Avalanche powered by Wavelink

Home 

Creating Enrollment Rules for Smart Devices

Enrollment rules allow smart devices to connect to the server and determine which folders the devices will be displayed in. An enrollment rule contains an ID, password, and the name of the folder that devices using the rule will be placed in.

To connect a smart device to Avalanche, the device user must provide the enrollment ID and password. When the device connects to the Avalanche server, it enrolls and is placed in the folder associated with the enrollment rule it used.

All of the enrollment rules for your enterprise are available at each folder of the Navigation Tree. As long as you have permissions for enrollment rules, you can create or edit an enrollment rule from any folder. However, when you deploy an enrollment rule, you must include the folder the rule is associated with in the deployment.

To create an enrollment rule:

1.Click the Enrollment tab. In the Enrollment Rules panel, click Add.

-Or-

In the Navigation Tree, select the region or folder you want to create a rule for and click View. On the Folder Details page, click Add in the Enrollment Rules panel.

The Enrollment Rule dialog box appears.

2.Type the enrollment ID, target folder that the rule is associated with, and password in the text boxes.

Each enrollment rule must have a unique ID. We recommend that enrollment rules use IDs that indicate the purpose of the enrollment rule.

3.Select your desired type of notification service.

4.If you want the device to display a End User License Agreement (EULA) to the device user, you can upload one of your own or modify the template provided by Ivanti. Click Download template to view the sample template, or click Browse to upload your own text file.

5.Click Save.

6.Perform a deployment to send the enrollment rule to the smart device servers.

When a device uses the enrollment rule, it appears in the folder's inventory and the smart device profiles applied to the folder will be applied on the device.

ClosedTypes of enrollment rules

There are two types of enrollment rules: reference and group.

Reference. A reference enrollment rule must be created at a region. A reference enrollment rule is not tied to a specific device server, so when a device uses the enrollment rule, it is placed in a folder relative to the device server that it connects to. For example, if the target folder associated with a reference rule is Staging, then any device using that enrollment rule is placed in a folder named Staging inside the region of the server that it connects to. If the region doesn't have a Staging folder, the folder is automatically created. Reference rules are especially useful if you are using the bulk enrollment feature. For additional information about bulk enrollment, see Connecting Android Devices to the Avalanche Server.

Group. A group enrollment rule must be created at a folder. A group enrollment rule is tied to a specific device server, and all devices using the rule will be placed in the same folder. If you change the folder associated with a rule, devices that have already enrolled are not affected.

Each enrollment rule sets the protocol used to communicate with the device. The protocols are specific to the type of Enabler you install. For more information about which protocol to use with enrollment rules, see Connecting Android Devices to the Avalanche Server.

If you upgraded to Avalanche 6.2, all existing enrollment rules were converted to ANS enrollment rules.

ClosedTypes of folder assignments

Each enrollment rule has a folder associated with it. When a device enrolls, it is put into the folder associated with the enrollment rule. The device may move or be moved, depending on the type of folder assignment that the server has configured.

If the server is using static device folder assignment: you have the option to move the device to a different folder after it is enrolled, but if the device re-enrolls, it is moved back to the folder associated with the enrollment rule.

If the server is using dynamic device folder assignment: when it syncs, the device is moved to the first folder that has matching selection criteria. The server evaluates the device during each sync.

Dynamic or static folder assignment is configured in the smart device server profile. For more information, see Creating and Configuring a Smart Device Server Profile.


Was this article useful?    

The topic was:

Inaccurate

Incomplete

Not what I expected

Other