Issuing Enrollment and User Certificates

About this task

To issue new certificates when the initially issued ones are about to expire:

Procedure

  1. Log into the CA server as the ADCS user. Alternatively, open MMC as a different user by holding down Shift and right-clicking mmc, then selecting Run as different user.
  2. Launch MMC and add the Certificates snap-in (User Account).
  3. Right-click Personal and select All Tasks > Request New Certificate.
  4. In the Certificate Enrollment wizard that launches, click Next and select the certificate that was derived from the Enrollment Agent template during the initial setup.
  5. Repeat the above steps to retrieve the Authentication certificate.
  6. Select More information… > Properties > Signature.
  7. Click Browse.
  8. In the Windows Security dialog box that opens, select the Enrollment Certificate generated in Step 4.
  9. Export both certificates with their private keys. Name the certificates properly for SOTI MobiControl configuration. One is the Enrollment certificate while the other one is the Client Authentication User certificate.

What to do next

Import the new certificates into your SOTI MobiControl instance. For procedure, see Adding Certificates.