how to use your corporate device.
If Work Profile is used, the employee is able to use both personal apps and company apps on the same device, therefore removing the need to have separate devices for work and personal use.
Yes, you can use the solution to create as many separate management policies as you need.
HMD Enable Pro supports all Android Enterprise Management profiles, including Work Profile, Kiosk mode, and Fully Managed. Depending on your company's needs, you can select the type and number of management policies you wish to create. You can easily enroll devices in the desired policies using zero-touch enrollment or QR code.
Yes, HMD Enable Pro is designed to be compatible with any Android 12 or newer device, including our own.
While HMD Enable Pro is compatible with any Android 12 or newer GMS-certified smartphone or tablet, it was created with customers in mind who prefer to have their devices and EMM from the same manufacturer. Contact us and we can guide you forward with the best solution for your needs.
An enterprise is created when taking the HMD Enable Pro management console into use.
An enterprise is created when taking HMD Enable Pro solution into use via browser management console. An enterprise can be created for the organisation or a department, or, depending on the business model and approach, and if sub-Enterprise creation option is enabled, for another legal entity of the company or company’s customer.
The party creating an enterprise for their own organisation is responsible for user consent, contact details and the data protection contact details which Google collects for Managed Google Play.
The contact email is needed for Google’s Enterprise system; it is the primary contact towards Google. Managed Google Play is the content marketplace for Android in the enterprise. It requires giving consent and allows to browse and manage apps for own organization. Google collects the details to comply with the data protection regulations. These details can be filled in later if the user does not have them at hand when creating the enterprise.
If the user is creating an enterprise for another department or other company (e.g., customer), the party using the enterprise is responsible for the contact details. In such cases, setting “This is a customer managed enterprise” is enabled. The consent is asked when the administrator of the new enterprise is logging in to it for the first time.
Any GMS-certified smart phones or tablets with Android 12 or later.
With HMD Enable Pro, you can enroll and manage any Android based smart phones or tablets. A minimum version of Android 12 or later is required. As our EMM solution utilises Managed Google Play Store, the devices need to support Google services, i.e., they need to be GMS certified.
HMD Enable Pro does not support the management of devices running on iOS (iPhone, iPad), Windows or Linux.
Yes, HMD Enable Pro supports Zero touch enrollment.
With HMD Enable Pro, you can enroll your devices using Zero Touch. The feature allows you to enroll multiple devices simultaneously, thereby eliminating the need to enroll each device individually. Devices enroll automatically upon first start-up to your chosen policy; all you need to do is turn them on.
Follow the instructions below or watch our how-to-video:
Yes, exporting devices is made possible via the Devices view.
Exporting devices is done via “Devices” view by selecting the “Download as CSV” option. Device related data is downloaded in CSV format upon commencement. Download location is asked by the system depending on the user’s browser settings.
Yes. The "Devices" view is used to perform bulk actions.
Bulk actions are selected by checking the "box"-icon in front of the desired devices or by choosing the "Select all"-option, which opens the "Actions"-menu. The following bulk actions are available:
Yes. Users can be required to enter their passwords as part of a policy.
You can configure device password quality, complexity, and lifespan settings for a policy using the "Policies" page's policy settings. The lifecycle and quality standards can be configured if requiring a password is enabled. Password scope can be set to the entire device, a specific device type, or a work profile.
Android Go devices are designed to give a great end-user experience with affordable hardware. Android (Go Edition) devices are expected to work in Fully Managed and Kiosk modes – however, this may vary depending on the manufacturer and model. Please confirm device-specific support from the device manufacturer.
Remote management (or “viewing”) function allows an administrator to access a user’s device via remote connection from HMD Enable Pro management console. It can be used for transparency in device management, e.g., supporting a device user in device-related problem solving, device setup or configuration, etc.
To open a connection to a device, an administrator needs to choose the device in question from HMD Enable Pro management console. Then, choose a “Remote connection” function from the available management options. When connection between the management console and the device is established, administrator is able to see the screen view of the device and choose actions from the range of management options.
Note: HMD Enable Pro Companion App must be installed in order to use Remote management function.
Support materials for HMD Enable Pro can be found in the platform's "Help and support" section as well as HMD Enable Pro support page.
