diff --git a/android/src/main/java/com/tailscale/ipn/mdm/MDMSettings.kt b/android/src/main/java/com/tailscale/ipn/mdm/MDMSettings.kt
index 3364ceb..c843d90 100644
--- a/android/src/main/java/com/tailscale/ipn/mdm/MDMSettings.kt
+++ b/android/src/main/java/com/tailscale/ipn/mdm/MDMSettings.kt
@@ -59,6 +59,10 @@ object MDMSettings {
val postureChecking =
AlwaysNeverUserDecidesMDMSetting("PostureChecking", "Enable Posture Checking")
+ // Handled on the backend
+ val deviceSerialNumber =
+ StringMDMSetting("DeviceSerialNumber", "Serial number of the device that is running Tailscale")
+
val useTailscaleDNSSettings =
AlwaysNeverUserDecidesMDMSetting("UseTailscaleDNSSettings", "Use Tailscale DNS Settings")
diff --git a/android/src/main/res/values/strings.xml b/android/src/main/res/values/strings.xml
index c04baa8..723c4ba 100644
--- a/android/src/main/res/values/strings.xml
+++ b/android/src/main/res/values/strings.xml
@@ -205,6 +205,8 @@
Hides the specified categories of network devices from the devices list in the client.
Allow LAN access when using an exit node
Enable posture checking
+ Serial number of the device that is running Tailscale
+ Allows administrators to pass the serial number of the device to Tailscale client using MDM.
Use Tailscale DNS settings
Use Tailscale subnets
Allow incoming connections
diff --git a/android/src/main/res/xml/app_restrictions.xml b/android/src/main/res/xml/app_restrictions.xml
index 7f5549f..363bfc5 100644
--- a/android/src/main/res/xml/app_restrictions.xml
+++ b/android/src/main/res/xml/app_restrictions.xml
@@ -66,6 +66,12 @@
android:restrictionType="choice"
android:title="@string/enable_posture_checking" />
+
+