---
title: Enrolling a Device
description: Enrolling a Device
---
[Skip to content](https://portal.sandgrain.eu/knowledge-base/enrolling-a-device#main-content)
English
Show submenu for translations
.png?width=427&height=83&name=SandGrain_Logo_RGB_white-bijgesneden%20(1).png)
Open main navigation
Close main navigation
- English
Show submenu for translations
- [Contact us](https://portal.sandgrain.eu/login)
[Contact us](https://portal.sandgrain.eu/login?hsLang=en)
How can we help you?
- There are no suggestions because the search field is empty.
1. [Knowledge Base](https://portal.sandgrain.eu/knowledge-base?hsLang=en)
2. [User Documentation](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en)
3. [TrustBridge](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#trustbridge)
October 6, 2026
# Enrolling a Device
**Who this is for:** Administrators registering a single device and running its first authentication.
**What you'll accomplish:** Register a device, run its first mutual authentication, and move it into the active lifecycle.
> **Before you begin:** Set up Categories, Sub-Categories, Tags, and a Device Profile first (see [*Organizing Devices*](https://portal.sandgrain.eu/knowledge-base/organizing-devices-categories-sub-categories-tags?hsLang=en) and [*Device Profiles & Groups*](https://portal.sandgrain.eu/knowledge-base/device-profiles-groups?hsLang=en)). You'll also need the device's **TID**, which you read from the chip using device menu option `0` (BIST).
### Register the device
1. Navigate to the **Device Enrollment** tab under **Devices** in the sidebar.
2. Click **Register Device**.
3. Enter the details and click **Register Device**.
> ****
>
> The Device Enrollment tab with the register button.
> ****
>
> The Register Device dialog.
### The first mutual authentication
The added device now appears, and the **first mutual authentication flow begins** automatically. Click the **eye icon** under the Actions column to watch the authentication flow.
> ****
>
> The newly added device in the list.
> ****
>
> ****
>
> The mutual authentication flow in progress.
On success, the device moves to the **Claimed Devices** tab.
### Move to the active lifecycle
To move a claimed device into active use, click **Move to Lifecycle**.
> ****
>
> The Move to Lifecycle action.
A popup describes the process. Click **Start Lifecycle Auth** to continue: this starts the **second** authentication flow.
> ****
>
> The Move to Lifecycle confirmation popup.
> ****
>
> ****
>
> The second authentication flow.
On success, the device moves to the **Active Devices** tab.
> ****
>
> The device now shown under Active Devices.
For what each tab means and how the status machine works, see [*Device & Token Lifecycles*](https://portal.sandgrain.eu/knowledge-base/device-token-lifecycles?hsLang=en). To enroll many devices at once, see [*Bulk Device Import & Offline Authentication*](https://portal.sandgrain.eu/knowledge-base/bulk-device-import-offline-authentication?hsLang=en).
---
*Related articles: [Device Profiles & Groups](https://portal.sandgrain.eu/knowledge-base/device-profiles-groups?hsLang=en) · [Bulk Device Import & Offline Authentication](https://portal.sandgrain.eu/knowledge-base/bulk-device-import-offline-authentication?hsLang=en) · [Token Lifecycle Management](https://portal.sandgrain.eu/knowledge-base/token-lifecycle-management-operational-runbook?hsLang=en) · [Device & Token Lifecycles](https://portal.sandgrain.eu/knowledge-base/device-token-lifecycles?hsLang=en) · [Key Concepts & Glossary](https://portal.sandgrain.eu/knowledge-base/key-concepts-glossary?hsLang=en)*
- [User Documentation](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#main-content)
- [Quick Starter Guide](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#quick-starter-guide)
- [User Manual](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#user-manual)
- [Whitepaper](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#whitepaper)
- [Token Leaflet](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#token-leaflet)
- [Claim Token Procedure](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#claim-token-procedure)
- [Daisy Chain](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#daisy-chain)
- [Release Note](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#release-note)
- [Naming Convention](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#naming-convention)
- [SandGrain SDK](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#sandgrain-sdk)
- [TrustBridge](https://portal.sandgrain.eu/knowledge-base/user-documentation?hsLang=en#trustbridge)
- [API Documentation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#main-content)
- [Device API Integration](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#device-api-integration)
- [Daisy Chain and Attestation](https://portal.sandgrain.eu/knowledge-base/api-documentation?hsLang=en#daisy-chain-and-attestation)
- [SDK](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#main-content)
- [Core Functions](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#core-functions)
- [SandGrain SDK](https://portal.sandgrain.eu/knowledge-base/sdk?hsLang=en#sandgrain-sdk)
[-1.png?width=427&height=83&name=SandGrain_Logo_RGB_white-bijgesneden%20(1)-1.png "SandGrain_Logo_RGB_white-bijgesneden (1)-1")](https://portal.sandgrain.eu/?hsLang=en)
[mailto:email@email.com](mailto:email@email.com)
Copyright © 2026, sandgrain.eu