While customer uses 3rd-party security scanner to scan MDM IP, there is warning: "Missing intermediate certificates or root anchor" 

For XenMobile Server, there is some preparation work to do, to get it all right. Basically, you’ll need to combine all the (.PEM) certificate files into one, upload that to XenMobile Server, and restart.

Steps are:

-----BEGIN CERTIFICATE-----
(server_certificate.pem content)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(issuing_ca_certificate.pem content)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(root_ca_certificate.pem content)
-----END CERTIFICATE-----

1. Combine individual (.PEM) certificate files (server, issuing and root CA) into one .PEM file by following instructions on this DigiCert site (you can use Notepad to achieve this). Your final .PEM file should look like this:
2. Upload the combined (.PEM) certificate file to XenMobile Server.
3. Restart all the XenMobile Server nodes (one by one).
4. Check if nodes picked up the certificate change (for example, by opening the XenMobile Server management interface with your browser – https://{node's_IP_address}:4443).
5. Check if certificate chain is in order as well – https://www.digicert.com/help/.

Problem Cause