To access User Guide and product Tutorial and Training videos, users need to navigate to "Help and support" section on the left-side menu on the platform and select Help & FAQ.
The same materials are also available on this Enable Pro support page.
Users must be added to an enterprise to access the HMD Enable Pro management platform.
To gain access to an enterprise, users must be added to it. New users can be invited to existing enterprises and will receive an invitation via email with a link to the EMM that will be active for 24 hours.
New users must accept the HMD Enable Pro Terms and Conditions as well as change their temporary password. Users with the role of Enterprise Owner (i.e., the primary system administrator) must approve Google's Managed Google Play agreement.
You can view all enterprises on the platform if you are an Enterprise Owner. Other user roles only have access to their own enterprise.
The user role assigned to you on the HMD Enable Pro platform determines whether you can see other enterprises besides your own.
Enterprise owners are able to manage all enterprises and users. Enterprise Admins, Users and Observers can only view the details of the enterprises they are assigned to (i.e. that they belong to). Enterprise Admins do not have access to view all enterprises and users.
Yes. Enterprise Owners and Enterprise Admins have the capability to invite users to the console as well as edit user details.
To invite new users, navigate to the "Users" section of the HMD Enable Pro platform and select "Invite Users."
HMD Enable Pro users have different rights and can perform different actions within the management console depending on the role assigned to them. For user management, the following user roles are available: Enterprise Owner, Enterprise Admin, Enterprise User and Observer.
Enterprise Owner is the most “powerful” user role. Enterprise Owners can manage all enterprises and users. Their responsibility includes system administration and device management. Enterprise owners have the following abilities:
Enterprise Admins can manage enterprise they belong to and its users; they do not have access to all enterprises and all users-views. Their responsibility includes enterprise administration and device management. Enterprise admins have the following abilities within their own enterprise:
Enterprise Users have access only to the enterprise they belong to, but unlike Enterprise Admins they have less management capabilities within it. Their responsibility includes device management. Enterprise users have the following abilities:
Users with Observer user role have viewer rights only. No actions (i.e. editing) are allowed. Observers have the following abilities:
Yes. A CSV file can be used to import users from Azure Active Directory ("AD").
In order to generate the correct CSV file, the export feature from AD needs to be used.
By using the "Import Users"-button on the user management page, the CSV file is added to the HMD Enable Pro console. Users are assigned to the chosen enterprise in the chosen user role in bulk.
Yes, software updates can be postponed by a maximum 30 days based on native Android Enterprise capabilities.
In addition, a range of Nokia smartphones in combination with Nokia OEMConfig app allows further postponement of software updates; for example, if a company needs more time for testing or due to a holiday period.
Policies can be created and managed in the Policies section of the HMD Enable Pro management console.
Policies are a collection of device and app management settings that control a device's behavior. Users can customise policies to suit a variety of device use cases with the range and flexibility of settings available e.g. to work as a customer-facing device restricted to predetermined applications and browsers.
A policy can be created and managed via the "Policies" section of the HMD Enable Pro management console. HMD Enable Pro support the main Android Enterprise management profiles: Fully Managed mode, Kiosk mode and Work profile.
All main Android Enterprise management profiles are supported by HMD Enable Pro. These include Fully Managed mode, Kiosk mode and Work Profile.
Fully Managed Mode is a management option designed specifically for company-owned devices. It gives IT admins full control over the policies, settings and applications of their company's devices.
Kiosk Mode enables companies to lock down their devices to a single app or a few predetermined applications for them to be used in specific employee or customer-facing functions. When Kiosk mode is enabled all other apps and functionalities are disabled and restricted from the user.
Work Profile enables the creation of two separate profiles on a single device: one for work and one for personal use. On the work side, the organisation has full control to install and configure apps, security policies, and data, while the device owner retains privacy over their own private apps and data. The use of Bring your own device (BYOD) devices for work purposes is made possible by this creation of two distinct profiles on one device.
Yes, company and personal data can be separated using the Work profile.
Using Work Profile on HMD Enable Pro, you can create separate profiles for your employees' personal and work items. Separate profiles ensure that your employees' confidential data and work data never get mixed up. Android 11, which is already available for several HMD smartphones, brings additional improvements to personal data privacy when Work Profile is used.
