MDM deployment on Linux

Deploy the scanner on Linux with a managed configuration file and the .deb or .rpm package.

On Linux, the enrollment token is delivered in a small file the scanner reads at start.

Before you begin

An enrollment token.
The .deb or .rpm from the console’s Downloads page, or the pre-filled install.sh.

Write the managed file

Create /etc/surface/managed.conf with permissions 0600, one NAME=value per line:

SURFACE_ENROLLMENT_TOKEN=sae_xxxxxxxx.yyyyyyyyyyyyyyyy
SURFACE_USER_EMAIL=jane@example.com
SURFACE_USER_FULL_NAME="Jane Doe"

The same names work as environment variables on the service.

Install the package

sudo apt install ./SuperAlign-surface-{version}-linux-amd64.deb

sudo dnf install ./SuperAlign-surface-{version}-linux-amd64.rpm

Use dnf or yum, not rpm -i, so the WebKit runtime the tray app needs is installed too.

Verify

cat /etc/surface/managed.conf
systemctl status surface.service
sudo surface status

The laptop appears on Endpoints within one scan interval.

sudo apt remove surface     # or: sudo dnf remove surface

The package manager keeps /var/lib/surface. Remove it by hand for a full clean-up. Upgrades with apt or dnf never unenroll the laptop.