Within the Admin Portal, you can add a Machine Provisioning Key and a corresponding Machine Group. The Machine Provisioning Key is used to:

• Associate the Zscaler Client Connector with a Machine Group.
• Enable Machine Tunnels for Pre-Windows Login to gain access to internal applications even when the device's Zscaler Client Connector is not connected to Private Applications.

To add a new Machine Provisioning Key:

1. Go to Administration > Identity > Private Access > Machine Provisioning Keys.
2. Click Add Machine Provisioning Key.
3. In the Add Machine Provisioning Key window:

• 1. Signing Certificate

  The signing certificate is required for enrolling machines. You need to create a signing certificate before adding a new provisioning key.

  On the Signing Certificate tab:

  1. Select a signing certificate from the drop-down menu.
  2. You can click Clear Selection to remove any selections.

  See image.

  

  Close

  3. Click Next.

  Close
• 2. Machine Group

  On the Machine Group tab, choose one of the following options:

  • Choose an existing Machine Group
    1. Select an existing group from the drop-down menu. You can click Clear Selection to remove any selections.

    See image.

    

    Close

    2. Click Next.

    Close
  • Create a new Machine Group
    1. Click Create Machine Group.
       • Name: Enter a name for the group. The name cannot contain special characters, with the exception of periods (.), hyphens (-), and underscores ( _ ).
       • Description: (Optional) Enter a description for the group.
       • Status: Make sure Enabled is selected.

    See image.

    

    Close

    2. Click Next.

    Close

  Close
• 3. Create Machine Provisioning Key
  1. On the Create Machine Provisioning Key tab:
     • Name: Enter a name for the key. The name cannot contain special characters, with the exception of periods (.), hyphens (-), and underscores ( _ ).
     • Status: Make sure Enabled is selected.
     • Allow Re-Enrollment: Enable to allow for the re-enrollment of machines using the same machine provisioning key. This setting is disabled by default.

  See image.

  

  Close

  2. Click Next.

  Close
• 4. Review
  1. On the Review tab, review your configuration settings.

  See image.

  

  Close

  2. Click Save.

  Close
• 5. Provisioning Key Details
  1. On the Provisioning Key Details tab, copy the provisioning key. You can click the Copy icon to copy the key to your clipboard.

  See image.

  

  Close

  2. Click Done.

  Close