See below for creating an MDM automation profile to issue certificates with the PKI protocol.

To add a PKI profile in Workspace One

  1. In Workspace One, navigate to Resources > Profiles & Baselines > Profiles.
  2. In the content pane, click Add > Add Profile.
  3. Follow the wizard pages described below. 

Add Profile

Click on the name of the platform running the enrollment device.

Select Device Type

Click on the type of enrolled device. 

Select Context

Click on User Profile to enroll users or Device Profile to enroll devices.  

General

Click General in the sidebar menu to configure the following settings in the content pane.

Field

Value

​Name

Enter a name for the profile.

Smart Group

Select the smart group containing the managed users or devices. 

Credentials

Click Credentials in the sidebar menu to configure the user credentials. 

Field

Value

Credential Source

Select Defined Certificate Authority.

Certificate

Upload separately the certificates of the root and issuing CAs.

Certificate Store

Select Personal or Intermediate for profiles with the User Profile context.

Select Trusted Root for profiles with the User Device context.

Click the (plus) symbol to create a new credential with the following settings.

Field

Value

Credential Source

Select Defined Certificate Authority.

Certificate Authority

Select the CA configured in Adding a Certificate Authority and a Request Template for MDM automation in VMware Workspace ONE.

Certificate Template

Select the request template configured in Adding a Certificate Authority and a Request Template for MDM automation in VMware Workspace ONE.

Key Location

Specify the location for the issued certificate: Software or Hardware.

Certificate Store

Enter the name of the certificate store.