Quick Overview

Serial Number Groups in zAccess allow administrators to group endpoint devices based on their BIOS or hardware serial numbers. This method of device identification is especially valuable in environments that require hardware-level trust and strict control over which physical devices can access sensitive resources.

How to Use This Feature in the UI

1. Navigate to Policy Configuration > Serial Number Groups.
2. Click ADD GROUP.
3. Enter a descriptive Group Name (e.g., “Executive Laptops” or “Finance Workstations”).
4. Add one or more valid BIOS or system serial numbers as reported by endpoint hardware (e.g., ABC123456789).
5. Click Save to finalize the group.
6. Ensure this group is referenced in a Ruleset to control which policies apply to the listed devices.

Concepts & Use Cases

• Hardware-Based Trust: Restrict access to company-issued or explicitly approved devices by serial number.
• Device Identity Assurance: Unlike MAC or IP addresses, serial numbers are more difficult to spoof, providing a stronger layer of endpoint validation.
• Department or Role Mapping: Group devices assigned to high-sensitivity roles (e.g., C-level staff) for access to elevated applications or data.
• Compliance Control: Enforce regulatory requirements by ensuring that only managed assets can reach sensitive systems.

Troubleshooting & FAQs

• Why isn’t a device matching the serial number group?
  Ensure the serial number is correctly captured and matches the value reported by the device’s hardware. Check for typos or format inconsistencies.
• Can I import serial numbers in bulk?
  Currently, entries are added manually via the UI. Bulk import support may depend on future enhancements.
• What if the device’s motherboard is replaced?
  The serial number will change unless manually re-assigned by IT. You’ll need to update the group accordingly.
• Can a device belong to multiple serial number groups?
  Yes, but grouping typically serves a binary inclusion purpose—use other attributes for more granular distinctions.