Skip to main content

Certificates

KB-Business-artical-page.png

This guide details how administrators can upload, manage, and deploy digital security certificates across enterprise iOS endpoints using the Mobile Guardian Dashboard.

Certificate Management Overview

Digital certificates establish secure trust anchors across corporate hardware. Certificates uploaded in this workspace are automatically bundled into the global Baseline Profile and distributed fleet-wide to all enrolled iOS endpoints.

Common enterprise use cases include deploying:

  • Custom Root Certificate Authorities (CAs) for SSL/TLS inspection.
  • Wi-Fi Network Certificates for WPA2/WPA3 Enterprise 802.1X authentication.
  • VPN Trust Credentials for secure remote connectivity.

Supported Certificate Formats

Certificate Encoding Format

File Extension

Common Operational Usage

DER-encoded.cerBinary-encoded X.509 root or intermediate certificates.
PEM-encoded.crtBase64 ASCII-encoded certificates.
PKCS12-encoded.p12Combined certificate and private key archive (requires password validation).

Uploading a Security Certificate

Access Certificate Management:

  • Log in to the Mobile Guardian Dashboard, navigate to Settings, and select Certificates.

Define Certificate Metadata:

  • Name: Enter a descriptive identifier for the certificate (e.g., Corp-Root-CA-2026 or WiFi-8021X-Cert).
  • Certificate Type: Select the encoding format (DER-encoded, PEM-encoded, or PKCS12-encoded) from the dropdown menu.

Attach Certificate File & Credentials:

  • Click Select Certificate and browse for the certificate file on your local computer. If uploading a PKCS12 (.p12) file containing a private key, enter the associated private key password in the Password (Optional) field.

Deploy:

  • Click Add Certificate. The system automatically updates the global Baseline Profile payload and pushes the certificate to all enrolled iOS assets.

Managing Active Certificates

Uploaded certificates appear under the Available Certificates inventory table:

  • Review Active Inventory: Inspect active certificates by Certificate Name and Format.
  • Revoke / Remove Certificate: Click the Trash Can (Delete) icon under the Actions column to remove a certificate.

Critical Policy Removal Warning

Deleting a certificate from the dashboard instantly removes it from the global Baseline Profile. Upon the next sync cycle, the certificate will be revoked from all connected iOS endpoints, which may interrupt corporate Wi-Fi or VPN connections relying on that trust chain.