Adding an Enrollment Certificate

Add an enrollment certificate to generate client certificates for Zero Trust Secure Access modules and connectors.

An enrollment certificate is an SSL certificate in .pem format. Download the certificate signing request (CSR) file from Trend Micro Vision One, and then generate the enrollment certificate from a certificate authority (CA). Zero Trust Secure Access supports the use of enrollment certificates on desktop and mobile devices.

For your organization's Zero Trust Secure Access modules and connectors, you can use the default certificates provided by Trend Micro Vision One or add an enrollment certificate to generate the required module and connector client certificates.

  1. From Secure Access Configuration > Private Access Configuration, on the Internal Applications tab, click Manage Certificates on the right side of the screen.
  2. On the Enrollment Certificates tab, click Add Certificate.

    The Add certificate panel appears.

  3. Specify a unique name and a description for the enrollment certificate.
  4. Add the "common name".
    Note:

    The common name will be used to generate the certificate signing request (CSR) and cannot be modified.

  5. Click Generate CSR.
  6. Click Download to download the Trend Micro generated CSR.
  7. Use the Trend Micro Vision One CSR file to generate the enrollment certificate in .pem format from a certificate authority (CA).
  8. Click Select File... and upload the enrollment certificate certificate.
    Note:

    After upload, the connector and module client certificates generate automatically.

  9. Click Save.