Entrust PKI as a Service

Adding an identity certificate in Ivanti Neurons MDM

Add an identity certificate in Ivanti Neurons to automate MDM enrollment.

To add an identity certificate in Ivanti Neurons:

  1. Log in to the Ivanti Neurons portal.

  2. Select Configurations in the navigation sidebar and click Add.

    IMG

  3. Click Identity certificate in the Add Configuration pane.

    IMG

  4. Enter a friendly name for the identity certificate in the Name field.

    IMG

  5. Select the following values under Configuration Setup.

    IMG

Certificate Distribution

Select Dynamically Generated.

Mandatory: Yes

Source

Select the certificate authority described in Adding a PKIaaS issuing CA to Ivanti Neurons MDM.

Mandatory: Yes

Profile ID

Select the same Profile ID value used to create a digital identifier in Configuring Ivanti in PKIaaS.

Mandatory: Yes

RDN Variables

Selecting a Profile ID adds a field for each RDN variable defined on the digital identifier. Enter a value in every field.

Every enrollment request must provide a value for the two variables below.

Name Value
deviceudid ${deviceGUID}
certificateconfigurationname The Name of this identity certificate configuration.

Mandatory: Yes

Profile description

Enter a description of the enrollment profile.

Mandatory: No

Application description

Enter a description of the intended application for the identity certificate.

Mandatory: No

Subject Alternative Name Type

Select a format for the Subject Alternative Name field in the enrolled certificates.

Mandatory: Select None if the enrolled certificates do not require a Subject Alternative Name field.

Subject Alternative Name Value

Enter a value for the Subject Alternative Name field in the enrolled certificates.

Mandatory: When selecting a value other than None in Subject Alternative Name Type.

Target Certificate Store

When enrolling Windows devices, select the store for installing the certificates.

Option Certificate store
Device Certificate The store of the local machine
User Certificate The store of the current user

Mandatory: When enrolling certificates for Windows devices.