Menu

Certificate templates

The CA server manages certificates through certificate templates. You can add multiple templates and modify them to standardize and simplify the process of issuing certificates.

Adding certificate templates

To add a certificate template, complete the following steps:

1. Navigate to Advanced > Certificate > Certificate Template.

2. On the “Certificate Template” page, click Add.

3. On the “Add Certificate Template” page, enter the following information:

  • Template Name: Assign a unique name for each certificate template.
  • Description: Enter a description for the certificate template.
  • Type: Only External is supported.
  • Platform: You can select Android, iOS, or both. When both platforms are selected, the usage types that can be commonly applied to them will be displayed.

Note: Depending on the device platform, the certificate usage type varies.

  • CA: Select a CA. Input information varies depending on the selected CA type.
  • CA Template Name: Enter the CA template name. The CA template name is required when ADCS type CA is selected.
  • Profile ID: Enter the profile ID. The profile ID is required when CertAgent type CA is selected.

Note: A primary profile will be used for an empty value.

  • CA Label: Enter the CA label. The CA label is required when EST type CA is selected.

Note: The label of the selected CA will be used for an empty value.

  • Subject Name: Enter a subject name in a CN={Subject name value} format.

Note: You can also click Lookup to open the reference item list and select an item from it. The reference value will be automatically entered.

  • Certificate Usage: Select a certificate usage type.
    • Wi-Fi: Authorizes connecting with AP for Wi-Fi.
    • VPN: Authorizes encrypted VPN communication when registering Knox Manage on devices.
    • Exchange: Authorizes user authentication and services in Exchange.
    • Knox Generic VPN: Authorizes encrypted VPN communication for Knox enabled Android devices.
    • Knox VPN: Authorizes encrypted VPN communication specialized for Samsung devices.
  • SAN Type: Select a SAN type, and then enter the SAN value. Then click to add.

Note: You can also click Lookup to open the reference item list and select a SAN reference item from it. The reference value will be automatically entered.

4. Click Save.

5. In the “OK” window, click OK.

Viewing certificate templates

Navigate to Advanced > Certificate > Certificate Template to view all the template information on the “Certificate Template” page.

  • To view the detailed information of the specific certificate template, click a template name from among the certificate templates on the list.
  • To view the detailed information of the specific CA, click a CA from among the certificate templates on the list.

Modifying certificate templates

To modify a certificate template, complete the following steps:

1. Navigate to Advanced > Certificate > Certificate Template.

2. On the “Certificate Template” page, click the checkbox for the certificate you want to modify, and the click Modify.

3. On the “Modify Certificate Template” page, modify the certificate template information.

  • Template Name: Assign a unique name for the certificate template.
  • Description: Enter a description for the certificate template.
  • Type: Only External is supported.
  • Platform: Select a device platform from among Common, Android or iOS.
  • CA: Select a CA type. Input information will vary depending on the selected CA type.
  • CA Template Name: Enter the CA template name. The CA template name is required when ADCS type CA is selected.
  • Profile ID: Enter the profile ID. The profile ID is required when CertAgent type CA is selected.

Note: A primary profile will be used for an empty value.

  • CA Label: Enter the CA label. The CA label is required when EST type CA is selected.

Note: The label of the selected CA will be used for an empty value.

  • Subject Name: Enter a subject name in a CN={Subject name value} format.

Note: You can also click Lookup to open the reference item list and select an item from it. The reference value will be automatically entered.

  • Certificate Usage: Select a certificate usage type.

Wi-Fi: Authorizes connecting with AP for Wi-Fi.

Note: The device configuration for Wi-Fi needs to be checked if Wi-Fi is selected as the certificate usage.

VPN: Authorizes encrypted VPN communication when registering Knox Manage on devices.

Note: The device configuration for VPN needs to be checked if VPN is selected as the certificate usage.

Exchange: Authorizes user authentication and services in Exchange.

Knox Generic VPN: Authorizes encrypted VPN communication for Knox enabled devices.

Note

  • This field appears only when Android is selected as the device platform.
  • The device configuration for VPN needs to be checked if Knox Generic VPN is selected as the certificate usage.

Knox VPN: Authorizes encrypted VPN communication specialized for Galaxy devices.

Note: This appears only when Android is selected as the device platform.

SAN Type: Select a SAN type and then enter the SAN value. Then click to add.

Note: You can also click Lookup to open the reference item list and select a SAN reference item from it. The reference value will be automatically entered.

4. Click Save.

5. In the “OK” window, click OK.

Deleting certificate templates

To delete certificate templates, complete the following steps:

1. Navigate to Advanced > Certificate > Certificate Template.

2. On the “Certificate Template” page, click the checkbox for the certificate template you want to delete, and the click Delete.

3. In the “Delete Certificate Template” window, click OK.

Note: You can delete the template in use only when the Android and iOS settings have been deleted from the device management profile.