Android required app not installing silentlySolved

Hello @remy-parker ,

For Android Enterprise devices, Required App installations and app restrictions depend on specific policy configurations.

First, ensure the policy attached to the device does not block the app installation components required by Managed Google Play:

1. Navigate to Policies > Android > Restrictions > Advanced Restrictions > Allow App Settings.

2. Enable Install apps.

3. Enable Google Play Store.

4. Save the policy and associate it with the target devices.

If either Install apps or Google Play Store is disabled, Hexnode UEM and Managed Google Play cannot silently install required applications.

To prevent users from installing unauthorized apps, you can use either of these approaches:

• App allowlisting: Navigate to Policies > Android > App Management > Blocklist/Allowlist and allowlist only your required app and any essential system apps. This hides or blocks unapproved apps on supported Android Enterprise devices.

• Android Kiosk Mode: Navigate to Policies > Kiosk Lockdown > Android Kiosk Lockdown and configure a Single App or Multi-App Kiosk. This is the recommended approach if the device needs to be strictly locked down to a controlled app experienc

Regards,
Simon Scott
Hexnode UEM

The app was still not installing silently through the Required Apps policy. The device displayed a Hexnode notification stating the app needed to be downloaded. Tapping it opened Google Play, where I had to press “Install” manually. On other Android Enterprise setups, this same type of app installs by itself.

For a free Managed Google Play app deployed via a Required Apps policy, silent installation should execute automatically on Android Enterprise devices, provided the enrollment and Managed Google Play account setup are healthy.

If the device routes you to Google Play for manual installation verify the following:

• Confirm the device’s date, time, and time zone are strictly accurate.

• After correcting the system clock, re-initiate work profile creation (for Profile Owner) from the device’s Enrollment Details page in the portal.

• Ensure the policy applied during setup does not block account changes before the work profile or managed Google account finishes provisioning.

• If you are utilizing Android restrictions, ensure Modify Accounts/Users is allowed until provisioning completes.

An incorrect system clock breaks Google authentication and SSL/TLS validation during Managed Google Play account creation. When this happens, silent app installation fails and falls back to manual installation prompts.