Managing Certificates
You can install digital certificates on your devices using profiles. In addition to specific certificates, you can use SOTI MobiControl to generate new certificates based on Certificate Templates.
This section contains the following topics:
- Issuing Enrollment and User Certificates
- Adding Certificates
- Viewing the Digital Certificates on a Device
- Renewing a Digital Certificate
- Revoking a Digital Certificate from a Device
Certificate Authorities
SOTI MobiControl supports the following certificate authorities:
- Active Directory Certificate Services (ADCS)
- Entrust
- Generic SCEP
- Symantec
Note: Certificate Authorities reject identical subject names used for multiple devices
in the same group. Use unique macros for each device to successfully add
certificates.
Certificate Templates
Certificate templates can generate dynamic digital certificates that change for each user and device. Certificate templates can be based on:
- Enrollment User*
- Enrollment User Email Address*
- Device Name
- Device MAC Address
- Device Serial Number
- Device Platform
Note: * To use Enrollment User or Enrollment User Email Address most effectively, it's recommended that you enroll your devices with LDAP to use effectively.