Troubleshooting
Check the device first with `clearscreen status`, then the Devices tab.
| Symptom | Cause and fix |
|---|---|
| Enrollment fails with an invalid key | The key was rotated or mistyped. Rotate it on the Enrollment tab and use the new key. |
| Enrollment fails with a device cap error | The workspace has reached its device cap (100 on Team, 250 on Business). Move to the next plan or write to us. |
| The device is not in the Devices tab | Run clearscreen status. The device must be enrolled and running. A device that fetches policy is listed as seen. |
| Last seen is old | The agent is stopped or the device is offline. Start it with clearscreen start. While offline it keeps filtering from the last verified bundle. |
| Linux shows a certificate warning instead of the block page | The block page certificate is not installed on Linux. The domain is still blocked. |
| A site is blocked that should be allowed | Add the bare hostname to the allowlist on the Policy tab and save. The allowlist overrides category blocks. |
| Buttons are disabled in the console | Your role is member. Ask a workspace admin. |
| An app or site is not filtered | Apps with their own DNS or DNS over HTTPS settings bypass the system resolver. On Windows only IPv4 DNS is set. |
| The audit download has few rows | The audit tab downloads the 25 most recent events. Use the export token for the full feed. |
For anything else write to hello@spot-suite.com and include the workspace address and the output of clearscreen status.