Ivanti requirements
You must meet the following requirements to automate MDM Ivanti enrollment with PKIaaS.
- PKIaaS account requirements
- Certificate authority requirements
- Operating system requirements
- TLS cipher requirements
PKIaaS account requirements
You need an Entrust PKIaaS account with privileges to create an issuing certificate authority.
Certificate authority requirements
Make sure you have a subordinate CA with a profile in the mdmws group. You can either:
- Create a new CA with this group, as explained in Creating an issuing subordinate authority.
- Add this group to an existing CA, as explained in Updating the profile list.
Operating system requirements
The team tested and validated enrollment integration for this release on the following operating system versions.
| OS | Version |
|---|---|
| iPad | 17.5.1 |
| iPhone | 17.5.1 |
| macOS | Ventura 13.5.1 |
| Windows | 10 |
| Android | 14 |
| ChromeOS | Not supported |
Other devices and operating systems listed in the MDM vendor support documents should work, but the team has not tested them.
TLS cipher requirements
Enrollment URLs support the following TLS ciphers.
- ECDHE-RSA-AES128-GCM-SHA256
- ECDHE-RSA-AES256-GCM-SHA384