LaptopFirstProduct Guide
v2.0 · Aug 2026
Product Guide

Run your rental fleet, end to end.

A complete walkthrough of LaptopFirst — from enrolling and locking devices to customers, orders, billing and returns. It's organized exactly like the dashboard, so you can jump to any screen from the menu on the left.

Covers
Device management + full rental dashboard
Sign in
app.laptopfirst.in
Devices
macOS today · Windows rolling out
Layout
Mirrors the dashboard menu, top to bottom
Device Mgmt

Device Management

This is the Device Control page in the dashboard — its two tabs, Devices and MDM Settings. Enroll a Mac, then lock, alert, locate and manage it remotely. A live Live badge at the top of the page shows the dashboard is connected in real time.

Devices & remote actions

Device Control → Devices

Every enrolled device appears here. The four stat cards up top — Total Devices, Online, Alerts, Locked — give you the fleet at a glance. Click any row to expand a full console for that device.

Every command moves through these statuses
PendingQueued in the dashboard. Not sent anywhere yet.
DeliveredHanded off — for Apple commands, enqueued to the MDM service and a push sent to wake the Mac. Doesn't mean the Mac has run it yet.
CompletedThe device fetched the command, ran it, and confirmed success.
FailedThe device reported an error, or an agent command timed out after retries.
1
Find and open a device

Use the search bar (Search hostname, serial, model…) or filter by Status (Online, Offline, Alert, Locked, Pending) and OS. The list shows status, hostname, serial, OS, who it's assigned to, and last-seen time. Click a row — it expands into a console for that device.

✓
What you'll seeThe expanded console shows four panels: Device details, Hardware (model, chip, RAM, storage, disk encryption, battery, OS build, supervised), Location with a live map, and Recent pings. Device info loads automatically on first check-in — there's no info button to press.
2
Refresh — pull fresh status

In the console header, click Refresh. It fires two commands together (device info + security info).

Refresh — status sequence
PendingCommand queued.
DeliveredEnqueued to MDM, push sent to wake the Mac.
CompletedThe Mac woke, ran it, and returned fresh info.

Refresh doesn't show a live bar — it quietly checks for ~26 seconds. Open the Activity section (in the console) to watch the real status. If the Mac is asleep it can sit at Delivered — that's expected. Apple MDM commands don't expire; they complete whenever the Mac next checks in.

3
Lock — the core control, fully recoverable

On a Mac, click Lock → enter a 6-digit PIN → confirm. The Mac shows an OS-enforced lock screen that needs the PIN. Share the PIN with the customer when you're ready to unlock.

On Windows, Lock asks for a Lock Password and an optional Lock Screen Message instead. Every account on the device is switched to that password and the user is signed out until you unlock.

Lock — status sequence
PendingCommand queued.
DeliveredEnqueued to MDM, push sent.
CompletedThe device acknowledged and applied the lock.
✓
What you'll seeThe device locks to the PIN/password screen, and the Activity log shows Completed (not stuck on Delivered).

To reverse it: Unlock sends a remote unlock so the user can sign in without the password.

4
Alert — a fullscreen message without locking

If the agent is installed, an Alert button appears. Type a message (e.g. "Your rental payment is overdue. Please contact support.") and send. The device shows a fullscreen warning the user must wait 10 seconds to dismiss, then can keep working.

Alert runs over the agent's live connection, not Apple push — so it's much faster and is the one action with an instant progress toast.

5
The overflow (⋯) menu — everything else

macOS

  • Install / Reinstall Agent — pushes the agent via MDM (adds location, alerts, inventory).
  • Wipe device — erases all data and resets. Danger Irreversible; confirms first.
  • Retire device — a local flag that removes it from your active fleet. It does not send anything to the Mac; the profile keeps working and the device reappears if it re-enrolls.

Windows (agent)

  • BitLocker — Escrow key (capture the 48-digit recovery key), View recovery key, and Force BitLocker lock Danger (drive won't boot without the key).
  • Apply Windows lockdown — blocks unenrollment and hides Reset via native MDM.
  • Uninstall protection — Enable to require a rotating code to remove the agent, Show uninstall code (rotates every 30s), or Disable.
CarefulWipe and Force BitLocker lock are destructive escalations. Use Lock for day-to-day non-payment control — it's fully reversible.

