Support Tip: Encryption Issue with Some Android Devices such as Huawei Honor 8

The Intune team has received reports that some Android devices appear to be encrypted out of the box, even though the Company Portal app detects that the devices are not encrypted. Our investigation revealed that some Android device manufacturers are encrypting devices using methods outside of what is recommended by the Android Compatibility Definition document (section 9.9) published by Google. A specific device where we are consistently finding encryption errors in our testing is with the Huawei Honor 8. The Intune Company Portal app is correctly preventing these devices from accessing protected resources since the devices don’t meet Android and Intune guidelines.


To work around this, you will have to determine:

  1. If encryption is important to your device strategy.
  2. If encryption is important, then consider using Intune app protection policies as described here.


You can run a report within Intune to determine which devices are compliant. For more information about how to remediate devices that are in this state, visit

Comments (1)

  1. Nash Pherson says:

    The numbered list is a little confusing. Maybe something like this would work better:

    Organizations should determine how important encryption is to their mobile device strategy. If it is important and you must support Android devices that do not conform to Google and Intune guidelines, consider leveraging Intune app protection policies as a partial workaround.

Skip to main content