The SMA000 series End Point Control (EPC) feature can enforce device posture checks based on Hardware IDs (also called Equipment IDs or Device IDs). When an EPC policy includes a Hardware ID check, only devices whose network adapter Hardware ID matches the allowed list can establish a VPN connection. This article explains how to find the Hardware ID on a Windows 11 device.
A hardware ID may be required when configuring or troubleshooting an EPC policy in the AMC that restricts VPN access based on the client device's network adapter identity. If a user receives an EPC failure indicating their device does not meet the Equipment ID requirement, use these steps to retrieve the correct ID and add it to the AMC allow list.
-for-EPC-on-Windows-11-kA1VN0000000IzX0AU-0EMVN00000TCRwd.jpg)
Important: The wmic command is deprecated in Windows 11 but still functional. The PowerShell method (Method 2) is preferred for long-term compatibility.
Once you have the Hardware ID, configure it in the SMA1000 AMC as follows:
Important: If the user has multiple network adapters (for example, both Wi-Fi and Ethernet), the EPC check evaluates the adapter actively used for the Internet connection at the time of VPN establishment. If the user switches adapters, the Hardware ID may change. Consider adding multiple Hardware IDs to the allow list if users connect from different adapters.
-for-EPC-on-Windows-11-kA1VN0000000IzX0AU-0EMVN00000TClth.jpg)