MDM Settings

Device Control → MDM Settings

The setup cards for enrolling devices. Start with Enroll a Mac; the Apple Business Manager and Push Certificate cards are optional one-time setup that unlock the strongest enrollment path.

Connect Apple Business Manager Optional

Needed only for the zero-touch Supervised enrollment path below.

1
Link your Apple Business Manager
  1. Click Download Public Key.
  2. In Apple Business Manager: Settings → MDM Servers → Add, name it LaptopFirst, upload the key, then Download Token (a .p7m file).
  3. Upload that token back here → Upload Token & Connect.
✓
What you'll seeThe card shows a connected state with your organisation name and device count.

Apple Push Certificate Optional

Devices work fine on LaptopFirst's shared push certificate. This gives your organisation its own independent Apple push identity.

1
Generate your own push identity

Generate & download request → sign in at identity.apple.com/pushcert with your organisation's Apple ID → upload the request → upload the certificate Apple issues back into the card.

✓
What you'll seeThe card shows "Your own push certificate is active" with an expiry about a year out. Use Renew or replace certificate before it expires — click Renew at Apple to keep the same topic.

Enroll a Mac

Two paths — pick per device. No erase is the quickest way to get started.

1
No erase — install a profile + agent

Best for a Mac already in use — managed in minutes without wiping. Copy the enrollment URL from the card (unique to your account):

$ open https://mdm.laptopfirst.in/mdm/enroll?tenant_id=<your-account-id>
  1. On the Mac, open that URL in Safari → it downloads a .mobileconfig profile.
  2. System Settings → General → Device Management → double-click the profile → Install → enter the Mac's admin password.
  3. Run the agent-install command shown as step 2 of the same card, in Terminal.
✓
What you'll seeA "LaptopFirst Mite" profile appears under Device Management marked Verified — no red warning, no "Install anyway." It's signed with LaptopFirst's Apple Developer ID.
If you see"No provisioning key found — contact your admin": get a key from your LaptopFirst account rep, paste it in place of YOUR_KEY, then run the command.
2
Supervised — zero-touch via Apple Business Manager Strongest

The strongest enrollment: non-removable and it survives an erase. Requires the Mac to be in your organisation's Apple Business Manager, and a factory erase.

  1. Connect Apple Business Manager (card above) first.
  2. In Apple Business Manager → Devices → assign the Mac to the LaptopFirst MDM server.
  3. Erase the Mac. At Setup Assistant it shows Remote Management and enrolls automatically.
✓
What you'll seeThe Mac enrolls with no manual profile install, and the dashboard shows it as Supervised: Yes.

Windows Enrollment

Rolling out

Windows management is being validated end-to-end. Enrollment runs from the Windows Enrollment card with a single PowerShell command (run as Administrator), and once enrolled the same Lock, BitLocker and uninstall-protection controls above apply. We'll expand this section with full steps as the Windows rollout completes.

Uninstall the agent

Remove the agent from a device when a rental ends.

macOS — run in Terminal

$ sudo /Library/LaptopFirst/agent uninstall

Windows — run as Administrator in PowerShell

> & "C:\Program Files\LaptopFirst\mite.exe" uninstall

If uninstall protection is on, you'll need the current code from Show uninstall code in the device's ⋯ menu.

Device Management — quick recap
  • 01Enrolled a Mac (No-erase profile + agent, or Supervised via ABM), and it appears with device info loaded.
  • 02Refresh pulls fresh device + security info.
  • 03Lock locks the device to a PIN/password and reaches Completed; Unlock reverses it.
  • 04Alert shows a fullscreen message; BitLocker, lockdown and uninstall protection available on Windows.
Dashboard

Platform Dashboard

The rental operations side of LaptopFirst, in the order it appears in the left menu: Overview, the Customer Hub, the Subscription Engine, Device Inventory, and Config.

