Issue device certificates

In the Device Trust Manager menu, go to Blueprints.

Under the Device certificate issuance section, select Use blueprint.

Select Request certificate to submit a single certificate request.

Under the Certificate management policy section:

1. If you already have a key pair and a CSR, select I have the keypair and will provide the CSR or public key in the request

   Upload a CSV file or a zipped CSV containing the device data.

   1. Enter a Common name for the certificate.

   2. Select Submit certificate request.

2. If you want Device Trust Manager to generate the private key for each device, select Key pairs will be generated on the server side by this application, and the private key and certificate will be included in response.

   1. Enter a Common name for the certificate.

   2. Select Submit certificate request.

   3. Save the password and the certificate securely. If you lose them, they can’t be recovered.

Under Certificates & jobs, select View certificates to see your certificate request.

Alternatively, you can also view your requested certificates under Certificate management > Certificates.

In the Device Trust Manager menu, go to Blueprints.

Under the Device certificate issuance section, select Use blueprint.

Select Request a batch of certificates to submit your batch certificate request.

Select Next.

Under the Certificate management policy section:

1. If you already have the key pairs and the CSR, select I have generated the key pairs and will provide the CSRs or public keys in this batch request.

   1. Select Next.

      Either upload a ZIP file with individual CSR files or upload a CSV file with CSRs and required fields.

      Note

      There is no restriction on the number of devices you can register in a single job. However, the file size you upload can’t exceed 200 MB.

   2. Select Submit batch job request.

2. If you want Device Trust Manager to generate and encrypt the private key for each registration, select Key pairs will be generated as part of the batch job, and the private keys and certificates will be included in the batch response.

   1. Under the Private key encryption in batch response section, select the required certificate from the dropdown menu.

      Alternatively, select Generate a new certificate within your profile to generate a new authentication certificate.

   2. If you already have an encrypted certificate, select Provide a certificate for encryption, and upload the certificate.

   3. Select Next.

   4. Under the Upload a CSV containing certificate information section, upload your CSV file.

      See the CSV format for batch certificate enrollment for details on the required CSV structure to ensure successful batch processing.

   5. Select Submit batch job request.

Under Certificates & jobs, select View jobs to see your batch certificate request.

Alternatively, you can also view your requested batch job under Jobs.