After setting up a personally owned device with a work profile, Android Device Policy automatically applies policy settings to the work profile only. This allows for the same policy to be applied to both devices with work profiles and fully managed devices.
After configuring a company-owned device with a work profile, Android Device Policy automatically applies most policy settings to the work profile only. While the personal profile protects user privacy, enterprises can impose specific restrictions and settings in the personal profile and across the entire device.
Yes, company-owned/private apps can be distributed using the Managed Google Play store.
Company-owned apps can be uploaded as private apps to the Managed Google Play store directly from the HMD Enable Pro management console. Once the app has been uploaded to the app store, it can be distributed to all the preferred devices. The private apps are not publicly available, as the Managed Google Play limits the visibility to your organisation only.
To upload a private app, an APK file needs to be added to the “Private apps”-section in the management console. Updating private app’s details on Google Play Console is done via “Make advanced edits”-option.
Only packages for which the user has upload and hosting privileges in Managed Google Play should be uploaded. APKs from third parties should not be uploaded unless an agreement authorising such action exists.
Company-owned/private applications must comply with the Google Play regulations.
The following criteria for the app must be met:
HMD Enable Pro distributes apps via Managed Google Play. The "Applications" section of the HMD Enable Pro management console is used to manage these applications.
Users can approve Google Play store applications for their organisation in this section. Furthermore, the organisation can also upload its own private applications for distribution, which will not be visible to the public.
Allowing or blocking apps is done during the policy creation process which can be found on the Policies page by selecting "Add new policy".
To enable full access to all applications in the Google Play Store, disable the setting. Applications can be blocked or allowed using the "allow apps" and "block apps" functions, depending on whether they should or should not be enabled for enterprise users.
Private applications and applications published in Google Play can be tested via Google Play Developer Console’s test tracks before going live.
HMD Enable Pro provides an option to take the application test tracks into use via Policy’s application setting.
To access the Developer Console for the private applications added via the Google Play iFrame, “Make advanced edits” selection needs to be chosen from the application details. Google instructions on enabling the test tracks can be found at: Set up an open, closed, or internal test - Play Console Help (google.com).
Along setting up the test track on the Google Play console, application settings need to be adjusted via a new or existing policy in EMM management console. Upon the deployment, the devices are updated with the test track APK version as per Google Play app update rules to be found at: Manage app updates - Managed Google Play Help.
The OEMConfig app enhances Android Enterprise based EMM solutions by providing additional management features.
The OEMConfig App (Original Equipment Manufacturer Configuration Application) serves as a valuable addition to any Android Enterprise based EMM solution. It allows for the deployment of device or OEM specific managed configurations as part of an EMM policy.
This means that equipment manufacturers now have the ability to provide administrators with enhanced management features, going beyond the native capabilities offered by Android Enterprise alone.
With the OEMConfig App, administrators can easily customize and configure devices to meet their specific needs. This includes a wide range of settings and features that can be tailored to suit different environments and use cases.
Nokia smartphone and tablet users benefit from additional management features through the OEMConfig app.
The OEMConfig app for Nokia phones App enables IT administrators to add additional Android management features for Nokia smartphones and tablets through a compatible EMM solution. These management features can be customised using the EMM solution via the Managed Google Play.
Organizations have the ability to install the OEMConfig app on their enrolled devices through the EMM solution.
Some of the available features include:
Block calling
The blocking and/or unblocking of incoming and outgoing calls can be configured using the block calling-function. Calls to the device are blocked if the function is enabled.
Data roaming on/off
Data roaming setting can be configured on/off for a single SIM card as well as for dual SIM cards. If the setting is on, it will allow the device to connect to networks other than the home network.
Mobile data on/off
The setting can be configured to control whether mobile data transfer is allowed.
Turn off location
Tracking device’s location can be enabled or disabled.
Turn on/off Wi-Fi scanning
The function allows apps and services to scan for Wi-Fi networks at any time, even when Wi-Fi is off. It can be used e.g., to improve location-based features and services.
Turn on/off Bluetooth scanning
The function allows apps and services to scan for nearby devices at any time, even when Bluetooth is off. It can be used e.g., to improve location-based features and services.
Low power/battery saver mode
The feature allows controlling whether low power/battery saver mode is active or not.
The OEMConfig app for Nokia phones works across all new Nokia devices which run Android 10 or later from the beginning of year 2021.
