# US 12,217,076 B2 · Virtual device enrollment and management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,217,076 B2 - Document ID: US12217076B2 - Status: Granted - Kind: B2 - Application number: 17/644,873 - Filed: 2021-12-17 - Published: 2023-06-22 - Granted: 2025-02-04 - Earliest claimed: 2021-12-17 - Assignees: Omnissa, LLC - Applicants: Omnissa, LLC - Inventors: Chris Halstead; Jared Cook; Kevin B. Sheehan - Web page: https://patentgrep.com/patent/US12217076B2 ## CPC - G06F 9/45558: {Hypervisor-specific management and integration aspects} - G06F 21/44: Program or device authentication - G06F 21/602: {Providing cryptographic facilities or services} - G06F 21/73: by creating or determining hardware identification, e.g. serial numbers - G06F 2009/4557: {Distribution of virtual machine instances; Migration and load balancing} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Enrollment management for virtual devices is described. In some examples, an enrollment agent of a virtual device retrieves a serial number using an operating system command that identifies the serial number locally to the virtual device. A request to identify device records with the management service is transmitted along with the serial number. A management identifier is received for a device record that is associated with the serial number. A local device management parameter of the virtual device is set to specify the management identifier. An enrollment request is transmitted to the management service. ## Claims ### Claim 1 A method, comprising: retrieving, by an enrollment agent executed in a virtual device, a serial number of the virtual device using an operating system command that identifies the serial number locally to the virtual device; transmitting, by the enrollment agent to a management service, a request to identify device records with the management service, wherein transmitting the request comprises invoking an Application Programming Interface (API) of the management service using the serial number as a parameter and wherein the request is authenticated using management service credentials decrypted from an encrypted configuration file that is decrypted by the enrollment agent; receiving, by the enrollment agent, a management identifier of a device record that is associated with the serial number; setting, by the enrollment agent, a local device management parameter of the virtual device to specify the management identifier; and transmitting, from the virtual device to the management service, an enrollment request to enroll the virtual device with the management service. ### Claim 2 (depends on 1) The method according to claim 1, wherein the management service updates the device record rather than creating a new device record based at least in part on the local device management parameter of the virtual device specifying the management identifier. ### Claim 3 (depends on 1) The method according to claim 1, further comprising: retrieving, by the enrollment agent from the management service, at least one of: a latest version of a management agent that enforces compliance rules specified by the management service, and a latest version of the enrollment agent. ### Claim 4 (depends on 1) The method according to claim 1, wherein a management agent transmits the request to enroll the virtual device with the management service. ### Claim 5 (depends on 1) The method according to claim 1, wherein the enrollment agent comprises a wrapper that wraps a management agent. ### Claim 6 (depends on 1) The method according to claim 1, wherein the management identifier comprises at least one of a unique device identifier (UDID) or a universally unique identifier (UUID) created by the management service for the device record during a previous enrollment process. ### Claim 7 A non-transitory computer-readable medium embodying instructions executable by at least one computing device, the instructions, when executed, causing the at least one computing device to at least: retrieve, by an enrollment agent executed in a virtual device, a serial number of the virtual device using an operating system command that identifies the serial number locally to the virtual device; transmit, by the enrollment agent to a management service, a request to identify device records with the management service, wherein transmitting the request comprises invoking an Application Programming Interface (API) of the management service using the serial number as a parameter and wherein the request is authenticated using management service credentials decrypted from an encrypted configuration file that is decrypted by the enrollment agent; receive, by the enrollment agent, a management identifier of a device record that is associated with the serial number; set, by the enrollment agent, a local device management parameter of the virtual device to specify the management identifier; and transmit, from the virtual device to the management service, an enrollment request to enroll the virtual device with the management service. ### Claim 8 (depends on 7) The non-transitory computer-readable medium according to claim 7, wherein the management service updates the device record rather than creating a new device record based at least in part on the local device management parameter of the virtual device specifying the management identifier. ### Claim 9 (depends on 7) The non-transitory computer-readable medium according to claim 7, wherein the instructions, when executed, cause the at least one computing device to at least: retrieve, by the enrollment agent from the management service, at least one of: a latest version of a management agent that enforces compliance rules specified by the management service, and a latest version of the enrollment agent. ### Claim 10 (depends on 7) The non-transitory computer-readable medium according to claim 7, wherein a management agent transmits the request to enroll the virtual device with the management service. ### Claim 11 (depends on 7) The non-transitory computer-readable medium according to claim 7, wherein the enrollment agent comprises a wrapper that wraps a management agent. ### Claim 12 (depends on 7) The non-transitory computer-readable medium according to claim 7, wherein the management identifier comprises at least one of a unique device identifier (UDID) or a universally unique identifier (UUID) created by the management service for the device record during a previous enrollment process. ### Claim 13 A system, comprising: at least one computing device; and instructions accessible by the at least one computing device, wherein the instructions, when executed, cause the at least one computing device to at least: retrieve, by an enrollment agent executed in a virtual device, a serial number of the virtual device using an operating system command that identifies the serial number locally to the virtual device; transmit, by the enrollment agent to a management service, a request to identify device records with the management service, wherein transmitting the request comprises invoking an Application Programming Interface (API) of the management service using the serial number as a parameter and wherein the request is authenticated using management service credentials decrypted from an encrypted configuration file that is decrypted by the enrollment agent; receive, by the enrollment agent, a management identifier of a device record that is associated with the serial number; set, by the enrollment agent, a local device management parameter of the virtual device to specify the management identifier; and transmit, from the virtual device to the management service, an enrollment request to enroll the virtual device with the management service. ### Claim 14 (depends on 13) The system according to claim 13, wherein the management service updates the device record rather than creating a new device record based at least in part on the local device management parameter of the virtual device specifying the management identifier. ### Claim 15 (depends on 13) The system according to claim 13, wherein a management agent transmits the request to enroll the virtual device with the management service. ### Claim 16 (depends on 13) The system according to claim 13, wherein the enrollment agent comprises a wrapper that wraps a management agent. ### Claim 17 (depends on 13) The system according to claim 13, wherein the management identifier comprises at least one of a unique device identifier (UDID) or a universally unique identifier (UUID) created by the management service for the device record during a previous enrollment process.