Each endpoint agent authenticates with its own credential, readable only by SYSTEM on that PC. Agents from {{ target }} onward enroll themselves with the shared key they already hold; older agents move over by upgrading. Use Migration to move the fleet, and Credentials to approve requests, un-enroll a PC, and retire the shared key.
| Hostname | State | Agent version | Last reported | Blockers | |
|---|---|---|---|---|---|
| No computers match. | |||||
| {{ row.hostname || '-' }} | {{ stateLabel(row.state) }} | {{ row.agentversion || '-' }} | {{ formatDate(row.lastreportedat) }} | {{ (row.blockers || []).join(', ') || '-' }} Retry after fixing trust |
| Wave | Created | By | Size | Queued | Enrolled | Failed | Progress |
|---|---|---|---|---|---|---|---|
| No waves yet. | |||||||
| {{ wave.waveid }} | {{ formatDate(wave.createdat) }} | {{ wave.createdby || '-' }} | {{ wave.size }} | {{ wave.queued }} | {{ wave.enrolled }} | {{ wave.failed }} |
|
| Hostname | Serial | Device id | Reason | Status | Source | Last seen | |
|---|---|---|---|---|---|---|---|
| No enrollment requests. | |||||||
| {{ request.hostname }} | {{ request.serialnumber || '-' }} | {{ request.deviceid || '-' }} | {{ request.reason || '-' }} | {{ request.status }} | {{ request.sourceip || '-' }} | {{ formatDate(request.lastseenat) }} | |
|
The PC receives its credential the next time it asks: about a minute for one that started asking recently, slowing to 15 minutes once it has been pending a while. Only the PC that made this request can collect it. If the computer record has no hostname, approving records the one the PC reports, which it needs to authenticate afterwards. |
| Hostname | Serial | State | Credential | Issued | Last used | Via | |
|---|---|---|---|---|---|---|---|
| No computers match. | |||||||
| {{ row.hostname || '-' }} | {{ row.serialnumber || '-' }} | {{ stateLabel(row.state) }} Re-enroll blocked |
{{ row.credentialprefix }}...
-
|
{{ formatDate(row.issuedat) }} | {{ formatDate(row.lastusedat) }} | {{ row.enrolledvia || '-' }} | |
|
Un-enroll {{ revoking.hostname }}? Its credential stops working immediately. {{ revokeFallback }} |