Managing Linux devices within an organization can be challenging without the right tools. Scalefusion’s Unified Endpoint Management (UEM) solution offers a comprehensive approach to managing Linux devices, making it easier for IT administrators to provision, secure, and monitor their Linux fleets. This guide will walk you through the process of creating Linux device profiles, setting up enrollment configurations, and enrolling Linux devices using Scalefusion UEM. 

Step 1: Creating Linux Device Profiles

Why Device Profiles?

Device profiles in Scalefusion allow IT administrators to group various policies together, making it easier to manage and apply consistent settings across multiple devices. This step is essential for organizing your Linux device management strategy.

How to Create a Linux Device Profile:

1. Sign into the Scalefusion Dashboard.
2. Navigate to Device Profiles & Policies and click on Device Profiles.
3. Click on Create Device Profile and select Linux in the profile creation wizard.

4. Enter a name for your profile and click Submit.

   

5. Configure policies such as:

   • Network Settings: Enable desired Wi-Fi configurations.
   • Restrictions: Apply settings like blocking USB devices.
   • Password Policy: Ensure secure passwords across devices.
6. Save the profile once configured.
    

Note: Blocking USB devices blocks the USB keyboards and mouse. Please use this helper script and follow this guide to deploy the script to allow these devices.

Step 2: Setting Up Enrollment Configurations for Linux Devices

Why Enrollment Configurations?

Enrollment configurations are necessary for setting up the initial parameters that devices will adhere to once enrolled. This step ensures that devices are properly configured from the start.

How to Set Up Enrollment Configurations:

1. Create a Device Group:

   • Create a New Group: Navigate to Groups > Device Groups, click on CREATE NEW GROUP, and select Create New Group from the dropdown. Enter a name for the group and click SUBMIT.

     

   • Assign Linux Profile: In the CHOOSE LINUX PROFILE section, select the Linux profile created in the previous step.
   • Finalize Group Creation: Click CREATE DEVICE GROUP to complete the setup.

2. Navigate to Enrollment Configurations: 

   • In the Scalefusion dashboard, click on Enrollment Configurations, then click on QR Code configurations, and then click Create Config. Alternatively, you can click the three dots menu on an existing configuration and select Edit.

3. Basic Configuration: In the configuration wizard, complete the Basic tab:

   • Name: Enter a descriptive name for the configuration.
   • Choose Enrollment Type: Select either Kiosk or Agent.
   • Choose Enrollment Method: Select Userless Enrollment.
   • Device Naming:
     
     • Enter a Prefix (optional).
     • Choose a naming convention (Serial No or Auto-incremented numbers are supported).
     • Enter a Suffix (optional).

     

4. Group/Profile Selection:

   • Select either a Group that already has a Linux profile associated with it, or select a Linux Profile directly.
   • Click Next > Next to skip the Device Configuration and Optional Settings tabs, as they do not apply to Linux devices.
   • Click Save to finalize the configuration.

5. Retrieve Enrollment URL: After saving, the configuration will appear in the list of configurations. Click on the Linux tab and copy the Enrollment URL.

   

   

   • Email: Send a copy of enrollment instructions to your email or additional emails.
   • Edit: Modify the configuration. Note that changes will not affect already enrolled devices.
   • Deactivate: Disable the configuration, preventing the Enrollment URL from being used.
   • Rotate: Generate a new Enrollment URL. The old URL will immediately stop working. Configuration Actions (Optional): You can click on the three dots menu on the right-hand side of a configuration to perform the following actions:

Step 3: Enroll Linux Devices

With the enrollment configuration ready, proceed to enroll your Linux devices.

1. Prepare the Device: Ensure curl and lsb-release packages are installed on the device if using a custom Linux version.

2. Open Terminal: Access the terminal on the device to be enrolled.

3. Install curl (if not already installed):
   bash
   

   Execute: sudo apt install curl

   

4. Execute Enrollment Command: Copy the Enrollment URL from the Scalefusion dashboard and
   bash
   run: curl -fsSL [Enrollment URL] | sudo bash
   replace [Enrollment URL] with the actual URL obtained earlier.

By following these steps, organizations can efficiently manage their Linux devices using Scalefusion UEM, ensuring consistent policy enforcement and streamlined device oversight.