Use short-lived enrollment
Every installer is tenant-bound. Enrollment credentials expire and should be handled like temporary secrets. A location-specific package may preselect an allowed tenant location.
Operate the fleet
- Review heartbeat age and client version.
- Move a device only to a location in the same tenant.
- Revoke devices that are lost, retired, rebuilt, or unexpectedly duplicated.
- Pilot each client release before broad deployment and retain a rollback plan.