Adding a SCEP profile for MDM automation in VMware Workspace ONE
See below for creating an MDM automation profile to issue certificates with the SCEP protocol.
To add a SCEP profile in Workspace One
In Workspace One, navigate to Resources > Profiles & Baselines > Profiles.
In the content pane, click Add > Add Profile.
Follow the wizard pages described below.
Add Profile
Click on the name of the platform running the enrollment device.
Select Device Type
Click on the type of enrolled device.
Select Context
Click on User Profile to enroll users or Device Profile to enroll devices.
General
Click General in the sidebar menu to configure the following settings in the content pane.
Field |
Value |
Name |
Enter a name for the profile. |
Smart Group |
Select the smart group containing the managed users or devices. |
Credentials
Click Credentials in the sidebar menu to configure the user credentials.
Field |
Value |
Credential Source |
Select Defined Certificate Authority. |
Certificate |
Upload separately the certificates of the root and issuing CAs. |
Certificate Store |
Select Personal or Intermediate for profiles with the User Profile context. Select Trusted Root for profiles with the User Device context. |
SCEP
Click SCEP in the sidebar menu to configure the following settings in the content pane.
Field |
Value |
Credential Source |
Select Defined Certificate Authority. |
Certificate Authority |
Select the CA configured in Adding a Certificate Authority and a Request Template for MDM automation in VMware Workspace ONE. |
Certificate Template |
Select the request template configured in Adding a Certificate Authority and a Request Template for MDM automation in VMware Workspace ONE. |
Key Location |
Specify the location for the issued certificate: Software or Hardware. |