Product Documentation

Microsoft Certificate Services

Dec 21, 2015

XenMobile interfaces with Microsoft Certificate Services through its web enrollment interface. It only supports issuing new certificates through that interface (the equivalent of the GPKI sign capability).

Note: Microsoft certificates can only be revoked from the PKI if a Certificate Revocation List (CRL) was configured prior to issuing the certificates and OCSP was configured correctly.

To create a Microsoft CA PKI Entity in XenMobile , you must specify the base URL of the Certificate Services web interface. The connection between XenMobile and the Certificate Services web interface may optionally be secured using SSL client certificate authentication.

Note: This integration method is historical and limited. It will be migrated to the GPKI protocol in the future.