User Certificates

The User Certificates page lists the client certificates that are uploaded to the MobileIron Access administrative portal. The Default Client Certificate is created by default. The Default Client Certificate can be used as a reference certificate and cannot be deleted.

Figure 1. default Client certificate

Adding a certificate

Adding your own user certificate enables you to easily map fields from the certificate into federation responses generated by Access in Certificate based Single Sign-on. You can add a sample certificate used by your Tunnel VPN profile that is assigned to mobile applications that use cloud services federated with MobileIron Access.

Before you begin 

Verify that you have created a certificate of your choice using the default certificate as a reference.

Procedure 

  1. In MobileIron Access, go to Profile > User Certificates, click Add Certificate to import a User Certificate.
  2. Enter a Certificate Name.
  3. Under Upload Certificate, click Choose File and browse to select the appropriate PEM certificate.

  4. Click Add Certificate.

    The user certificate is added.

    Figure 2. user certificate

Actions you can take

You can take the following actions on a certificate:

  • : Click to view certificate details.
  • : Click to delete the certificate.
NOTE: You cannot delete a certificate that is configured in a federated pair for single sign-on. In order to remove a certificate, you must first edit and associate the certificate with another certificate (during enabling cert SSO). This disassociates the older certificate. You can then remove the older certificate.

User Certificate Details

The Client Certificate consists of Certificate Details and Fields available for SSO configuration. The Certificate Details lists the Issuer, Serial No, Validity and Version of the Certificate.

The Fields available for SSO configuration enable you to view and provide friendly names to fields populated in the User Certificate that you uploaded. These friendly names match the MiTra expression for a field used for SSO configuration.

Figure 3. client certificate