Device Agent Overview
The ConcertoGRC device agent reports device security posture, agent health, and policy evaluation results for compliance monitoring. This overview explains what the agent is, how it is deployed and enrolled, and where to find deployment, lifecycle, revoke, security, and troubleshooting guidance.
Deployment
Deploy the ConcertoGRC device agent to your fleet through MDM (Jamf Pro or Microsoft Intune) or self-serve manual install. Covers per-OS steps for macOS, Windows, and Linux, and how the deployment token is delivered at first run.
Token & Enrollment Lifecycle
How ConcertoGRC device agent deployment tokens and device enrollments work — token generation, enrollment caps and expiry, per-device rotating credentials, token rotation and lineage, and the difference between a token and an enrollment.
Revoke Semantics
What revoking a ConcertoGRC device agent token, token lineage, or enrolled device actually does — how each revoke path affects future enrollments versus already-enrolled devices, and how to respond to a suspected token compromise.
Security & Privacy Data Sheet
The full data sheet for the ConcertoGRC device agent — exactly what is and isn't collected, how data is transported and retained, and what rights employees have. Expands the in-app disclosure into a complete reference for privacy reviews and employee communication.
Troubleshooting
Diagnose and resolve common ConcertoGRC device agent problems — devices that don't enroll, enrollment cap and expiry blocks, missing heartbeats, stale posture, and devices that keep reporting after a token revoke.