IP Library Granted Patent US 12,333,317
Granted Patent B2
US 12,333,317 · App. 18/335,632 · Granted Jun 17, 2025

Connected provisioning

Inventors: Kishore Krishnakumar (Atlanta, GA); Vijay Chari Narayan (Johns Creek, GA); Brooks Peppin (Colorado Springs, CO); Paul Adam Ryman (Sydney, AU); Rob Schlotman (Cumming, GA)
Assignee: Omnissa, LLC
G06F9/4451G06F8/63G06F9/4401G06F21/73G06F9/4411
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,333,317
App. No.
18/335,632
Granted
Jun 17, 2025
Kind
B2
Abstract

Disclosed are various embodiments for provisioning client devices. An enterprise credential can be obtained from a provisioning service. A client device can send an enrollment request to a management service specific to the enterprise associated with the client device. The management service can send an enrollment response to the client device. Then, the client device can receive a provisioning package from the management service. Next, the computing device can then be configured based upon the enrollment response.

Claims (46)

1. A system, comprising:

a computing device comprising a processor and a memory; and

machine-readable instructions stored in the memory that, when executed by the processor, cause the computing device to at least:

obtain an enterprise credential from a provisioning service, the enterprise credential being unique to an enterprise associated with the computing device with respect to another enterprise;

send an enrollment request to a management service specific to the enterprise to enroll the computing device with the management service, the enrollment request comprising at least the enterprise credential;

receive an enrollment response from the management service, the enrollment response comprising a first provisioning package (PPKG) file; and

configure a staging user account based at least in part on the first PPKG file.

2. The system of claim 1 , wherein the first PPKG file comprises at least one of an application installer for an application to be installed on the computing device or a configuration value for a configuration setting of the computing device.

3. The system of claim 1 , wherein the machine-readable instructions that cause the computing device to obtain an enterprise credential from a provisioning service, further cause the computing device to at least:

query a data store to search for a provisioning address associated with the provisioning service; and

contact the provisioning service located at the provisioning address to obtain the enterprise credential.

4. The system of claim 3 , wherein the machine-readable instructions that cause the computing device to contact the provisioning service, further cause the computing device to at least provide a device identifier to the provisioning service for authentication, the device identifier being unique to the computing device.

5. The system of claim 1 , wherein the enterprise credential comprises an enterprise identifier associated with the management service and a one-time authentication token.

6. The system of claim 5 , wherein the enrollment request further comprises the one-time authentication token and a device identifier unique to the computing device.

7. The system of claim 1 , wherein the machine-readable instructions further cause the computing device to at least:

receive, through the staging user account, a second PPKG file comprising one or more configuration settings; and

apply, using the staging user account, the second PPKG file to the computing device.

8. A method, comprising:

obtaining, by a computing device, an enterprise credential from a provisioning service, the enterprise credential being unique to an enterprise associated with the computing device with respect to another enterprise;

sending an enrollment request to a management service specific to the enterprise to enroll the computing device with the management service, the enrollment request comprising at least the enterprise credential;

receiving an enrollment response from the management service, the enrollment response comprising a first provisioning package (PPKG) file; and

configuring a staging user account based at least in part on the first PPKG file.

9. The method of claim 8 , wherein the first PPKG file comprises at least one of an application installer for an application to be installed on the computing device or a configuration value for a configuration setting of the computing device.

10. The method of claim 8 , further comprising:

querying a data store to search for a provisioning address associated with the provisioning service; and

contacting the provisioning service located at the provisioning address to obtain the enterprise credential.

11. The method of claim 10 , further comprising providing a device identifier to the provisioning service for authentication, the device identifier being unique to the computing device.

12. The method of claim 8 , wherein the enterprise credential comprises an enterprise identifier associated with the management service and a one-time authentication token.

13. The method of claim 12 , wherein the enrollment request further comprises the one-time authentication token and a device identifier unique to the computing device.

14. The method of claim 8 , further comprising:

receiving, through the staging user account, a second PPKG file comprising one or more configuration settings; and

applying, using the staging user account, the second PPKG file to the computing device.

15. A non-transitory, computer-readable medium, comprising machine-readable instructions stored in a memory of a computing device that, when executed by a processor of the computing device, cause the computing device to at least:

obtain an enterprise credential from a provisioning service, the enterprise credential being unique to an enterprise associated with the computing device with respect to another enterprise;

send an enrollment request to a management service specific to the enterprise to enroll the computing device with the management service, the enrollment request comprising at least the enterprise credential;

receive an enrollment response from the management service, the enrollment response comprising a first provisioning package (PPKG) file; and

configure a staging user account based at least in part on the first PPKG file.

16. The non-transitory, computer-readable medium of claim 15 , wherein the first PPKG file comprises at least one of an application installer for an application to be installed on the computing device or a configuration value for a configuration setting of the computing device.

17. The non-transitory, computer-readable medium of claim 15 , wherein the machine-readable instructions that cause the computing device to obtain an enterprise credential from a provisioning service, further cause the computing device to at least:

query a data store to search for a provisioning address associated with the provisioning service; and

contact the provisioning service located at the provisioning address to obtain the enterprise credential.

18. The non-transitory, computer-readable medium of claim 17 , wherein the machine-readable instructions that cause the computing device to contact the provisioning service, further cause the computing device to at least provide a device identifier to the provisioning service for authentication, the device identifier being unique to the computing device.

19. The non-transitory, computer-readable medium of claim 15 , wherein the enterprise credential comprises an enterprise identifier associated with the management service and a one-time authentication token, and wherein the enrollment request further comprises the one-time authentication token and a device identifier unique to the computing device.

20. The non-transitory, computer-readable medium of claim 15 , wherein the machine-readable instructions further cause the computing device to at least:

receive, through the staging user account, a second PPKG file comprising one or more configuration settings; and

apply, using the staging user account, the second PPKG file to the computing device.

Assignments (3)
PATENT ASSIGNMENT Recorded Aug 5, 2024
From: VMWARE LLC
To: OMNISSA, LLC
Reel/Frame 068327/0365 →
SECURITY INTEREST Recorded Jul 3, 2024
From: OMNISSA, LLC
To: UBS AG, STAMFORD BRANCH
Reel/Frame 068118/0004 →
CHANGE OF NAME Recorded Apr 15, 2024
From: VMWARE, INC.
To: VMWARE LLC
Reel/Frame 067102/0242 →