Entrust PKI as a Service

Configuring MDM IBM MaaS360 in PKIaaS

Configure a PKIaaS workflow to process MDM (Mobile Device Management) IBM MaaS360 enrollment requests with PKIaaS Certification Authorities.

To configure an MDM IBM MaaS360 workflow in PKIaaS:

  1. Follow the steps described in Accessing your partitions to log into the PKIaaS interface as a user with any of these roles:

  2. Click Enrollment Protocols in the sidebar.

    PNG

  3. Click Create.

  4. Configure the following values in the Create Protocol Config dialog.

    Field Value
    Type Select MDM IBM MaaS360
    Protocol Configuration Identifier Enter a unique identifier for the new configuration in your PKI. This identifier: Must be 2-18 characters long, can only include lowercase letters, numbers, hyphens (’-’), and underscores (’_’).
    Description Enter an optional description of the protocol purpose.
    CA Identifier Select an issuing subordinate authority with profiles of the mdmws group.

    PNG

  5. Click Create.

  6. In the confirmation window, select the Digital IDs tab.

    PNG

  7. Click CREATE.

  8. Configure the following values in the Digital identifier dialog.

    Field Value
    Digital ID Enter a unique name of the new digital identifier.
    Parent DN Enter the parent Distinguished Name (DN) for building the RDN of a certificate. This value is appended to the end of the Subject DN after the RDN Format variables have been processed.
    RDN Format Enter the Relative Distinguished Name (RDN) format to build certificate Subject Names.
    CA Identifier Select an issuing subordinate authority with profiles of the mdmws group.
    Profile ID Select the mdmws profile to process the enrollment requests.

    IMG

  9. Click Create.

  10. Copy the URLs under the Web Service URL and SCEP URL fields of the confirmation dialog.

    IMG

  11. Select the Credentials tab.

    IMG

  12. Click CREATE.

  13. In the Create MDM Credentials dialog, enter a username that is 2-18 characters long and only includes lowercase letters, numbers, hyphens (’-’), and underscores (’_’).

    IMG

  14. Click Create.

  15. Copy the Password value displayed in the confirmation dialog.

    IMG

    ⚠ As stated in the confirmation dialog before leaving this page, Entrust PKIaaS will not display the credential password again.