Cortado Support

My Tickets Visit

Which enrollment method is right for my Android device?

Do you want to set up a work profile on your personal device or integrate a company device? In this article, we explain what setup methods for Cortado MDM are available for Android devices and what you need to consider when choosing the right enrollment method.


You will get an overview of the various setup methods for Cortado MDM and learn what the buzzword acronyms BYOD, COBO and COPE are all about.


Before your Android devices can be integrated into the corporate IT environment, you firstly have to clarify which setup method is going to be used. There are currently three methods available for Android devices. Selecting the correct method is dependent on the following factors:

  • Is it a private device? 
  • Or is the device company owned? 
  • If the device belongs to the company, it must also be determined if private use will also be permitted.


1. Bring Your Own Device (BYOD)

This setup method is used for private Android devices. You can set up a work profile on your private device.

There is a clear separation of the work area from the privately used area on your device. All apps that are a part of the work profile are managed by your company and are separated from your private accounts, apps and data. This clear division gives your company control over corporate data and corporate security without compromising your privacy.

The work profile is visually easy to distinguish from the private area. All business apps are identified by a briefcase icon. You can disable the work profile at any time. Additionally, you can decide yourself whether your device can be located or not.

2. Corporate Owned Business Only (COBO)

This setup method is used to integrate company owned devices that can only be used for business purposes.

Your company has full control over the device and can control it remotely. This means that apps can be installed and uninstalled, global policies implemented, the device located and, if required, reset to factory default settings. 

On fully managed devices, you can only install apps that your company has made available for you in a business PlayStore. It is not possible to install apps for private use.

3. Corporate Owned Personally Enabled (COPE)

This setup method is used to integrate company devices (Android 11 or later) that can be used for both business and private purposes. 

In a similar way to the first setup method, the device will be divided into a business and a private area. As with a private device, your company has full control over the apps, data and settings in a work profile. However, the personal profile on a company-owned device, including its apps, data and usage, is neither visible nor accessible to your company.

On a company-owned device, your firm can also enforce many cross-device policies (e.g. configuring WiFi settings, blocking USB file transfers) as well as restrictions that apply to the personal profile on a device (e.g. prohibiting certain apps). These additional management functions allow your company to ensure that company owned devices conform with IT policies while simultaneously preserving your privacy.

Did you find it helpful? Yes No

Send feedback
Sorry we couldn't be helpful. Help us improve this article with your feedback.