Create an authentication policy
To perform this action, you must have a user role that contains the Solution administrator permission.
In the Device Trust Manager menu, go to Authentication management > Authentication policies.
Select Create authentication policy.
Enter a Name for the policy.
Optionally, provide a Description.
Optionally, select the following settings based on your security requirements:
Reject expired authentication certificate: Select this option when you want Device Trust Manager to reject enrollment requests if the authentication certificate is past its validity end date
Reject revoked authentication certificate: Select this option when you want Device Trust Manager to check the revocation status of the authentication certificate and reject the enrollment requests if the certificate is revoked
Tip
Security guidance
For stricter certificate validation, select both the checkboxes. Clearing either checkbox might allow a device to authenticate with a certificate that is no longer valid or trusted for its intended use.
When you are ready, select Create new authentication policy.
The newly created authentication policy appears under the Authentication policies table with the policy status as Active.
What’s next?
Complete your authentication policy by adding the credentials your devices will use for secure authentication, such as passcodes, authentication certificates, authentication CAs, or ACME credentials.