> ## Documentation Index
> Fetch the complete documentation index at: https://docs.getprimo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Employee guide & FAQ

> Install the Primo MDM agent on your device and find answers to common enrollment questions.

This guide walks you through installing the Primo MDM agent. The installation takes less than 2 minutes and requires no technical skills.

<Warning>
  You must have **administrator rights** on the device to complete the installation. If you do not, contact your IT team.
</Warning>

## Enroll your device

<Tabs>
  <Tab title="macOS">
    <Steps>
      <Step title="Access the enrollment page">
        * **From the invitation email:** open the email titled "Invite to join \<Company> on Primo" and click **Enroll my computer on Primo**.
        * **From a direct link:** open the link shared by your IT team — you'll land directly on the enrollment page.
      </Step>

      <Step title="Authenticate">
        Enter your professional email address (or personal email if you're new and don't have one yet), then enter the **6-digit verification code** sent to that address.
      </Step>

      <Step title="Select your device">
        After signing in, Primo will guide you through installation for your operating system.

        If a device is already assigned to you, select it and click **Enroll**. Otherwise, click **Deploy MDM on another device** and select your OS.
      </Step>

      <Step title="Download the enrollment profile">
        Download and open **primo-enrollment.mobileconfig**.

        > If the installer is blocked, go to **System Settings > Privacy & Security** and click **Open Anyway**.
      </Step>

      <Step title="Open Device Management">
        Open **System Settings > General > Device Management**.
      </Step>

      <Step title="Enroll the profile">
        Select the profile and click **Enroll**, then enter your administrator password.
      </Step>

      <Step title="Confirm enrollment">
        Once the agent is installed, you'll receive a confirmation email and your device will appear in the Primo cockpit.
      </Step>
    </Steps>
  </Tab>

  <Tab title="Windows">
    <Steps>
      <Step title="Access the enrollment page">
        * **From the invitation email:** open the email titled "Invite to join \<Company> on Primo" and click **Enroll my computer on Primo**.
        * **From a direct link:** open the link shared by your IT team — you'll land directly on the enrollment page.
      </Step>

      <Step title="Authenticate">
        Enter your professional email address (or personal email if you're new and don't have one yet), then enter the **6-digit verification code** sent to that address.
      </Step>

      <Step title="Select your device">
        After signing in, Primo will guide you through installation for your operating system.

        If a device is already assigned to you, select it and click **Enroll**. Otherwise, click **Deploy MDM on another device** and select your OS.
      </Step>

      <Step title="Run the installer">
        Double-click **primo-enrollment.msi**.
      </Step>

      <Step title="Approve the security prompt">
        Click **Yes** in the security prompt.
      </Step>

      <Step title="Confirm enrollment">
        Once the agent is installed, you'll receive a confirmation email and your device will appear in the Primo cockpit.
      </Step>
    </Steps>
  </Tab>

  <Tab title="Linux">
    <Steps>
      <Step title="Access the enrollment page">
        * **From the invitation email:** open the email titled "Invite to join \<Company> on Primo" and click **Enroll my computer on Primo**.
        * **From a direct link:** open the link shared by your IT team — you'll land directly on the enrollment page.
      </Step>

      <Step title="Authenticate">
        Enter your professional email address (or personal email if you're new and don't have one yet), then enter the **6-digit verification code** sent to that address.
      </Step>

      <Step title="Select your device">
        After signing in, Primo will guide you through installation for your operating system.

        If a device is already assigned to you, select it and click **Enroll**. Otherwise, click **Deploy MDM on another device** and select your OS.
      </Step>

      <Step title="Download the enrollment package">
        Download the enrollment package for your distribution.
      </Step>

      <Step title="Run the installer">
        Run the installer using your package manager or the provided shell script.
      </Step>

      <Step title="Confirm enrollment">
        Once the agent is installed, you'll receive a confirmation email and your device will appear in the Primo cockpit.
      </Step>
    </Steps>
  </Tab>

  <Tab title="iOS / iPadOS">
    <Steps>
      <Step title="Access the enrollment page">
        * **From the invitation email:** open the email titled "Invite to join \<Company> on Primo" and click **Enroll my computer on Primo**.
        * **From a direct link:** open the link shared by your IT team — you'll land directly on the enrollment page.
      </Step>

      <Step title="Authenticate">
        Enter your professional email address (or personal email if you're new and don't have one yet), then enter the **6-digit verification code** sent to that address.
      </Step>

      <Step title="Select your device">
        After signing in, Primo will guide you through installation for your operating system.

