Getting started

Enrol devices

Enrolment tokens, and how a device joins a client.

A device joins a client once, with that client's enrolment token. It then gets its own secret and reports every day. To deploy the agent, see Deploy the agent.

Only admins can create and revoke tokens. Staff can see the list.

The client's Enrolment tab has three parts:

  • Install Lodestar: the current installers and the one-line install commands.
  • Intune or JumpCloud: Download MDM profile.
  • Enrolment tokens: the client's tokens, and New enrolment token.

Create a token

Open the client, then the Enrolment tab.

Under Enrolment tokens, select New enrolment token.

Enter a Label, for example "Datto rollout October". Left blank, the token is labelled Enrolment token.

Set Expires after in days, or leave it blank for a token that never expires. The default is 30 days.

Select Create token, then Copy token. It cannot be shown again.

The dialog then shows how to deploy, for each platform and tool, with the token filled in. See Deploy the agent.

The token list shows each token's label, the start of the token, whether it is Active, Revoked or Expired, how many devices used it, and when.

Tokens made while adding a client are labelled after the way you chose to deploy, such as One-line install. Downloading an MDM profile creates its own token, labelled MDM profile and the date. See Intune or JumpCloud.

Revoke a token

Select Revoke beside the token. It happens straight away, with no confirmation, and cannot be undone.

Devices already enrolled with the token keep reporting. No device can enrol or re-enrol with it again.

Limits

  • An organisation can create up to 100 clients and 100 tokens an hour.
  • One token can enrol up to 1,000 devices in 10 minutes, and one network up to 600.
  • During the free trial, new devices stop enrolling at 50. See Sign up.
  • While Lodestar is paused, or before the trial has started, no new device can enrol.

The last two stop new devices only. A device that has enrolled in the client before can re-enrol with any of the client's valid tokens.

On this page