Overview

Dashboard

Your home screen at app.laptopfirst.in. Four stat cards plus quick actions and recent activity.

  • Total Revenue — from paid invoices
  • Total Devices — with rented / available split
  • Total Customers — registered count
  • Active Orders — current rentals
  • Quick Actions — New Order, Add Device, Add Customer, New Subscription, Create Invoice, Products
  • Recent Orders + Upcoming Returns — latest 5 of each, with "View all"

Customers

Customer Hub → Customers

Your customer directory with KYC status, lifetime value and outstanding receivables. Toggle between Active and Archived; bulk-select rows to update KYC, export or archive.

1
Add a customer

Click Add Customer and fill the form. You can also Import CSV to bulk-add, or Export CSV from the current view.

Fields ( * required )

Name of Organisation* POC* Phone* City* State* Email GSTIN / CIN PAN Credit Limit Address & Pincode Delivery address
✓
What you'll seeThe customer appears in the list with KYC status Pending. Each row has View, Edit and Archive actions, plus a WhatsApp link to the contact.
2
Search, sort, and bulk-manage

Search by organisation or contact, filter by KYC Status, and sort by newest, name, credit limit, outstanding, LTV or receivables. Select rows to Update KYC (Mark Verified / Pending / Rejected), Export, or Archive / Restore.

KYC & Verification

Customer Hub → KYC

Verify a customer's identity and business details before renting. Every check is tied to a customer and updates their KYC badge. Send a self-serve KYC link with Send KYC Link, or run a check yourself.

1
Run a verification

Pick a check from the quick-action cards, choose the customer, enter the document, and verify. Available checks:

  • PAN Verify — identity, name, DOB
  • GST Lookup — company, address, compliance
  • MCA / CIN — company, directors, capital
  • Aadhaar — OTP + captcha flow
  • Mobile → PAN — PAN from a number
  • PAN → GST — linked GSTINs
  • Bank — account name & validity
  • Credit Check — Soon
✓
What you'll seeThe result shows Verified (or a clear rejection reason) and the customer's KYC badge updates. Every verification is logged in the table with type, input, status and result.

Orders

Customer Hub → Orders

Rental orders — one order can hold several devices. The page has Orders and Returns tabs, and stat cards for Total Orders, Active Subscriptions, Devices Out and Total Revenue.

1
Create an order

Click Create Order, search and pick the customer (a credit-limit indicator warns if the order would exceed their limit), then set the details and add line items.

Per order

Customer* Start Date* Billing Cycle — Weekly / Monthly / Quarterly Payment Status Notes

Per line item

Product Quantity Rate (₹/day) Security Deposit Which devices (multi-select)
✓
What you'll seeThe order appears with the right amount and status, and each assigned device flips to Rented in Device Inventory. A matching subscription is created automatically.
2
Move an order through its lifecycle

Each row has a status dropdown that only offers the next valid step: Order Created → Device Delivered → Subscription Active → Subscription Closed / Device Returned (or Cancelled). Generate an Invoice from the row, or send a delivery note over WhatsApp.

Quotations

Customer Hub → Quotations

Send a customer a priced quote before it becomes an order.

1
Create and send a quote

Create Quotation → pick customer and product, set quantity, duration and rate/day. A live GST preview shows the CGST+SGST (or IGST) split and total. Add notes and terms, then save. From the row you can Download PDF, share on WhatsApp (auto-marks it Sent), or Convert to Order.

✓
What you'll seeQuote status moves Draft → Sent → Accepted. Converting picks an available device and creates the order in one step.

Returns & requests

Orders → Returns · Requests

Bring devices back, assess condition, and settle deposits — plus approve requests customers raise from their portal.

1
Schedule and process a return

Schedule Return from an active order. When the device comes back, Process it: set the actual date, pick a condition (Excellent → Poor), note any damage and charges, and the refund is calculated as deposit minus charges. Then Refund records the payout (UPI / Bank / Cheque / Cash).

