Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This article answers common questions about Windows Autopilot device association.
General
Why did the CSV content for association change?
If you export the device information CSV multiple times, the exported information may look different because the DeviceLink contains metadata timestamps. This behavior is expected, and the device's hardware identity doesn't change.
A changed CSV doesn't invalidate an existing pre-association on its own. A pre-association is invalidated only when the device's hardware identity changes—for example, after you run a PowerShell script to remove association, reset the BIOS/UEFI settings, or change the Secure Boot configuration. After the identity is cleared on the device, you can export a new DeviceLink CSV and upload it to pre-associate the device again.
How do I get the DeviceLink CSV for a device that's already set up?
For existing devices that are past the out-of-box experience (OOBE), you can export the device information from the device's Autopilot diagnostic logs instead of using the OOBE Autopilot menu. On the device, go to Settings > Accounts > Access work or school, select Export your management logs under Related settings, and then retrieve the DeviceLink CSV from the exported diagnostics. You can also run MdmDiagnosticsTool.exe -area Autopilot -cab <path> from an elevated command prompt, or collect the diagnostics remotely from the Microsoft Intune admin center (Devices > select the device > Collect diagnostics). Upload the exported CSV in Intune to pre-associate the device. For more information, see Associate devices.
Do I need to upload corporate identifiers if my devices are pre-associated?
No. Pre-associated and associated devices are automatically marked as corporate-owned, so you don't need to upload corporate identifiers for them—even if you use enrollment restrictions to block personal device enrollments. Corporate identifiers and device association are two alternative ways to make sure only trusted devices are onboarded; you don't need both.
Can an OEM, reseller, or partner associate devices before shipment?
At this time, device uploads are only supported through Intune. In the future, OEMs and partners will also be able to pre-associate devices.
Are virtual machines supported for testing?
No. Device association requires a physical Windows 11 device with TPM 2.0 in a good state. This is the only way to guarantee that the device identity can be securely verified.