Device administrator guide
To perform this action, you must have a user role that contains the Device administrator/Device creator permission.
Device administrators are assigned to users who need control over device lifecycle management, including enabling, disabling, deleting, and restoring devices. This role is often designated to users involved in ongoing device operations and support.
Tip
To learn more about certificates, certificate issuance and renewals, see Certificates.
Before you begin:
Ensure that your Solution Administrator has already completed the following:
A device group is already created.
A certificate management policy has been created.
A CSV file containing device-specific details such as device name, description, and subject common name is present.
In the Device Trust Manager menu, go to Certificate management > Certificates.
From the Device Group dropdown menu, select an appropriate device group.
From the Certificate management policy dropdown menu, select the certificate management policy associated with the device group.
On the Key generation type step:
Note
The Key generation type option is displayed based on your selection of the Device group and the Certificate management policy.
I have the keypairs and will provide the CSRs or public keys in the request:
Upload a CSV file or a zipped CSV containing the device data. You can download the provided template for formatting guidance.
Key pairs will be generated server side by this application, and the private key and certificate will be included in response:
Select the Key generation type dropdown menu.
Provide a Common name for the certificate.
Optionally, provide an Organization name.
Click Add Value to provide an organization unit value (optional).
Provide a Description (optional).
Click Submit certificate request.
Download the certificate after successful submission of the certificate request.
Before you begin:
A device group is already created.
A certificate management policy has been created.
A CSV file containing device-specific details such as device name, description, and subject common name.
In the Device Trust Manager menu, go to Certificate management > Certificates.
From the Certificate management policy dropdown menu, select an appropriate policy.
On the Key generation type step:
Note
The Key generation type option is displayed based on your selection of the Certificate management policy.
I have the keypairs and will provide the CSRs or public keys in the request:
Upload a CSV file or a zipped CSV containing the device data. You can download the provided template for formatting guidance.
Key pairs will be generated server side by this application, and the private key and certificate will be included in response:
Select the Key generation type dropdown menu.
Provide a Common name for the certificate.
Optionally, provide an Organization name.
Click Add Value to provide an organization unit value (optional).
Provide a Description (optional).
Click Submit certificate request.
Download the certificate after successful submission of the certificate request.
Operational certificates are short-lived x.509 certificates for device-service communication. These certificates have a short lifespan, can be revoked.
In the Device Trust Manager menu, select Certificate management > Certificates.
Tip
The Certificates table displays details of all the certificates issued on your account.
Select a required certificate from the list.
Click More actions > Revoke.
Select an appropriate Reason from the dropdown menu.
Optionally, provide a Description.
(Optional) Select the set revocation date in the past and select an appropriate date.
Click Revoke.
Perform the following steps to edit or modify a device name:
In the Device Trust Manager menu, go to Device management > Devices.
Tip
The Devices table displays details of all the devices issued to your account.
Select a required device from the list.
Click More actions > Edit.
Provide a new name for the device.
Click Update.
Perform the following steps to disable a device:
In the Device Trust Manager menu, go to Device management > Devices.
Note
The Devices table displays details of all the devices issued on your account.
Select the required device from the list.
Click More actions > Disable.
Optionally, add a comment as a valid reason to disable the device.
Click Disable device.