Category filter
Getting Started with Device Enrollment
Enrollment is the gate everything else depends on. Until a device is enrolled, it’s invisible to your policies, your compliance checks, and your remote actions — a device you can’t see is a device you can’t secure. This is the first phase of enterprise management for exactly that reason: it converts an unknown device into an authenticated, authorized one that only your organization can manage.
Hexnode supports enrollment across iOS, Android, Mac, Windows 10/11 (PCs and tablets), Apple TV, and Fire OS. Before enrolling any device, configure your enrollment settings on the server first — trying to enroll devices before this is like handing out office keys before the locks are installed.
Choosing your enrollment path
- iOS/Mac — requires an APNs certificate configured first; this is Apple’s mandatory handshake and cannot be skipped.
- Android — has the most enrollment flexibility of any platform Hexnode supports; the right method depends on whether devices are already in employees’ hands (Standard) or shipping out of the box (Zero-Touch, Samsung KME).
- Windows — the lowest-friction path. No separate certificate step required.
iOS Device Provisioning
Before enrolling an iOS device, you need to make sure that the APNs (Apple Push Notification service) certificate on your server is configured. Learn more about configuring APNs certificate from the link below.
After configuring the APNs, you can enroll your iOS devices in Hexnode UEM. Follow the below link to learn more about enrolling devices in Hexnode UEM.
The most preferred method of enrolling iOS devices is using Device Enrollment Program (DEP).
Enrolling Android devices
The Android phones and tablets can be enrolled using several methods. Get to know more about the different methods of enrolling Android devices by following the link below.
Enroll Windows Devices
Hexnode UEM supports enrollment of Windows 10/11 PCs and tablets. Hexnode Notifications app gets installed automatically on the Windows PC upon enrollment. Learn more about enrolling Windows devices in Hexnode UEM by following the link below.
macOS Device Enrollment
Before enrolling your Mac, you need to ensure that APNs certificate configuration has been accomplished. Hexnode UEM supports macOS devices with OS version 10.7 and later. The enrollment methods are quite similar to those of iOS devices. macOS devices can also be enrolled in Apple DEP. Get to know more on enrolling Mac devices in Hexnode UEM from the link below.
tvOS Device Enrollment
Hexnode UEM allows its users to enroll Apple TVs by using two methods: Apple Configurator enrollment and Apple Business Manager enrollment. An Apple TV with tvOS version 10.2 or higher can be enrolled via Hexnode UEM. Go through the link below to learn more about enrolling your Apple TVs.
Pre-Approved Enrollment
This is yet another enrollment method that enables the users to import the devices into Hexnode UEM, even before the enrollment process is completed. It involves bulk importing a list of devices. This allows the admins to apply restrictions and configurations even before the device is enrolled. Once the device is enrolled in Hexnode UEM, these policies get applied to the device.
Other than Windows and Android 10+ devices, all other devices can be enrolled via this method. Get to know more on pre-approved enrollment of devices in Hexnode UEM by tapping on the link below.
Self Enrollment
Users can enroll devices with their dedicated directory service credentials. Admin does not have to go through the hassle of sending enrollment requests to every user. Hexnode UEM supports self enrollment for AD, Microsoft Entra ID, Local, Google and Okta Users. Learn more on self enrollment from the following link.
Bulk Enrollment of devices
To enroll a huge number of devices using Hexnode UEM, bulk enrollment using CSV import is the best way to go. Get to know more on bulk enrollment from the link below.
