Configuring client-provided certificate enrollment settings

Applicable derived credential providers and device platforms

Derived credential providers	Any
Device platforms	iOS, Android

A client-provided certificate enrollment setting is necessary for each of the purposes an app uses derived credentials. These purposes are authentication, signing, encryption, and, for iOS only, decryption. For each app using derived credentials, the app’s AppConnect app configuration (or Web@Work setting or Docs@Work setting) refers to this certificate enrollment setting.

Procedure

On the Admin Portal, go to Policies & Configs > Configurations.

Select Add New > Certificate Enrollment > Client-Provided.

Enter a name for the setting, such as Derived Credential Authentication.

Enter a description for the setting.

Select the purpose for the setting from the drop-down choices: Authentication, Decryption, Encryption, or Signing.

Decryption is only supported for iOS devices.

Select the appropriate derived credential provider from the drop-down choices.

This field is applicable only for iOS devices. It has no impact on Android devices.

If the selected derived credential provider is not available in Mobile@Work for iOS, the app becomes unauthorized.

Each app can use only one derived credential provider for each purpose.

Click Save.

Repeat these steps for each of the derived credential purposes your device users require.