Virtual device enrollment and management
Enrollment management for virtual devices is described. In some examples, an enrollment agent of a virtual device retrieves a serial number using an operating system command that identifies the serial number locally to the virtual device. A request to identify device records with the management service is transmitted along with the serial number. A management identifier is received for a device record that is associated with the serial number. A local device management parameter of the virtual device is set to specify the management identifier. An enrollment request is transmitted to the management service.
1. A method, comprising:
retrieving, by an enrollment agent executed in a virtual device, a serial number of the virtual device using an operating system command that identifies the serial number locally to the virtual device;
transmitting, by the enrollment agent to a management service, a request to identify device records with the management service, wherein transmitting the request comprises invoking an Application Programming Interface (API) of the management service using the serial number as a parameter and wherein the request is authenticated using management service credentials decrypted from an encrypted configuration file that is decrypted by the enrollment agent;
receiving, by the enrollment agent, a management identifier of a device record that is associated with the serial number;
setting, by the enrollment agent, a local device management parameter of the virtual device to specify the management identifier; and
transmitting, from the virtual device to the management service, an enrollment request to enroll the virtual device with the management service.
2. The method according to claim 1 , wherein the management service updates the device record rather than creating a new device record based at least in part on the local device management parameter of the virtual device specifying the management identifier.
3. The method according to claim 1 , further comprising:
retrieving, by the enrollment agent from the management service, at least one of: a latest version of a management agent that enforces compliance rules specified by the management service, and a latest version of the enrollment agent.
4. The method according to claim 1 , wherein a management agent transmits the request to enroll the virtual device with the management service.
5. The method according to claim 1 , wherein the enrollment agent comprises a wrapper that wraps a management agent.
6. The method according to claim 1 , wherein the management identifier comprises at least one of a unique device identifier (UDID) or a universally unique identifier (UUID) created by the management service for the device record during a previous enrollment process.
7. A non-transitory computer-readable medium embodying instructions executable by at least one computing device, the instructions, when executed, causing the at least one computing device to at least:
retrieve, by an enrollment agent executed in a virtual device, a serial number of the virtual device using an operating system command that identifies the serial number locally to the virtual device;
transmit, by the enrollment agent to a management service, a request to identify device records with the management service, wherein transmitting the request comprises invoking an Application Programming Interface (API) of the management service using the serial number as a parameter and wherein the request is authenticated using management service credentials decrypted from an encrypted configuration file that is decrypted by the enrollment agent;
receive, by the enrollment agent, a management identifier of a device record that is associated with the serial number;
set, by the enrollment agent, a local device management parameter of the virtual device to specify the management identifier; and
transmit, from the virtual device to the management service, an enrollment request to enroll the virtual device with the management service.
8. The non-transitory computer-readable medium according to claim 7 , wherein the management service updates the device record rather than creating a new device record based at least in part on the local device management parameter of the virtual device specifying the management identifier.
9. The non-transitory computer-readable medium according to claim 7 , wherein the instructions, when executed, cause the at least one computing device to at least:
retrieve, by the enrollment agent from the management service, at least one of: a latest version of a management agent that enforces compliance rules specified by the management service, and a latest version of the enrollment agent.
10. The non-transitory computer-readable medium according to claim 7 , wherein a management agent transmits the request to enroll the virtual device with the management service.
11. The non-transitory computer-readable medium according to claim 7 , wherein the enrollment agent comprises a wrapper that wraps a management agent.
12. The non-transitory computer-readable medium according to claim 7 , wherein the management identifier comprises at least one of a unique device identifier (UDID) or a universally unique identifier (UUID) created by the management service for the device record during a previous enrollment process.
13. A system, comprising:
at least one computing device; and
instructions accessible by the at least one computing device, wherein the instructions, when executed, cause the at least one computing device to at least:
retrieve, by an enrollment agent executed in a virtual device, a serial number of the virtual device using an operating system command that identifies the serial number locally to the virtual device;
transmit, by the enrollment agent to a management service, a request to identify device records with the management service, wherein transmitting the request comprises invoking an Application Programming Interface (API) of the management service using the serial number as a parameter and wherein the request is authenticated using management service credentials decrypted from an encrypted configuration file that is decrypted by the enrollment agent;
receive, by the enrollment agent, a management identifier of a device record that is associated with the serial number;
set, by the enrollment agent, a local device management parameter of the virtual device to specify the management identifier; and
transmit, from the virtual device to the management service, an enrollment request to enroll the virtual device with the management service.
14. The system according to claim 13 , wherein the management service updates the device record rather than creating a new device record based at least in part on the local device management parameter of the virtual device specifying the management identifier.
15. The system according to claim 13 , wherein a management agent transmits the request to enroll the virtual device with the management service.
16. The system according to claim 13 , wherein the enrollment agent comprises a wrapper that wraps a management agent.
17. The system according to claim 13 , wherein the management identifier comprises at least one of a unique device identifier (UDID) or a universally unique identifier (UUID) created by the management service for the device record during a previous enrollment process.