Generate the Company passcode
The Self-Service enrollment is an authenticated mass-enrollment method that enables users to enroll their Android, iOS, macOS, or Windows 10 & 11 devices to MDM.
To enroll a device through the enrollment website, the user enters the required credentials, including the Company passcode. The passcode is site-specific and used to assign the devices to the correct MDM site, the device management environment. Follow the instructions in this article to generate and manage these Company passcodes.
The Company passcode is an MDM site-specific twelve-character passcode consisting of numbers and lower- and upper-case letters. The passcode is required when users are enrolling their devices without the administrator's interaction. The Administrator can generate the Company passcode on the organization's MDM site and then share the passcode with device users.
- On the device management site, go to .
Results: You may also want to share the instructions for the self-service enrollment with them.
Regenerating or disabling the company passcode
On some occasions, you might need to regenerate the passcode. This could happen, for example, when the passcode has been incorrectly entered too many times, and it gets disabled to prevent misuse. In this case, the administrator receives a security alert notification about exceeding the failed attempts count, and they must regenerate the passcode to enable the self-service enrollment again. Administrators can monitor the failed attempts from the popup under the Self-service enrollment icon in the Infrastructure diagram.
You can also disable the Company passcode by selecting Disable-action under the Self-service enrollment dropdown or from the popup of the Self-service enrollment icon. However, disabling the Company passcode means that also the Self-service enrollment is disabled.