Device administrator guide
To perform this action, you must have a user role that contains the Device administrator/Device creator permission.
Device administrators are assigned to users who need control over device lifecycle management, including enabling, disabling, deleting, and restoring devices. This role is often designated to users involved in ongoing device operations and support.
Tip
To learn more about certificates, certificate issuance and renewals, see Certificates.
In Device Trust Manager, certificates are used to establish device identities, authenticate devices, and secure communications. Certificates are issued to devices throughout their lifecycle for two primary uses: initial provisioning with Device Trust Manager and ongoing secure communication with other services.
Use this workflow to request a certificate for a specific device. This certificate is linked to a device record in Device Trust Manager, allowing you to manage the device throughout its lifecycle.
This is intended for organizations that need full device management capabilities, such as:
Tracking devices in a central inventory
Managing device lifecycles
Issuing bootstrap certificates for onboarding
Issuing operational certificates for ongoing device authentication
Opmerking
Requesting a device certificate for managed devices consumes an Advanced license.
Request a certificate for unmanaged devices
Revoke a certificate
Rename a device
Disable a device
This is intended for organizations that need full device management capabilities, such as:
Ensure that your Solution Administrator has already completed the following:
A device group is already created
A certificate management policy has been created
A CSV file containing device-specific details, such as device name, description, and subject common name, is present
In the Device Trust Manager menu, go to Certificate management > Certificates.
From the Device Group dropdown menu, select an appropriate device group.
From the Certificate management policy dropdown menu, select the certificate management policy associated with the device group.
On the Key generation type step:
Opmerking
The Key generation type option is displayed based on your selection of the Device group and the Certificate management policy.
I have the keypairs and will provide the CSRs or public keys in the request:
Upload a CSV file or a zipped CSV containing the device data. You can download the provided template for formatting guidance.
Key pairs will be generated server side by this application, and the private key and certificate will be included in response:
Select the Key generation type dropdown menu.
Provide a Common name for the certificate.
Optionally, provide an Organization name.
Click Add Value to provide an organization unit value (optional).
Provide a Description (optional).
Click Submit certificate request.
Download the certificate after successful submission of the certificate request.
Unlike certificate requests for managed devices, Unmanaged device certificates are issued without creating or referencing a device. This option is designed for organizations that need certificate-based device identities but don't require device inventory, lifecycle management, or device tracking.
A device group is already created
A certificate management policy has been created
A CSV file containing device-specific details such as device name, description, and subject common name
In the Device Trust Manager menu, go to Certificate management > Certificates.
From the Certificate management policy dropdown menu, select an appropriate policy.
On the Key generation type step:
Opmerking
The Key generation type option is displayed based on your selection of the Certificate management policy.
I have the keypairs and will provide the CSRs or public keys in the request:
Upload a CSV file or a zipped CSV containing the device data. You can download the provided template for formatting guidance.
Key pairs will be generated server side by this application, and the private key and certificate will be included in response:
Select the Key generation type dropdown menu.
Provide a Common name for the certificate.
Optionally, provide an Organization name.
Click Add Value to provide an organization unit value (optional).
Provide a Description (optional).
Select Submit certificate request.
Download the certificate after successful submission of the certificate request.
Operational certificates are short-lived x.509 certificates for device-service communication. These certificates have a short lifespan, can be revoked.
In the Device Trust Manager menu, select Certificate management > Certificates.
Tip
The Certificates table displays details of all the certificates issued on your account.
Select a required certificate from the list.
Click More actions > Revoke.
Select an appropriate Reason from the dropdown menu.
Optionally, provide a Description.
(Optional) Select the set revocation date in the past and select an appropriate date.
Click Revoke.
Perform the following steps to edit or modify a device name:
In the Device Trust Manager menu, go to Device management > Devices.
Tip
The Devices table displays details of all the devices issued to your account.
Select a required device from the list.
Click More actions > Edit.
Provide a new name for the device.
Click Update.
Perform the following steps to disable a device:
In the Device Trust Manager menu, go to Device management > Devices.
Opmerking
The Devices table displays details of all the devices issued on your account.
Select the required device from the list.
Click More actions > Disable.
Optionally, add a comment as a valid reason to disable the device.
Click Disable device.