Distribute Certificates Using Configuration Profiles
After communication between Jamf Pro and Active Directory Certificate Services (AD CS) has been established, you can use Jamf Pro to distribute certificates with AD CS as the certificate authority (CA) to computers and mobile devices in your environment using configuration profiles.
Note: Jamf Pro automatically redistributes the certificate via a configuration profile 10 days before the certificate expires.
Requirements
Before you can distribute certificates using configuration profiles, you must add a PKI Provider to Jamf Pro to use as the CA for certificates. For more information see the following:
-
PKI Certificates in the Jamf Pro Administrator's Guide
In addition, ensure the requirements for distributing configuration profiles are met. See the requirements in the following sections of the Jamf Pro Administrator's Guide:
Distributing a Certificate Using a Configuration Profile
-
Log in to Jamf Pro.
-
Do one of the following:
-
To create a computer configuration profile, click Computers at the top of the page, and then click Configuration Profiles.
-
To create a mobile device configuration profile, click Devices at the top of the page, and then click Configuration Profiles.
-
-
Click New.
-
Use the General payload to configure basic settings, including the level at which to apply the profile and the distribution method.
Only payloads and settings that apply to the selected level are displayed for the profile. -
Select the Certificate payload and click Configure.
-
Enter a display name and then choose an AD CS instance from the Select Certificate Option pop-up menu.
-
Use the settings on the pane to specify information about the CA.
-
Click Save.