        If a device is already assigned to you, select it and click **Enroll**. Otherwise, click **Deploy MDM on another device** and select your OS.
      </Step>

      <Step title="Display the QR code">
        Click **Download** next to **iOS · iPhone** or **iPadOS · iPad**. A QR code appears.
      </Step>

      <Step title="Open the enrollment link on the device">
        Scan the QR code with the camera of your iPhone or iPad, or open the enrollment link in Safari on the device.
      </Step>

      <Step title="Sign in">
        If you are asked to sign in, sign in with your work account. This links the device to you.
      </Step>

      <Step title="Download the profile">
        Download the profile.
      </Step>

      <Step title="Install the profile">
        Open **Settings** on the device, tap **Profile Downloaded**, then tap **Install** and enter your passcode.

        > If **Profile Downloaded** does not appear, go to **Settings > General > VPN & Device Management** and select the profile there.
      </Step>

      <Step title="Confirm enrollment">
        Once the agent is installed, you'll receive a confirmation email and your device will appear in the Primo cockpit.
      </Step>
    </Steps>
  </Tab>

  <Tab title="Android">
    <Steps>
      <Step title="Access the enrollment page">
        * **From the invitation email:** open the email titled "Invite to join \<Company> on Primo" and click **Enroll my computer on Primo**.
        * **From a direct link:** open the link shared by your IT team — you'll land directly on the enrollment page.
      </Step>

      <Step title="Authenticate">
        Enter your professional email address (or personal email if you're new and don't have one yet), then enter the **6-digit verification code** sent to that address.
      </Step>

      <Step title="Select your device">
        After signing in, Primo will guide you through installation for your operating system.

        If a device is already assigned to you, select it and click **Enroll**. Otherwise, click **Deploy MDM on another device** and select your OS.
      </Step>

      <Step title="Choose an enrollment mode">
        Android offers two enrollment modes. Pick the one your IT team told you to use:

        * **Personal (work profile)** — for a personal device. Company apps and data stay in a separate work profile; your personal data stays private.
        * **Company-owned (fully managed)** — for a new or factory-reset company device. Primo manages the whole device.
      </Step>

      <Step title="Enroll a personal device">
        If you use **Personal (work profile)**:

        1. Open the **Personal (work profile)** enrollment link on your Android device, or scan the QR code shown next to it.
        2. Tap **Enroll** and follow the on-screen steps to create the work profile.
      </Step>

      <Step title="Enroll a company-owned device">
        If you use **Company-owned (fully managed)**:

        1. Open the **Company-owned (fully managed)** link on another device, such as a laptop or tablet. A provisioning QR code appears — keep it open.
        2. Factory-reset the Android device and power it on. Stop on the welcome screen.
        3. Tap the welcome screen 6 times to open the QR code scanner, then scan the provisioning QR code from step 1.
      </Step>

      <Step title="Confirm enrollment">
        Once the agent is installed, you'll receive a confirmation email and your device will appear in the Primo cockpit.
      </Step>
    </Steps>
  </Tab>
</Tabs>

***

## FAQ

### Will MDM slow down my device?

The Fleet agent is lightweight and designed for minimal performance impact. If you notice slowdowns after enrollment, contact your IT team.

### Can Primo see my personal files or browsing history?

No. The MDM does not access documents, browser history, messages, or personal app data. It only collects device metadata — OS version, installed app names, and compliance status.

### My device is asking me to change my password but won't let me

This is a known macOS issue that can occur after installing MDM on a device with an active password policy. Restart your Mac — the password change will work correctly after the reboot.

### My Mac says it's already managed by an MDM

Check whether the installed profile is named **Primo Enrollment** or **\<Company> Enrollment**. If so, the device may already be enrolled — confirm with your IT team.

If it's a different profile, ask your IT team for the procedure to remove the existing MDM before installing Primo.

### Why am I asked to sign in on my iPhone or iPad?

Your company links each iPhone and iPad to the person who enrolls it. Sign in with your work account, then download the profile. If your company requires two-factor authentication and you have not set it up yet, you are asked to set it up during this sign-in.

### I used my personal email — is that a problem?

No. Using your personal email for authentication has no impact on enrollment.

### The installer download is blocked by the browser

Allow the download in your browser's security settings, or ask your IT team for an alternative method.

### The enrollment page shows an error

Make sure you're using the correct email address and that your 6-digit code hasn't expired (codes are valid for 10 minutes). Request a new code if needed.

### The device doesn't appear in the cockpit after installation

Wait a few minutes — enrollment can take up to 5 minutes after the agent is installed. If the device still doesn't appear, contact your IT team.

### Who do I contact if something goes wrong?

Contact your IT team – Primo Support is only for company admins.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.