- To obtain an authentication certificate from OpenTrust PKI
- To set up access rights on OpenTrust PKI
- To configure the OpenTrust adapter
- To set the connection to the adapter
- To configure an iOS profile to deliver certificates to iOS devices
- To configure an OpenTrust adapter to use HTTP by using a self-signed certificate
- To configure Device Manager to generate identity certificates from OpenTrust adapter
- To activate logging on Device Manager for the adapter
To configure an iOS profile to deliver certificates to iOS devices
Dec 21, 2015
To deliver certificates to
iOS devices, you need to configure an iOS profile in Device Manager. For more
information on configuring PKI integration with Device Manager, see
About XenMobile PKI.
- Click the Policies tab.
- On the left side, under iOS, click Configurations.
- Create a new policy for the PKI authority that you installed by clicking .
- On the
General tab, enter the following information:
- Identifier. Enter a unique identifier to distinguish the certificate policy.
- Display name. Enter a name that will be used to lable the policy on the device.
- Organization. Enter your company name here.
- Descriptions. Type an optional description.
- In
Allow
profile removal operation, click on of the following options:
- Always: This option allows the profile to always be removable.
- Authentication: Allows you to enter a required password that is used when profile is removed. Requires a password
- Never: Prevents the profile from ever being removed.
- Select the Allows you to select a specific date check box to specify a date you want to remove the profile.
- Select the Duration until removal (in days) check box to enable you to set a period of time after which the profile will automatically be removed.
- Next, on the
Credential tab, enter the following information:
- Credential name. Provide a unique name for the credential.
- Description. Optionally, you can type a description for the credential.
- Credential Type. Select a credential type according to the PKI configuration you have set up for Device Manager, such as a certificate, a keystore, a server certifciate,or a credential provider.
- Credential file path, Server certificate, or Credential provider. Select the path or the name of the credential you are adding to the policy. If you are using a Keystore file, then you need to provider the keystore password.
- Click Create.