Target Audience
- Administrators using device certificates in Access Control
Purpose
- This document explains the procedure for administrators to issue device certificates.
Notes
- This article is based on the product specifications as of June 2025 and may change without notice.
- Global administrator privileges or device certificate administrator privileges in Access Control are required to verify actual screens or change settings.
- Please refer to the following article for how to access the administration console.
[Access Control] How to log in to the administration console - If you want to change the content of the email sent to users when issuing a device certificate, please refer to the following article.
[Access Control] Device Certificate Settings
Procedure
1. Access the [Certificate] - [Device Certificate] from the left menu of the Access Control administration console.
2. Select [+ Register Certificates].
3. Fill in the necessary information for certificate issuance
The number of certificates that can be issued at one time is limited to the number of device certificates in your contract.
If you exceed the limit, a warning will be displayed on the certificate registration screen.
If entering directly
Follow the table in Step 4 to fill in the necessary information for certificate registration in each input field. (*1)
If registering in bulk using a template
- Select [Device Certificate Registration List] to download the template. (*2)
- Follow the table in Step 3 to fill in the necessary information in the file, then upload the file from [Drag & Drop or Select File]. (*3)
* The file must be created with UTF-8 character encoding.
* Supported upload formats are XLS, XLSX, CSV, or TSV.
* If an error occurs and some certificates are not registered, select [Download Unregistered Certificate List (CSV)] to download the list of unregistered certificates in CSV format. Edit this list and upload it again to extract and re-register only the unregistered parts. (*4)
4. Fill in each column of the certificate registration screen or template file according to the table below.
※ For each device certificate to be issued, fill in one line.
※ If issuing multiple device certificates at once, fill in the number of lines corresponding to the number of certificates to be issued.
For some items, the item name or input value differs between direct screen entry and file use.
They are listed as [Screen Input / File Entry].
| Item | Description |
| Direct Entry: Username File: User |
Specify the Access Control username of the user who will use the issued device certificate. ※ Even if the login type is shared, you must specify the username. |
| Direct Entry: Login File: Login Type |
Select and enter from the following three types. Personal Type Only the user specified in "User" above can use it. Passwordless Type Shared Type |
| OS |
Select and enter the OS of the device on which the device certificate will be installed from the following. If installing on macOS If installing on Windows If installing on iOS If installing on Android If installing on Chromebook |
| Device ID Type |
The device ID type that can be specified varies depending on the OS specified in "OS" above. If "OS" is macos If "OS" is windows If "OS" is ios If "OS" is Android If "OS" is chromebook |
| Device ID |
It varies depending on the device ID type selected in "Device ID Type" above. If "Device ID Type" is [MAC / mac] or [MAC User / mac-user] If "Device ID Type" is [IMEI / imei] If "Device ID Type" is [UDID / udid] If "Device ID Type" is [GUID / guid] If "Device ID Type" is [Serial / serial] Please refer to the following article for how to check the device ID. |
| Recipient Email Address |
An email describing how to install the device certificate will be sent to the email address specified in this item. The "Recipient Email Address" does not need to be linked to the "User", and if the administrator installs the device certificate on behalf of the user, the administrator's own email address can also be specified. ※ If issuing a device certificate to a Chromebook, leave the recipient email address blank. |
| Email Subject Note | The content specified in this item will be inserted into the subject of the email describing how to install the device certificate. |
| Description | The content specified in this item is a custom note specified by the administrator. This item can be edited later. |
| Language |
Select the language of the email describing how to install the device certificate. If in English If in Japanese ※ If issuing a device certificate to a Chromebook, leave the language blank. |
5. Confirm that there are no errors in the information entered for certificate issuance.
Ensure that the status to the left of each certificate registration line is not an error.
By enabling [Display only rows with errors], you can switch to displaying only error rows.
6. Select [Register X Certificates].
Clicking the button will send a certificate installation email to the "Installation Email".
7. In the [Log Management] - [Device Cert Operations] of the Access Control administration console's left menu, confirm that a row with "Register" is displayed in the operation status of the device certificate.
Immediately after certificate registration, the "Status" will display "Processing".
After the email is sent to the target email address, the "Status" will display "Completed" as follows.