Procedure

1. Under Apple Push Notification service (APNs) Settings, configure the following:
   • Certificate type: Select your certificate type.
   • Certificate: Select APNs certificate from the drop-down list, or upload a new one.
2. Under Simple Certificate Enrollment Protocol (SCEP) Settings, configure the following:
   1. Select Enable SCEP.
   2. If enabled, you must complete the following information:
      • SCEP user URL:
        http://SCEP_IP/certsrv/mscep
      • SCEP admin URL:
        For Windows Server 2008:
        http://SCEP_IP/certsrv/mscep_admin

   Note See Components of Mobile Security System for information on SCEP.

3. Under Client Profile Signing Credential, configure the following:
   • Client Profile Signing Credential: Select a certificate for signing credential from the drop-down list, or upload a new one.

   Note To configure the Mobile Device Agent on an iOS mobile device, Mobile Security installs an Install Profile on the mobile device. The Client Profile Signing Certificate is required to change the status of Install Profile to Verified. If you do not configure this setting, the Install Profile shows the status as Not Verified. Configuring this setting will display the Install Profile status as Verified on mobile devices.

4. Click Save.