diff --git a/docs/.gitbook/assets/image (1) (1).png b/docs/.gitbook/assets/image (1) (1).png index 9170eb0..12bb8b0 100644 Binary files a/docs/.gitbook/assets/image (1) (1).png and b/docs/.gitbook/assets/image (1) (1).png differ diff --git a/docs/.gitbook/assets/image (1).png b/docs/.gitbook/assets/image (1).png index 12bb8b0..9477884 100644 Binary files a/docs/.gitbook/assets/image (1).png and b/docs/.gitbook/assets/image (1).png differ diff --git a/docs/.gitbook/assets/image (2) (1).png b/docs/.gitbook/assets/image (2) (1).png index e72dec3..60f92e5 100644 Binary files a/docs/.gitbook/assets/image (2) (1).png and b/docs/.gitbook/assets/image (2) (1).png differ diff --git a/docs/.gitbook/assets/image (2).png b/docs/.gitbook/assets/image (2).png index 60f92e5..cc90f98 100644 Binary files a/docs/.gitbook/assets/image (2).png and b/docs/.gitbook/assets/image (2).png differ diff --git a/docs/.gitbook/assets/image (3) (1).png b/docs/.gitbook/assets/image (3) (1).png new file mode 100644 index 0000000..60f92e5 Binary files /dev/null and b/docs/.gitbook/assets/image (3) (1).png differ diff --git a/docs/.gitbook/assets/image (3).png b/docs/.gitbook/assets/image (3).png index 60f92e5..12bb8b0 100644 Binary files a/docs/.gitbook/assets/image (3).png and b/docs/.gitbook/assets/image (3).png differ diff --git a/docs/.gitbook/assets/image.png b/docs/.gitbook/assets/image.png index 12bb8b0..793c027 100644 Binary files a/docs/.gitbook/assets/image.png and b/docs/.gitbook/assets/image.png differ diff --git a/docs/SUMMARY.md b/docs/SUMMARY.md index dbb231e..a171743 100644 --- a/docs/SUMMARY.md +++ b/docs/SUMMARY.md @@ -48,6 +48,7 @@ * [3rd-party MDM Solutions](certificate-deployment/static-certificates/README.md) * [Kandji](certificate-deployment/static-certificates/kandji.md) * [Mosyle](certificate-deployment/static-certificates/mosyle.md) + * [SOTI MobiControl](certificate-deployment/static-certificates/soti-mobicontrol.md) * [Domain Controller Certificates](certificate-deployment/domain-controller-certificates.md) * [Enrollment REST API](certificate-deployment/api-certificates.md) * [Manage Certificates](certificate-deployment/manage-certificates.md) diff --git a/docs/certificate-deployment/static-certificates/README.md b/docs/certificate-deployment/static-certificates/README.md index a789515..0c074dd 100644 --- a/docs/certificate-deployment/static-certificates/README.md +++ b/docs/certificate-deployment/static-certificates/README.md @@ -16,16 +16,15 @@ To enable the feature, you must add two application settings in your SCEPman ser 1. Navigate to **App Services** 2. Then choose your SCEPman app -3. -4. Select **New application setting** -5. Type **AppConfig:StaticValidation:Enabled** as Name -6. Type **true** as Value -7. Confirm with **OK** -8. Select **New application setting** again -9. Type **AppConfig:StaticValidation:RequestPassword** as Name -10. Type your **key/password**, that you have generated earlier, as Value -11. Confirm with **OK** -12. Save the application settings +3. Select **New application setting** +4. Type **AppConfig:StaticValidation:Enabled** as Name +5. Type **true** as Value +6. Confirm with **OK** +7. Select **New application setting** again +8. Type **AppConfig:StaticValidation:RequestPassword** as Name +9. Type your **key/password**, that you have generated earlier, as Value +10. Confirm with **OK** +11. Save the application settings ## MDM Configuration diff --git a/docs/certificate-deployment/static-certificates/soti-mobicontrol.md b/docs/certificate-deployment/static-certificates/soti-mobicontrol.md new file mode 100644 index 0000000..7792bf0 --- /dev/null +++ b/docs/certificate-deployment/static-certificates/soti-mobicontrol.md @@ -0,0 +1,53 @@ +# SOTI MobiControl + +SCEPman can be integrated with SOTI MobiControl as a Certificate Authority. By connecting both systems through SCEPman's Static SCEP interface, MobiControl-enrolled devices can obtain device certificates from SCEPman. + +For more general information about 3rd-party MDM solutions and SCEPman integration please check [here](./). + +## SCEPman configuration + +1. Please do the general setup of SCEPman as described [in our Getting Started Guide](../../scepman-deployment/deployment-guides/). +2. Please enable the Static SCEP interface of SCEPman as described [here](./#scepman-configuration). + +## SOTI MobiControl configuration + +### Add Certificate Authority + +3. In Soti Mobicontrol, navigate to System Settings > Global Settings > Services > Certificate Authority. + +

Soti MobiControl Certificate Authority Page

+ +4. Click the Add button to create a new Certificate Authority. + +

Soti MobiControl Certificate Authority Details

+ +* Enter a **name** for this Certificate Authority. +* Select `Generic SCEP` for **Certificate Type**. +* Select `SCEP` for **Configuration Type**. +* For the **Service URL**, Copy and Paste the Static MDM URL from your SCEPman Portal. +* Enable **Use Static Challenge**. +* Enter the **Static Challenge** that was created during Step 2. above. +* Enable **Use SCEP Client**. +* For the **Thumbprint** Copy and Paste the CA Thumbprint from your SCEPman Portal. +* Set the **Retries** and **Retry Delay** as desired (or leave at Default). + +### Add Certificate Template + +5. Click the Add button to add a **Certificate Template**. + +

Soti MobiControl Certificate Template Detail

+ +* Enter a **name** for this MobiControl Template. +* Enter a **Subject Name**. + +{% hint style="info" %} +The format for the **Subject Name** field can only be the following format: “CN=%DEVICENAME%". Clicking the gear selection will display all of the variables that can be used. Be sure to include the “CN=” at the beginning of the entry. +{% endhint %} + +* Leave **Alternative Subject** empty. +* **Certificate Target** defaults to `Device`. +* Select the desired option for the remaining fields: **Certificate Usage**, **Key Size**, **Remove old certificates upon successful renewal**, and **Key Protection**. +* Click Add, then Save to save the Template + +6. Click **Save** to save the Certificate Authority. +7. **Create a Profile** in Soti MobiControl to assign this to your devices. There are multiple ways of achieving this in Soti MobiControl, as such, this document will not detail those methodologies.