If your company uses devices from other manufacturers that use their own OEMConfig app, those devices are also fully compatible with the HMD Enable Pro.
Yes. We use the most recent Android™ technology to ensure that your device has an extremely high level of security.
With HMD Enable Pro, you have access to a variety of security features to ensure the safety of your devices and data, such as remote lock and remote data wipe. These features are designed to protect your organisation's devices and the data they access.
Yes, over-the-air commands are supported by HMD Enable Pro.
Over-the-air commands such as remote wipe, remote lock, and applying a new policy are all supported by HMD Enable Pro. The IT admins can also remotely install, configure and uninstall apps from company owned devices.
The following over-the-air commands are also available:
Yes, a device can be wiped and removed by going to the Device's details and selecting Actions - Wipe and Remove device.
The system asks confirmation before the action is performed. Performing the device wipe will remove all user data and apps from the device.
Yes, one of the security features made available by the HMD Enable Pro platform is device location tracking. This feature is accessible for corporate-owned Fully Managed and Kiosk mode devices, through the HMD Enable Pro companion app.
The location tracking feature displays the device's current location on a map. The minimum tracking interval is 15 minutes. The new 1.2.0 companion app will track the live location with more frequent intervals when the device is moving.
Note: Location tracking is not available for Work profile devices. You will need to make a separate policy for Work profile devices.
HMD Enable Pro uses Google Authenticator for two-factor authentication; the application is available via the Google Play Store or App Store.
Please instruct console users to download the Authenticator app on their device.
Users see the two-factor authentication prompt during the login and logged in users are directed to enable 2FA flow immediately. To complete the sign in process, users must scan the QR code generated with the Authenticator app (which must be installed before the set-up may be completed) and enter the code from the app.
If authentication is disabled and a user is no longer a part of any 2FA-enable enterprise (e.g., removed by an enterprise Owner/Admin), a user is again able to log in using only credentials.
Android Enterprise profile which gives IT admins full control over company-owned devices.
Fully Managed Mode is an Android Enterprise management mode designed specifically for company-owned devices i.e. those devices owned by the company and used exclusively for work purposes.
In Fully Managed Mode, IT administrators have complete control over the settings, usage, and applications of company-owned devices. This mode provides access to the full range of Android Enterprise policies, giving administrators the ability to control a wider range of device settings and apply additional policy controls that are not available in the work profile solution set.
With these fully managed features, administrators can ensure that the devices are used exclusively for work purposes and maintain a high level of security and control.
The full list of management policies available with Fully Managed Mode can be found here.
Kiosk Mode allows companies to lock down Android devices to a single app or to a few predetermined applications. This enables the device to be used in a variety of employee or customer-facing functions, such as a self-service kiosk. For example, a restaurant using self-service tablets might decide to prevent other apps or browsers from being used on their devices and limit access to just their own application.
When Kiosk mode is enabled, all other apps and functionalities are disabled, and the user's access is restricted. Limiting device functionality ensures that the device is only used for its intended purpose.
Work Profile enables the creation of two separate profiles on a single device: one for work and one for personal use. On the work side, the organisation has full control to install and configure apps, security policies, and data, while on the personal use side the device owner retains privacy over their own personal apps, data and usage.
This means that the organisation can only view and manage work related apps and data on the device - personal apps, usage details or data are not visible to the organisation. In this way the same device can be used for both work and private use without having to compromise on security or privacy.
The use of Bring your own device (BYOD) devices for work purposes is made possible by this creation of two distinct profiles on one device. Work profile notifications and icons of apps installed in a work profile are made distinguishable from personal apps.
Using Work Profiles is suitable for Bring Your Own Device (BYOD) and Company-owned devices enabled for personal use. The key features of Work Profile include:
Using Fully Managed Mode is suitable for corporate-owned, business use-only devices. Its key features include:
A full list of the available features in Fully Managed Mode can be found here.
HMD Enable Pro Integration API is a REST API used by third party clients to integrate with the HMD Enable Pro system.
A client can access devices, policies, and device groups of a specific enterprise from their own preferred system using Integration API. It also enables other services to get the location information and show it in an integrated system.