✓
What you'll seeThe device flips back to Available in inventory and the subscription closes. Stat cards track On Time, Late/Overdue, Pending Refunds and Total Refunded.
2
Approve portal requests

Under Requests, customers' Return and Extension requests land for you to Approve or Reject with a note. Approving a return creates a return record; approving an extension moves the order's end date. The customer is notified either way.

Products

Customer Hub → Products

Your catalog of device models and their rates — this is what you pick from when adding devices, orders and quotes.

1
Add or edit a product

Add Product (or Edit from a row). Set the model, specs and pricing; Export CSV is available too. Click a row to view full details; the trash icon deactivates a model.

Product Name* Brand* Category* RAM* Storage* Processor* Weekly Rate* Monthly Rate* Security Deposit* Size Description

Subscriptions

Subscription Engine → Subscriptions

The recurring side of every order, grouped by customer. Stat cards cover Customers, Devices, Active, Expiring, Overdue and MRR (monthly recurring revenue).

  • Auto-created — every recurring order shows up here; there's no separate "create subscription" step
  • Edit — change each device's start/end dates and rate
  • Extend — add days; preview shows old → new end date
  • Cancel — closes it and creates a return record
  • Bulk actions — extend or cancel several at once
  • Filter pills — All, Active, Expiring, Overdue

Billing & Payments

Subscription Engine → Billing

Three tabs: Invoices, Recurring, and Revenue. Stat cards show Total, Paid, Pending, Overdue and Total Revenue.

1
Create and settle an invoice

Create Invoice → pick the order; a live preview shows the GST split (CGST+SGST for in-state, IGST for inter-state) and total. From a row: PDF to download, WhatsApp to send, Mark Paid (choose method and date), or Create Recurring to schedule it.

✓
What you'll seeThe PDF downloads with your invoice number sequence and the correct GST breakdown (HSN/SAC 997212), and the invoice can be marked Paid.

Recurring invoices

Billing → Recurring

Automate invoices that repeat.

  • New Schedule — from an order or an invoice
  • Cycles — Weekly to Yearly
  • Late fees — fixed or % with grace days
  • Line items — add extra charges to a schedule
  • Generate Due Invoices — creates all invoices due now
  • Pause / cancel — per schedule

Device Inventory

Device Intelligence → Device Inventory

Your physical fleet — every unit, its condition, location, and who it's rented to. (Live remote control lives in Device Management.) Stat cards: Total, Available, Rented, Maintenance.

1
Add, import and edit devices

Add Device for one (it checks the serial isn't already used), Import CSV for many, or Export CSV of the current view.

Product* Serial Number* Condition* Status* Location*

Picking a product auto-fills brand, RAM, storage and processor. CSV import needs product_name and serial_number at minimum.

2
Manage a device

Click any row to open its side panel. From there you can Edit its details, quick-assign a Location (saves instantly), or Retire it. The customer assignment is read-only — it comes from the active order. Filter by status, condition, brand or location, and sort nine ways.

✓
What you'll seeEach device shows its status badge, current customer and order (if rented), and its MDM state (Online / Enrolled) linking it to Device Management.

Settings

Config → Settings

Everything that shapes your account, invoices and team. Seven tabs:

  • Business Profile — company details + GST/PAN/HSN/SAC and rate
  • Payment Settings — bank, UPI, and Razorpay gateway
  • Locations — add/edit warehouses & branches, set a primary
  • Notifications — email / SMS / WhatsApp channels & alert types
  • Invoice Template — logo, number prefix, header colour, terms, signatory
  • User Management — invite team with Admin / Staff / Viewer roles Admin
  • Security — change password, session, data export
✓
What you'll seeChanges save and show up where expected — for example, updated branding and terms flow straight onto the next invoice.
Platform Dashboard — quick recap
  • 01Add a customer and verify their KYC.
  • 02Create an order (or convert a quotation) and the device flips to Rented.
  • 03A subscription appears automatically; generate an invoice with the correct GST and mark it paid.
  • 04Process the return, settle the deposit, and the device returns to Available.
  • 05Manage the fleet in Device Inventory and configure your business in Settings.