Install a certificate using EST enrollment

Use EST enrollment to automatically obtain and install identity certificates on devices from a Certificate Authority (CA).

Before you begin

Note

Using EST enrollment establishes a direct connection between the managed device and the CA server. So be sure your device is connected to the CA server before beginning the enrollment process.

Note

EST's ability to auto-enroll a device when its certificate expires is not supported.

Follow these steps to install a certificate using EST enrollment:

Procedure

Step 1

On the Devices > Certificates screen, click Add to open the Add New Certificate dialog.

Step 2

Choose a device from the Device drop-down list.

Step 3

Associate a certificate enrollment object with this device in one of the following ways:

  • Choose the EST certificate enrollment object from the Cert Enrollment drop-down list.
  • Click (+), to add a new Certificate Enrollment Object, see Add certificate enrollment objects.

Step 4

Click Add to enroll the certificate on the device.

The Identity Certificate will go from InProgress to Available as the device obtains its identity certificate using EST from the specified CA. Sometimes, a manual refresh might be required to obtain the identity certificate.

Step 5

Click the magnifying glass to view the Identity Certificate created and installed on this device.