Docs / Enrollment / Overview

Enrol Endpoint Wizard Overview

This guide provides an overview of the Enrol Endpoint wizard in ZEM Cloud, which is used to enrol new devices into the control plane.

Accessing the Wizard

  1. Log in to your ZEM Cloud dashboard
  2. Click the Enrol Endpoint button (green + icon) in the sidebar

Wizard Flow

The enrolment wizard guides you through the device enrolment process in a step-by-step manner.

Step 1: Choose Device Type

When the wizard opens, you'll be presented with two options:

  • Desktop - Enrol desktop or server endpoints (Linux, macOS, Windows)
  • Mobile / Tablet - Enrol mobile devices (iOS, Android)

Step 2: Choose Platform

Based on your device type selection, you'll see the available platforms.

Desktop Platforms:

  • Ubuntu / Debian - Bash agent with systemd
  • Arch Linux - Bash agent with systemd
  • Fedora - Bash agent with systemd
  • macOS - Bash agent with launchd
  • Windows - PowerShell agent with NSSM Windows Services

Mobile Platforms:

  • iOS / iPadOS - ZSync iOS with QR code or email invitation
  • Android - ZSync Android with QR code (Device Owner or Work Profile)

Step 3: Configure Enrolment Options

After selecting a platform, you'll configure enrolment settings.

For Desktop Endpoints:

  • Auto Reboot - Enable/disable automatic reboots after updates
  • Reboot Time - Set the scheduled reboot time (e.g., 03:00)
  • One-Liner Command - A ready-to-copy installation command is generated

For Mobile Devices:

  • Enrolment Mode - Choose between Device Owner (full control) or Work Profile (managed profile on personal device)
  • QR Code - Scan to enrol the device
  • Email Invitation - Send enrolment instructions via email

Step 4: Run the Installation

For Desktop Endpoints:

Copy the generated one-liner command and run it on the target device. The command will:

  1. Download the installation script from your ZEM Cloud server
  2. Install the ZEM Cloud agent and required dependencies
  3. Configure the agent with your server URL and API key
  4. Start the agent services

For Mobile Devices:

  1. Scan the QR code during device setup (Device Owner) or from within the ZSync app (Work Profile)
  2. Follow the on-screen prompts to complete enrolment

Desktop Agent Overview

The desktop agent is a lightweight background service that manages your endpoints.

What the Agent Does

Reports Device Status - Sends regular heartbeats and telemetry to ZEM Cloud:

  • CPU, memory, disk, and network usage
  • Operating system and version information
  • Installed packages and available updates
  • User accounts and logged-in users

Manages Updates - Detects and optionally installs system updates:

  • Tracks pending updates count
  • Supports automatic update installation
  • Handles reboot scheduling after updates

Executes Remote Actions - Processes commands from the action queue:

  • Reboot and shutdown
  • User management (add, remove, lock, unlock, logout)
  • Settings updates
  • Timezone changes

Self-Updates - Automatically updates to newer agent versions:

  • Downloads verified updates from ZEM Cloud
  • Validates checksums before applying
  • Restarts services after update

Agent Components

Component | Purpose | Interval
Main Agent | Process updates and actions | 60 seconds
Reporter | Send status telemetry | 60 seconds
Telemetry | Real-time resource monitoring | 5 seconds
Hardware Info | Collect hardware details | 30 minutes

Agent File Locations

Linux (Ubuntu, Arch, Fedora):

/usr/local/bin/zen-update-*.sh     # Agent scripts
/etc/zen-update/agent.conf          # Configuration
/var/log/zen-update-agent.log       # Logs
/etc/systemd/system/zen-update-*    # Service files

macOS:

/usr/local/bin/zen-update-*-macos.sh              # Agent scripts
/Library/Application Support/ZenUpdate/agent.conf  # Configuration
/var/log/zen-update-agent.log                      # Logs
/Library/LaunchDaemons/com.zeniar.zen-update-*     # LaunchDaemons

Windows:

C:\Program Files\ZenUpdate\zen-update-*.ps1    # Agent scripts
C:\ProgramData\ZenUpdate\agent.conf            # Configuration
C:\ProgramData\ZenUpdate\logs\*.log            # Logs

Post-Enrolment

After successful enrolment, the device will:

  1. Appear in the Endpoint Overview dashboard within 60 seconds
  2. Show status indicators (online/offline, update status)
  3. Be available for remote management actions
  4. Begin reporting telemetry data

Troubleshooting

Device Not Appearing

Verify the agent is running:

  • Linux: `systemctl status zen-update-agent`
  • macOS: `launchctl list | grep zeniar`
  • Windows: `Get-Service ZenUpdateAgent`

Also check:

  • Network connectivity to your ZEM Cloud server
  • Agent logs for errors

Enrolment Command Fails

  • Ensure you have root/administrator privileges
  • Verify the ZEM Cloud server is accessible
  • Check that the API key is valid and not expired