MDM Deployment of Code Guardian

Mobile Device Management (MDM) deployment enables automated, silent rollouts of Code Guardian across enterprise-managed device fleets. Instead of manually distributing API keys to individual machines, MDM uses a single bootstrap token to securely enroll endpoints at scale and provision device-level credentials automatically.

Prerequisites

Before deploying Code Guardian through your Mobile Device Management (MDM) platform, verify that your environment meets the following administrative, system, and network requirements.
Requirement Details
Agent Identity Security Platform access Administrator access to generate a bootstrap token.
MDM administrator account Permissions to create and assign Win32 applications in your MDM platform.
Deployment packages
  • Invoke-BootstrapEnrollment.intunewin Agent Identity Security Code Guardian Windows package.
  • Detect-CodeGuardian.ps1 Deployment detection script.
Network connectivity Outbound HTTPS access to https://ais.appvx.com from each managed endpoint.
Bootstrap Token An active bootstrap token generated from the Agent Identity Security Platform.

Generate a Bootstrap Token

Generate a bootstrap token in the Agent Identity Security Platform to enable automated, silent device enrollment during MDM deployment. When Code Guardian installs on a managed endpoint, it uses the bootstrap token to authenticate the device and automatically provision a unique device-level API key without manual administrator intervention.
  1. Generate a Bootstrap Token in Agent Identity Security:

    The bootstrap token initializes Code Guardian during managed deployment. Each enrolled device automatically receives its own runtime API key once the bootstrap token is used.

  2. In Agent Identity Security, go to Settings > API Keys.
  3. Select Generate API Key, then choose Bootstrap Tokens.
  4. Enter a descriptive name (e.g., Microsoft Intune Rollout).
  5. Set the maximum number of API keys the token can generate (minimum 50).
  6. Set token expiry in days (range: 90–365 days).
  7. Select Generate Token and copy the token immediately.
    Important: Copy the bootstrap token before closing the dialog. Once dismissed, the value cannot be retrieved.