Microsoft CA integration

IBM® MaaS360® allows integration with the Microsoft Active Directory Certificate Services for automatic delivery of device certificates to enrolled devices.

The signed certificates are generated through the Microsoft Registration Authority (RA) or the Network Device Enrollment Service (NDES) by using the Simple Certificate Enrollment Protocol (SCEP). Enable NDES on your Windows 2008 server, create certificate templates on the NDES server, create certificate templates in MaaS360, and configure policies in MaaS360 to automatically deliver certificates.

The following prerequisites apply to integration with the Microsoft CA.

Microsoft Enterprise CA must be functional on your corporate network.
You must have the required administrative rights on the Windows server and the CA.