Integration API is not automatically enabled and needs to be configured for the customer deployment shall a customer wish to utilise it. Some HMD Enable Pro management functions can only be performed via the management console and not via the Integration API, e.g., creating a new policy.
The data can be received straight from HMD’s server by a customer for e.g., displaying it on the own website or console, as well as performing several basic actions on the devices.
Integration API enables a customer to:
Support for HMD Enable Pro is available through the management platform and the customer support team.
HMD offers HMD Enable Pro users help and user support via the HMD Enable Pro management platform. Customer support is provided via email to be sent directly to HMD Enable Pro development and support team at:
hmdenablesupport@hmdglobal.com (5*8 hours, in EET/Finland time zone)
The HMD Enable Pro solution is designed to provide a simple and user-friendly experience for operating and deploying.
HMD Enable Pro is designed with simplicity in mind, making it easy to operate and deploy. One of the key features is the management console, which guides users through the process of deploying their chosen policies. In addition, the console provides a clear overview of all the deployed devices, making it effortless to keep track of your device fleet.
We value our customers' feedback and closely collaborate with them to continuously improve the feature set while ensuring that the solution remains effective and user-friendly.
Yes, two-factor authentication for an enterprise can be enabled either during the enterprise creation process or by editing an existing enterprise.
All users which are a part of a 2FA-enabled enterprise are forced to use two-factor authentication on their subsequent log-ins. Upon turning the 2FA setting on, authentication is immediately enabled for all users with the assess to the enterprise.
HMD Enable Pro is a companion app that provides additional features for company owned Fully Managed and Kiosk mode devices such as location tracking and push notifications.
The HMD Enable Pro companion app enables IT Admins to send push-notifications and track the location of company owned Fully Managed and Kiosk mode devices on a map.
The app is distributed to your EMM enterprise as a private Google Play app. The distribution is handled in the background and all you need to do is turn on the companion app from a policy. The EMM system will handle the installation and take the users through the necessary steps.
The push-notification support will be available from Companion app version 1.2.0 onwards. Release expected on W10 2022.
Message option is disabled for devices that do not have the updated companion app installed.
Group messages can be sent, devices without updated version will not receive messages until update is installed.
Enabling HMD Enable Pro companion app and features
To enable installation of the Companion app and push-notifications, select the Install companion app on device enrolment option from the policy details or from the Create policy Wizard.
If you want to enable the location tracking, select the Enable location tracking option
Geofencing combines awareness of the user's current location with awareness of the user's proximity to locations that may be of interest.
A geofenced area can be added to policies (i.e. defined on policy level). It requires setting up a name, choosing a desired radius on the map tool, along with device action along and an action trigger. Geofenced area is restricted to a circle with adjustable radius from the map marker.
Geofencing is only available if the location setting for the Companion app is set to "Allow all the time".
Importantly, location services must be turned on. The companion app fetches updated geofences approximately once in an hour (provided that geofencing is enabled for the chosen policy). Therefore, it might take time for the new geofence configurations to reach the devices. In the event of a reboot, current geofences will be re-added. After the reboot, updated geofences are fetched based on the usual hourly schedule.
Currently, the function is limited to only one geofence per policy; however, the geofence may contain multiple actions. The limit for simultaneous geofences (i.e. geofence actions) per device is 100.
The minimum value for the radius is 50 metres.
As geofence handling relies heavily on network-based location to reduce power consumption, it is recommended to set up geofences that are no smaller than 100 metres in radius.
Triggered actions are assigned based on specific conditions being met.
The geofence feature can be triggered in three different ways: when entering an area, when leaving an area, or with a delayed trigger when remaining inside the area.
There are two actions that can be set up: send a message and lock device.
Actions to trigger when geofence is activated need to be added. The options for actions are the following:
Send a message
Entering a message title is optional, but it is mandatory to provide a message body.
Once the geofence event is triggered, a notification will appear on the device.
Notifications are displayed on a per geofence action basis. This means that if the same action is triggered while a previous notification is still visible on the device, the new notification will replace the existing one.
Notification content is based on the title and message configuration provided.
If the title is missing, an app name is used as a title (i.e. HMD Enable Pro).
Lock device
Are you experiencing an issue with the platform, or do you have an idea for a feature you'd like to see implemented? Choose the issue type from the drop-down box and fill in the form. Our team will be notified of the issue and take action as needed.