Open vs Authenticated Enrollment for Zebra Link-OS Printers

This article helps administrators choose the appropriate Zebra Link-OS Printer enrollment method before generating and sending enrollment instructions to a printer.

What this article covers

This article explains the operational and security differences between Open Enrollment and Authenticated Enrollment for Zebra Link-OS Printers in Hexnode UEM.

• Authentication behavior for each enrollment method
• User-assignment behavior
• Supported provisioning devices
• Pre-shared key requirements
• Enrollment-file handling
• Enrollment validation steps
• Common Zebra Printer enrollment issues

For detailed, end-to-end enrollment instructions, see Zebra Printer enrollment in Hexnode UEM.

Compare Zebra Printer enrollment methods

This table compares Open Enrollment and Authenticated Enrollment for Zebra Printers in Hexnode UEM, including authentication, supported provisioning devices, user assignment, and recommended use cases.

Note: Zebra Printer enrollment is supported on devices running Link-OS 5.0 or later.

Choose the right enrollment method

Use the following decision table before generating a Zebra Printer enrollment commands file.

This table helps administrators select Open Enrollment or Authenticated Enrollment based on their Zebra Printer provisioning requirements.

How Open Enrollment works

Open Enrollment allows an administrator to enroll a Zebra Printer without entering authentication credentials during the printer enrollment process.

Before generating the enrollment commands file, the administrator selects the following:

1. Open Enrollment as the authentication mode.
2. A Domain.
3. A default user from the selected domain.

Navigate to:

Enroll > Platform-Specific > Zebra Printer > Zebra Printer Enrollment

Then select Open Enrollment.

Result: Hexnode UEM generates an enrollment commands file associated with the selected domain and default user.

The enrollment commands file can be sent to the Zebra Printer using either of the following methods:

• An Android or iOS device paired with the printer through Bluetooth.
• A Windows device using Zebra Printer Setup Utility.

After the Zebra Printer receives the commands file, the printer restarts and enrolls in Hexnode UEM.

When to use Open Enrollment

Open Enrollment is appropriate when:

• A central IT team provisions printers before shipping them to sites.
• A warehouse or retail staging team enrolls multiple printers in a controlled environment.
• Printers are assigned to a shared operational user.
• A technician must enroll printers from an Android or iOS device.
• The organization does not require an authentication check during the printer-enrollment action.

Caution: Open Enrollment does not require credentials during the enrollment process. Limit access to the enrollment commands file and use Open Enrollment only in controlled provisioning workflows.

How Authenticated Enrollment works

Authenticated Enrollment creates a Zebra Printer enrollment workflow that uses one of the following enrollment request types:

• Local User
• Self Enrollment as Local User

Navigate to:

Enroll > Platform-Specific > Zebra Printer > Zebra Printer Enrollment

Then select Authenticated Enrollment and choose the required enrollment request type.

Result: Hexnode UEM generates an enrollment commands file for the selected authenticated enrollment workflow.

Authenticated Enrollment is completed from a Windows device using Zebra Printer Setup Utility. The administrator downloads the enrollment commands file, connects the Zebra Printer to the Windows device, configures printer connectivity, and sends the enrollment file to the printer.

When the Zebra Printer enrollment authentication method uses a pre-shared key, the administrator must update the downloaded enrollment commands file before sending it to the printer.

This table identifies the fields that administrators must validate in a Zebra Printer Authenticated Enrollment commands file when pre-shared key authentication is enabled.

Configure the pre-shared key in:

Enrollment Settings > Security > Zebra Printer enrollment authentication password

Result: The Zebra Printer receives the authenticated enrollment commands, restarts, and enrolls in Hexnode UEM.

When to use Authenticated Enrollment

Authenticated Enrollment is appropriate when:

• The organization requires an authentication-controlled printer onboarding process.
• The printer must be enrolled through a Local User or Self Enrollment workflow.
• The organization uses a pre-shared key to protect Zebra Printer enrollment.
• Printer enrollment is performed from an approved Windows-based provisioning workstation.
• The organization needs to limit the use of enrollment commands files outside the intended provisioning process.

Important: If the Zebra Printer enrollment authentication method uses a pre-shared key, the downloaded enrollment commands file must contain the correct username and pre-shared key before it is sent to the printer.

Prerequisites for both enrollment methods

Before enrolling a Zebra Printer, confirm the following requirements.

• The Zebra Printer runs Link-OS 5.0 or later.
• The Zebra Printer is powered on.
• The printer can be configured for wired or wireless network connectivity.
• The provisioning technician has access to the Hexnode UEM portal.
• Zebra Printer Setup Utility is available on the provisioning device.
• The printer can connect to the Hexnode UEM portal after receiving the enrollment commands.
• For Windows provisioning, the Zebra Printer can be connected through USB and detected by Zebra Printer Setup Utility.

Additional prerequisites for Open Enrollment

• Bluetooth is enabled on the Android or iOS device.
• The Android or iOS device is paired with the Zebra Printer.
• Zebra Printer Setup Utility is installed on the Android or iOS device.

Additional prerequisites for Authenticated Enrollment

• A Windows device is available.
• The required enrollment request type has been selected.
• The correct username is available.
• The pre-shared key is available when the organization uses pre-shared-key authentication.

Enrollment security considerations

This table compares the security considerations for Open Enrollment and Authenticated Enrollment of Zebra Printers.

Warning: Do not share Zebra Printer enrollment commands files through unsecured communication channels. Treat downloaded enrollment files as provisioning assets and provide them only to authorized administrators or technicians.

Validate Zebra Printer enrollment

After the enrollment commands file is sent to the Zebra Printer, validate enrollment from both the Hexnode UEM portal and the device.

1. Allow the Zebra Printer to restart after receiving the enrollment commands.

   Result: The printer applies the received configuration and attempts to communicate with Hexnode UEM.

2. Confirm that the Zebra Printer has network connectivity.

   Result: The printer can reach the Hexnode UEM portal and complete enrollment.

3. In the Hexnode UEM portal, navigate to Manage > Devices.

   Result: The enrolled Zebra Printer appears in the managed device list.

4. Open the Zebra Printer device details page.

   Result: The administrator can review device information, policies, remote actions, and Action History for the enrolled printer.

5. Apply a non-disruptive configuration or use a supported diagnostic action.

   Result: The administrator confirms that the enrolled printer can receive Hexnode UEM policies or actions.

Troubleshoot Zebra Printer enrollment

This table lists common Zebra Printer enrollment issues, probable causes, recommended resolutions, and validation steps.

Related documentation

• Zebra Printer enrollment in Hexnode
• Manage Zebra Printers