Home / Knox Manage / New Knox Manage console / Manage certificates /

Manage certificates

Last updated April 28th, 2026

Digital certificates are used to secure the communication of encrypted data, such as with authenticating the identity of users and devices.   enable   secure communication of encrypted data. In Knox Manage, you can register and manage certificates which aren’t issued by a certificate authority (CA) and distribute them to devices.

Certificates added in the original console can be managed in the new console. Similarly, certificates added in the new console can be managed in the original console.

To learn how to connect to and manage a CA , see Manage certificate authorities.

Upload a certificate

Complete the following steps to upload a certificate:

  1. Go to the Certificates page and click the UPLOAD CERTIFICATE tab.
  2. On the Certificates page, click UPLOAD CERTIFICATE and configure the fields below.
Field Description
Certificate name (alias) Assign a unique alias Only alphanumeric characters and underscores (_) are accepted. The maximum number of characters allowed is 100.
Purpose

Select a purpose for the certificate:

  • Wi-Fi — Authorizes connecting with a Wi-Fi Access Point (WAP).
  • VPN — Authorizes encrypted VPN communication when registering Knox Manage on devices.
  • CA Cert — Authorizes communication with a registered CA based on your public key.
  • Supervision Certificate — Authorizes iOS device pairing to use the Control Nearby Devices mode.
  • Code Signing Certificate — Verifies code authenticity, ensures integrity, and protects against malicious code.
  • Syslog — Logs system events, centralizes monitoring, and detects security threats.
  • Identity provider — Authenticates users, authorizes access, and enables Single Sign-On (SSO).
Type

Select a type for the certificate:

  • User — Client certificate issued to a device to authenticate the identity of the client to the server.
  • Server — Certificate issued for SSL/TLS or similar to authenticate the identity of the server to the client, thus establishing an encrypted communication channel.
  • Root —  Certificate issued by a CA to verify the server.

File type

Click and select a certificate file in P12, PFX, CER, DER, CRT or PEM format:

  • P12, PFX — Used for private keys and certificates.
    • Password — Enter the password for the certificate so the user doesn't need to enter it on their device.
  • CER, DER, CRT, PEM — Used for keys and certificates.
Description Enter a description for the certificate (optional).
  1. Click UPLOAD. The certificate will be registered with Knox Manage.

Edit a certificate

You can edit certificates as follows:

  1. Open the Certificates page.

  2. Select the certificate you want to modify, then click ACTIONS > Edit certificate.

  3. On the Edit certificate page, edit certificate information as needed.

    The Purpose and Type values of external certificates can’t be modified.

  4. Click Save.

Delete a certificate

To delete a certificate, complete the following steps:

  1. Open the Certificates page.
  2. Select the certificate you want to delete, then click ACTIONS > Delete certificate.
  3. In the Delete certificate window, click DELETE.

The certificate is deleted.

On this page

Is this page helpful?