Entrust PKI as a Service

RDN Format

Enter the Relative Distinguished Name (RDN) format to build certificate Subject Names.

 Entrust PKIaaS will process only enrollment requests containing values for all variables.

Custom variable names

You can add custom variable names using the angle-bracket syntax - for example:

    CN=<var1> <var2> <var3> SampleStaticText

Mandatory variables

Every enrollment request must also provide values for the mandatory variables below.

Variable Value Format
deviceudid The unique identifier of the enrolling device Cannot contain a forward slash (/)
certificateconfigurationname A name identifying the certificate being issued to that device Cannot contain a forward slash (/)

Automated renewal

Add the profileid variable to support automated certificate renewal – for example:

CN=<var1> <profileid>

See RDN Variables to set the value of this variable in the Jamf portal.

Variables supplied by Jamf

These are legacy RDN variables that earlier versions of the MDM Web Service always required, and Jamf still supplies values for them automatically.

  • The igusername name of the device user.
  • The iggroup group of enrolled devices.
  • The devicetype enrolled device type.

For example:

CN=<igusername> <iggroup> <devicetype>
 You don’t need to configure these legacy variables in the Jamf portal.