Enable Workspace ONE UEM Console to Fetch and Use CA Certificates

You can add a user template in the CA server and configure the settings in the Workspace ONE UEM console to enable Workspace ONE UEM to fetch and use the CA certificates.

1. Add a user template in the CA server as a first step to enable Workspace ONE UEM to fetch certificates. See EOBO with AD CS via DCOM.

2. Add a Certificate Authority in the Workspace ONE UEM Console. See Certificate Authorities Settings.

   • You must have added a user template in the CA server.
   • You must have the name of the CA Issuer. Log in to the Active Directory(AD) server and run the certutil command from the command prompt to get the CA Issuer name.
   • Specify the Username for the CA to be of type service account.

3. Add a CA request template after you have added a Certificate Authority in the Workspace ONE UEM console. See Certificate Authorities Settings.

   • You must have added a user template in the CA server.
   • You must have added a CA in the Workspace ONE UEM console.

4. Update the security policies in the Workspace ONE UEM console to use the CA fetched certificate. See Security Policies.