Manual device enrollment?

Zero Trust
1

We’d like to use Zero Trust Access to allow users to access servers via RDP from approved devices only.

Is there a way to manually approve device enrollments? We only want users to access from pre-approved devices, not from any other device.

We could use a certificate, but not sure how to tie this in to the enrollment and access policies (for RDP).

2

I’ll add that we looked at serial numbers (described in https://blog.cloudflare.com/zero-trust-with-managed-devices). However, some of our devices just return “System Serial Number” as the SN. I don’t see a way to restrict by Device ID.

3
  1. Zero Trust > My Team > Lists > Create manual list > List type > Device IDs

then

  1. Zero Trust > Settings > Device Posture > Add new > Unique client ID

then

  1. Zero Trust > Access > Applications > Configure > Policies > Configure > Require > Unique Client ID List > List of IDs from step 1.