This article covers the frequently asked questions about the enrollment behavior of HP Insights Windows Application.
What is ZTE?
A: ZTE stands for Zero Touch Enrollment, a feature used for bulk enrolling devices by their serial numbers into the HP Workforce Experience Platform. To import one or multiple devices, log into the HP Workforce Experience Platform and navigate to Devices > Pending Enrollment > Add > Auto Enrollment. Then, either upload a .csv file containing the serial numbers (using the provided template) or enter the serial numbers manually.
What is a CPIN?
A: CPIN stands for Company-wide PIN. To obtain the company-wide PIN:
Log into the HP Workforce Experience Platform and go to Settings > Preferences
HP Partners go to Customers > Companies > Company Details > Preferences
Note: The customer must accept the partner invitation before the company details are visible
Why there is a confirmation window prompt for domain matching on some machines but some not?
A: For silent enrollment, clients do not have an enrollment confirmation prompt, like bulk deployment HP Insights agent by SCCM (no matter if enrollment succeeded or failed). For manual enrollment, the domain-joined client will get the prompt window when a domain matching is failed.
Is there any difference between enrollment logic for legacy AD domain-joined, not domain-joined, and Azure AD joined devices?
Option 1. Device is enrolled using CPIN:
For AD domain-joined and Azure AD Joined Devices, enrollment logic follows domain matching whether it is silently enrolled or manually enrolled.
If a device is manually enrolled, the user will receive a prompt when a domain matching fails. If the user accepts the device will still get enrolled even if the domain is mismatched.
If a device is silently enrolled, enrollment fails silently if the domain is mismatched.
For non-domain joined devices, there is no domain matching and the enrollment should succeed.
Option 2: If a Device is enrolled using ZTE:
For AD domain-joined and Azure AD Joined Devices, enrollment logic does not check for domain matching as ZTEmode implicitly assumes serial number consent. ZTE enrollment will only succeed when the "Auto Enrollment" is configured when the target device's serial number is imported.
If a device is manually enrolled, the user will receive a prompt on a selection of Autoenroll which explicitly gets consent to make a ZTE Enrollment.
For non-domain joined devices, there is no domain matching and the enrollment should succeed.
For CPIN Based domain-joined devices, domain matching is mandatory, the device’s DNS suffix must be the same as the Domain Name in the HP Workforce Experience Platform portal "Company" configuration.
Which user will be the device owner when a domain-joined device is enrolled by a local/domain admin-privilege account before a normal user login without admin privilege?
A: The device becomes associated with the logged-in user only. it is similar to the case enrollment with SCCM to deploy using System Context; the device is registered with the currently logged-in user.
How does the fallback logic work when using CPIN or ZTE enrollment?
A: ZTE enrollment verification will be launched first. Second, it moves to CPIN verification if the previous step fails. If both fail, it will check if the device enables SmartSupport at BIOS (please refer to one's HP service representative for details). ZTE enrollment will only succeed when the "Auto Enrollment" is configured when the target device's serial number is imported (refer to the previous query on the Auto Enrollment configuration procedure).
How can one verify if the HP Insights agent is enrolled properly?
A: A confirmation window will appear when conducting a manual enrollment process. Device enrollment success will be displayed If the computer has been successfully enrolled. Otherwise, check the Windows System Tray to see if the HP Insights agent is enrolled.
What shall one do if the enrollment process fails?
A: Follow the HP Insights agent enrollment instructions with all prerequisites (valid subscription license, device has passed network assessment, registration with DNS Suffix, correct CPIN, etc.). Contact HP Support if the enrollment is still unsuccessful while the prerequisite is fine. To identify one's proper HP support contact, sign into the HP Workforce Experience Platform portal and view the Help and Support page.