[Device Certificate] Device Certificate Deployment Procedure via MDM Service

Overview

This article explains the procedure for downloading Device Certificates from the Access Control Administration and distributing Device Certificates via your MDM services.

Supported Integrations

* More services will be added in the future.
"BizMobile", "OptimalBiz", "mobiconnect", "Lanscope An", "CLOMO MDM", "KDDI Smart Mobile Safety Manager", "Business Concierge Device Management", "SS1 Cloud", "SKYSEA Client View"

* HENNGE cannot respond to inquiries regarding certificate distribution via MDM services.

Procedure

Preparation

1. Confirm the system requirements.
   For HENNGE One system requirements, please refer to HENNGE One System Requirements.
   For MDM, please confirm with your service provider that Device Certificates (client certificates) can be distributed to the OS of the target devices.
2. Issue Device Certificates for the number of devices you wish to distribute, following the steps below.
   [Device Certificate] Issuing Device Certificates

Enabling the Bulk Download Feature for Device Certificates

1. Enable the bulk download feature for Device Certificates to provide certificates to your MDM.
   * By default, the bulk download feature for Device Certificates is OFF in Access Control.
   To use the bulk download feature, you must agree to the [Terms of Use for the Bulk Download Feature] and submit an application.

   ---

   [Terms of Use for the Bulk Download Feature]

   • A contract for the number of Device Certificates required for certificate authentication is necessary.
   • Reverse engineering or duplication of Device Certificates is prohibited.
   • Distribution of Device Certificates using third-party tools is not supported. Please consider this at your own discretion.
   • When distributing Device Certificates using third-party tools, device-specific controls (such as MAC address or IMEI binding) will be disabled. If confirmation is required, please perform it on the MDM side. (Note 1)
   • Any issues arising from the distribution or use of certificates obtained via the bulk download feature are not supported.

   • If any use in violation of the above agreed terms is discovered, use of the relevant feature may be suspended without the applicant's consent.

     Note 1: When distributing Device Certificates from Access Control, the "Cybertrust DeviceiD Importer" feature automatically checks whether the device ID registered at the time of certificate issuance matches the installation device.
     However, when distributing via third-party MDM, this feature is not available, and Access Control cannot confirm or manage the status.
     Therefore, device binding must be performed on the MDM side.

   ---

2. If you wish to use the bulk download feature after confirming the terms, please contact HENNGE Support, your implementation support representative, or your sales representative.
3. You will receive an application form from your representative. Please apply for the bulk download feature according to the instructions in the form.
   * It takes approximately 5 business days from receipt of the application by HENNGE to enable the bulk download feature.

(After Enabling the Feature) Downloading and Distributing Certificates

1. Refer to the following article to download all issued certificates.
   [Device Certificate] Downloading the Device Certificate List
2. Extract the downloaded ZIP file and confirm that the certificate files exist in the certs folder.

3. Distribute the certificates to each device using your MDM.
   * For questions regarding MDM service operations, please contact each MDM provider.

   For manuals of supported integrations, please refer to the following:
   https://teachme.jp/35563/f/room8eQKGOPr
   In addition, other services that meet the necessary integration requirements may also be supported.
   Please check with your MDM vendor and try as needed.
   * While we will provide manuals for MDM services not yet documented to the extent possible, we cannot guarantee their availability.
    

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.