XenMobile: How to use PKI to create a certificate using the computer name?

XenMobile: How to use PKI to create a certificate using the computer name?

book

Article ID: CTX235795

calendar_today

Updated On:

Description

On certain environments it is necesary to create a certificate using the computer name instead the username 

Instructions

  1. First, you need to integrate your XenMobile with your PKI server -  https://support.citrix.com/article/CTX220328 | https://docs.citrix.com/en-us/xenmobile/server/authentication/pki-entities.html 
  2. Create a new template on your CA server based on your requirements
  3. Add your new Template on XenMobile > Settings > PKI Entities > Select your PKI and Click on it > Click on Edit >Templates > Add> 
  4. Then save your new configuration on XenMobile
  5. Go to XenMobile > Settings > Credential Providers > Add >
  6. Give a name to your new credential, then select your PKI Entity and Certificate template that you created before
  7. Click on next and match the "Certificate Signing Request" with the parameters that you set up on your Certificate template; on the Subject name please add your variable to generate the CSR on this specific case please add the macro        CN=${device.DEVICE_NAME}      to create a certificate based on the computer name.
  8. Finally please click on next and choose your preferred settings to your Credential Provider
In order to deploy the certificate to your devices you need to create a credential policy on XenMobile > Manage > Policies > Add > Credentials. The credential policy delivers certificates to your devices, on this implementation you need to request your certificate to your PKI server. Inside the credential provider configuration, you need to select your Credential Type as Credential Provider and under Credential provider select the one you created before that contains the correct certificate template and save your policy.

Once everything is done you can deploy the Credential policy to your devices and you should be able to receive new certificates based on the device name.


Note: On Mac Os computers the name will be taken from Hostname name
If you want to know your hostname please type on the terminal
scutil  --get HostName

​

Powered by Wolken Software