Enrollment tokens

Cerberus Enterprise uses enrollment tokens to trigger the provisioning process. The enrollment token and provisioning method you use establishes a device's ownership (personally-owned or company-owned) and management mode (work profile or fully managed device).

To create a new enrollment token, go to "Enrollment tokens" section in the dashboard, then click the "New enrollment token" button.

Options

When creating a new enrollment token you can specify some parameters, that determines some aspects of the provisioning, depending on your needs.

Policy

Required field. This is the policy that will be automatically applied on all devices enrolled using the token. You can select one of the policy you created in your account. If you don't have any policy in your account, you must create one first.

User

The user that will be automatically associated to devices during provisioning.

Personal usage

Required field. Controls whether personal usage is allowed on a device provisioned with this enrollment token.

For company-owned devices: enabling personal usage allows the user to set up a work profile on the device. Disabling personal usage requires the user provision the device as a fully managed device.

For personally-owned devices: enabling personal usage allows the user to set up a work profile on the device. Disabling personal usage will prevent the device from provisioning.

Personal usage cannot be disabled on personally-owned device.

Duration

Required field. The length of time the enrollment token is valid, ranging from 1 minute to 30 days.

Allowed usages

Required field. Whether the enrollment token can be used mutliple times or one time only.

Provisioning options

These additional options are applied during the provisioning of fully managed devices enrolled scanning a QR code. They do not apply to work profiles or devices enrolled using other provisioning methods.

If you set a WiFi configuration, a device can automatically connect to the specified network without user interaction during device provisioning for downloading the mobile device management application.